Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/36040ef2-bf38-3363-a053-8a2a4035ecd1.roa
File:                     36040ef2-bf38-3363-a053-8a2a4035ecd1.roa (raw, json)
Hash identifier:          HvPsYgczKscyoydV9L+KZv8Z6t/XGsVdAVpJ+8bdghc=
Subject key identifier:   E2:44:67:E2:0B:87:BB:A6:C5:FE:08:40:37:E0:AA:AD:03:89:7E:00
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A17263F402A6A81F2C52F3700
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/36040ef2-bf38-3363-a053-8a2a4035ecd1.roa
Signing time:             Thu 05 Jun 2025 12:41:25 +0000
ROA not before:           Thu 05 Jun 2025 12:41:25 +0000
ROA not after:            Wed 03 Sep 2025 12:41:25 +0000
asID:                     396574
IP address blocks:        192.34.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:17:26:3f:40:2a:6a:81:f2:c5:2f:37:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun  5 12:41:25 2025 GMT
            Not After : Sep  3 12:41:25 2025 GMT
        Subject: CN=d1cd122f-9a9c-48c8-b8b8-aa9d8189e8b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:db:3d:ca:d1:b7:b1:ac:75:28:2e:59:cb:7c:
                    01:ec:f8:19:54:b7:eb:2d:b2:ae:c2:34:96:59:f7:
                    f4:f2:0a:98:d5:05:45:14:5a:e5:d8:77:d4:79:1a:
                    49:89:97:ff:47:d1:07:b9:98:26:8b:49:d0:33:9d:
                    a8:2e:0b:15:ca:a4:28:69:76:fd:c1:fc:b9:ad:06:
                    57:55:ee:99:d9:61:3d:21:63:3b:80:45:f6:72:dd:
                    ce:73:3e:9b:90:cd:f7:e4:ab:29:6a:0e:09:89:bf:
                    05:db:ca:c4:40:42:18:91:5f:3b:3b:49:93:9c:c1:
                    6b:1a:24:14:e9:b1:f9:ec:a5:a6:4f:2a:71:f4:94:
                    05:c8:1e:9a:9a:15:42:a2:02:2f:62:e4:35:0e:22:
                    fe:d4:39:2b:04:de:50:dc:8f:4f:d2:76:2d:14:c0:
                    30:44:3a:b2:ba:18:ab:be:e5:28:01:a1:92:f7:69:
                    2b:27:fc:10:71:72:19:0b:b7:c4:56:23:85:0f:bd:
                    e5:11:3f:e7:e9:66:94:30:57:67:e2:07:1d:d4:3a:
                    03:a3:26:e2:25:ba:43:e3:6f:11:6e:12:02:3b:c1:
                    b4:b1:1a:7b:ff:53:09:3c:4f:49:b7:e2:64:b9:64:
                    b3:3a:f1:7b:48:cf:b2:84:17:67:b2:13:6c:8e:63:
                    57:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:44:67:E2:0B:87:BB:A6:C5:FE:08:40:37:E0:AA:AD:03:89:7E:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/36040ef2-bf38-3363-a053-8a2a4035ecd1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.34.234.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:8f:81:f8:db:bc:19:f2:ba:b5:8b:5f:f9:d5:d3:96:5a:0d:
         06:e6:d6:cb:d5:7f:85:50:35:ae:d1:57:98:72:eb:69:6b:40:
         18:0a:c0:49:49:4a:28:be:03:76:9c:46:c4:c2:9e:f8:56:fc:
         d6:b0:ac:aa:62:1e:8b:29:8e:dc:b0:f1:49:75:3f:9f:23:a3:
         cb:cd:87:08:b9:ba:aa:0d:32:a7:51:3b:ff:94:af:7b:fa:e9:
         b9:d4:46:40:44:bc:46:f3:e1:49:93:5a:2b:09:c4:5f:ea:ff:
         4d:4b:1e:03:b6:89:2a:94:c7:a3:f5:c7:a5:1c:5d:20:55:ec:
         21:4d:e1:ee:68:94:20:8c:47:1b:eb:83:e5:a5:52:2d:75:f3:
         18:89:4e:56:ae:5d:5e:a6:87:d5:e9:8c:a5:19:66:4c:c3:bb:
         22:8d:37:d5:b4:8b:36:27:f0:4a:27:d4:19:23:78:e4:7b:ed:
         34:5c:9e:e0:e2:3c:0b:e5:54:a9:56:d6:6a:2b:8a:a4:27:5d:
         87:4d:0f:2e:7b:21:83:68:e4:0f:9e:c3:50:67:7c:47:77:7b:
         fd:c3:a5:cf:47:e1:cc:74:bd:8f:9d:63:ab:42:ec:ed:c6:9c:
         da:16:f8:33:ab:79:87:aa:34:e3:8b:94:45:12:dd:ad:e5:f5:
         63:6a:71:49
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoXJj9AKmqB8sUvNwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDYwNTEyNDEyNVoXDTI1MDkwMzEyNDEyNVowLzEtMCsGA1UEAxMk
ZDFjZDEyMmYtOWE5Yy00OGM4LWI4YjgtYWE5ZDgxODllOGI0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgts9ytG3sax1KC5Zy3wB7PgZVLfrLbKuwjSW
Wff08gqY1QVFFFrl2HfUeRpJiZf/R9EHuZgmi0nQM52oLgsVyqQoaXb9wfy5rQZX
Ve6Z2WE9IWM7gEX2ct3Ocz6bkM335Kspag4Jib8F28rEQEIYkV87O0mTnMFrGiQU
6bH57KWmTypx9JQFyB6amhVCogIvYuQ1DiL+1DkrBN5Q3I9P0nYtFMAwRDqyuhir
vuUoAaGS92krJ/wQcXIZC7fEViOFD73lET/n6WaUMFdn4gcd1DoDoybiJbpD428R
bhICO8G0sRp7/1MJPE9Jt+JkuWSzOvF7SM+yhBdnshNsjmNXoQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOJEZ+ILh7umxf4IQDfgqq0DiX4AMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMzYwNDBlZjItYmYzOC0z
MzYzLWEwNTMtOGEyYTQwMzVlY2QxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCLqMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJiPgfjbvBnyurWLX/nV05ZaDQbm1svVf4VQNa7RV5hy62lrQBgKwElJ
Sii+A3acRsTCnvhW/NawrKpiHospjtyw8Ul1P58jo8vNhwi5uqoNMqdRO/+Ur3v6
6bnURkBEvEbz4UmTWisJxF/q/01LHgO2iSqUx6P1x6UcXSBV7CFN4e5olCCMRxvr
g+WlUi118xiJTlauXV6mh9XpjKUZZkzDuyKNN9W0izYn8Eon1BkjeOR77TRcnuDi
PAvlVKlW1moriqQnXYdNDy57IYNo5A+ew1BnfEd3e/3Dpc9H4cx0vY+dY6tC7O3G
nNoW+DOreYeqNOOLlEUS3a3l9WNqcUk=
-----END CERTIFICATE-----
Generated at Fri Jun 6 19:38:58 2025 by rpki-client