Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/50a47237-20f7-3d8c-a5b0-06abbaa8c917.roa
File:                     50a47237-20f7-3d8c-a5b0-06abbaa8c917.roa (raw, json)
Hash identifier:          3okK1nu9H1lD6Xs5LWzWFSmRcIsY01xj1OTP1k2mkWE=
Subject key identifier:   F0:E3:F5:47:48:E4:3C:06:37:07:B6:65:A0:C2:48:35:32:D8:FA:4D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285849FF7588F4DED10BC23E992500
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/50a47237-20f7-3d8c-a5b0-06abbaa8c917.roa
Signing time:             Wed 28 May 2025 01:00:49 +0000
ROA not before:           Wed 28 May 2025 01:00:49 +0000
ROA not after:            Tue 26 Aug 2025 01:00:49 +0000
asID:                     397209
IP address blocks:        192.34.234.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ff:75:88:f4:de:d1:0b:c2:3e:99:25:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 28 01:00:49 2025 GMT
            Not After : Aug 26 01:00:49 2025 GMT
        Subject: CN=518c99d7-07ba-474a-a767-2b30c77a3ce1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:2f:a4:04:3c:87:7f:1c:59:18:5c:bb:0b:27:
                    41:83:44:57:ce:34:6e:09:c9:c9:bc:77:1e:a5:5a:
                    cb:59:60:13:ba:bb:43:2e:3a:f2:57:a5:28:cc:86:
                    5d:6a:31:5f:c9:2e:70:81:d2:49:f4:b6:ff:4f:03:
                    82:87:ff:5d:7b:a4:4e:7a:82:0d:8f:fc:f0:1a:93:
                    b9:33:32:9a:76:c2:c4:b3:fa:28:a1:b4:48:bb:d9:
                    a1:d6:12:bb:79:a1:89:a6:61:c6:a5:d7:f6:9a:39:
                    b9:84:83:3b:c4:18:c6:4b:29:ae:7b:b1:8f:5e:65:
                    93:b3:e5:6b:bc:05:4a:9f:65:7e:b9:14:d9:66:c2:
                    1d:9d:5a:7e:15:1a:16:67:dc:b6:33:f8:19:81:43:
                    b4:ed:13:4a:31:d7:6d:bc:9a:de:d5:40:38:e0:24:
                    37:50:bd:05:f3:fe:21:ea:98:2e:d2:2c:c5:b0:57:
                    95:90:48:c5:35:5b:76:77:2a:e6:48:42:08:19:54:
                    57:5a:89:32:4c:e5:0a:44:5a:9f:e5:53:38:4a:56:
                    dc:ed:eb:f5:96:f5:fc:8a:84:3b:af:fb:58:01:38:
                    e9:8f:74:ef:39:58:d6:6c:3a:40:b6:f9:0a:cd:8e:
                    37:15:1b:9b:b6:58:f1:7b:67:78:db:e0:2f:0d:2e:
                    14:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:E3:F5:47:48:E4:3C:06:37:07:B6:65:A0:C2:48:35:32:D8:FA:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/50a47237-20f7-3d8c-a5b0-06abbaa8c917.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.34.234.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:a3:13:1b:03:ca:f7:18:68:fb:98:b1:f8:69:c5:29:d8:81:
         12:6b:26:9c:dd:d6:9c:55:96:f8:23:c6:c5:00:8d:42:90:d5:
         1f:d9:b2:57:53:ef:d4:80:e3:84:27:13:b8:e3:47:16:ac:b5:
         f7:1b:2e:d3:12:5f:0e:99:5c:56:43:49:d3:06:9d:5b:10:e9:
         f7:60:0e:34:9a:64:e9:2e:61:37:9f:ed:0b:52:33:4e:95:6f:
         6d:90:96:6a:5b:f3:b6:23:e3:9e:5c:f6:ca:1a:5b:dd:72:a9:
         1e:ed:35:ff:8c:4d:41:19:49:32:ef:fa:24:95:ed:e8:e9:3e:
         a7:cc:e2:6d:c2:cb:b7:03:ba:d0:eb:31:91:df:fb:8f:bb:41:
         43:c0:e9:98:9a:b1:44:4b:69:ec:a4:11:cb:cd:1b:df:9c:da:
         c1:f7:9c:64:dc:d1:3a:60:53:c7:17:66:d7:3b:84:6d:56:0d:
         85:32:b9:98:31:02:d1:ea:a6:98:f0:4c:b2:2f:c7:ca:32:59:
         95:b9:67:58:53:07:9c:b8:47:f8:2b:11:03:42:b9:d2:7f:38:
         78:4c:ed:e8:1a:86:fe:5e:60:d6:02:09:f7:31:bf:19:53:0c:
         ac:ab:2f:7f:0d:77:6c:5e:83:2e:74:51:7b:cd:94:81:69:a8:
         b4:b0:8d:66
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEn/dYj03tELwj6ZJQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDUyODAxMDA0OVoXDTI1MDgyNjAxMDA0OVowLzEtMCsGA1UEAxMk
NTE4Yzk5ZDctMDdiYS00NzRhLWE3NjctMmIzMGM3N2EzY2UxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqC+kBDyHfxxZGFy7CydBg0RXzjRuCcnJvHce
pVrLWWATurtDLjryV6UozIZdajFfyS5wgdJJ9Lb/TwOCh/9de6ROeoINj/zwGpO5
MzKadsLEs/ooobRIu9mh1hK7eaGJpmHGpdf2mjm5hIM7xBjGSymue7GPXmWTs+Vr
vAVKn2V+uRTZZsIdnVp+FRoWZ9y2M/gZgUO07RNKMddtvJre1UA44CQ3UL0F8/4h
6pgu0izFsFeVkEjFNVt2dyrmSEIIGVRXWokyTOUKRFqf5VM4Slbc7ev1lvX8ioQ7
r/tYATjpj3TvOVjWbDpAtvkKzY43FRubtljxe2d42+AvDS4UuwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFPDj9UdI5DwGNwe2ZaDCSDUy2PpNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNTBhNDcyMzctMjBmNy0z
ZDhjLWE1YjAtMDZhYmJhYThjOTE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCLqHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCfoxMbA8r3GGj7mLH4acUp2IESayac3dacVZb4I8bFAI1CkNUf2bJX
U+/UgOOEJxO440cWrLX3Gy7TEl8OmVxWQ0nTBp1bEOn3YA40mmTpLmE3n+0LUjNO
lW9tkJZqW/O2I+OeXPbKGlvdcqke7TX/jE1BGUky7/okle3o6T6nzOJtwsu3A7rQ
6zGR3/uPu0FDwOmYmrFES2nspBHLzRvfnNrB95xk3NE6YFPHF2bXO4RtVg2FMrmY
MQLR6qaY8EyyL8fKMlmVuWdYUwecuEf4KxEDQrnSfzh4TO3oGob+XmDWAgn3Mb8Z
Uwysqy9/DXdsXoMudFF7zZSBaai0sI1m
-----END CERTIFICATE-----
Generated at Sun Jun 8 00:46:21 2025 by rpki-client