Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6a0cd91b-9c32-3b46-bcf4-3e003a576acc.roa
File:                     6a0cd91b-9c32-3b46-bcf4-3e003a576acc.roa (raw, json)
Hash identifier:          0GahJTbxwt3S7iNI291u3Nsslp+9tPYqVt/XrrI6lG8=
Subject key identifier:   D8:E5:10:7F:63:2F:D9:63:AC:57:FA:03:06:52:B2:70:17:0A:32:F4
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285849203C7F08A4D2247E839CF900
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6a0cd91b-9c32-3b46-bcf4-3e003a576acc.roa
Signing time:             Sun 09 Mar 2025 02:00:39 +0000
ROA not before:           Sun 09 Mar 2025 02:00:39 +0000
ROA not after:            Sat 07 Jun 2025 01:00:39 +0000
asID:                     396558
IP address blocks:        192.34.234.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:20:3c:7f:08:a4:d2:24:7e:83:9c:f9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar  9 02:00:39 2025 GMT
            Not After : Jun  7 01:00:39 2025 GMT
        Subject: CN=68eb41a1-fbf0-43a7-b17a-7daa5b969405
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:51:42:97:fc:3a:db:8f:73:08:6f:6b:5b:05:
                    56:a6:04:cf:ba:10:7d:0d:2b:67:6e:cd:4c:4e:9d:
                    a2:b9:8e:62:5e:a7:8f:d7:30:41:2e:08:3f:1f:47:
                    fe:e2:c3:32:17:e3:ce:4f:63:d2:33:5c:d8:6e:3a:
                    30:96:f1:4c:99:9b:df:c9:b2:f5:7f:6d:a6:67:b9:
                    dd:a7:5c:1c:14:d2:bc:98:2b:9a:aa:9b:36:47:66:
                    6f:ed:23:37:05:9a:e7:5a:84:23:e1:6b:58:90:69:
                    fa:71:a3:41:67:5b:fb:2d:9d:9c:90:b2:cf:8d:ad:
                    91:37:a0:2e:a9:a0:da:bc:a9:37:e3:a0:da:b4:72:
                    f6:aa:a4:7f:b1:3c:aa:fa:fb:79:b4:a4:2d:cc:91:
                    52:41:4a:4b:4d:eb:20:38:ee:ab:98:29:32:ce:05:
                    c8:ca:48:6b:06:b2:72:6b:a0:86:26:c6:f3:ff:c3:
                    21:e8:24:94:3f:75:93:f5:95:2d:68:6a:ba:52:cc:
                    03:56:83:6b:02:d9:79:9c:55:df:57:0e:32:ef:1b:
                    99:f0:97:81:26:19:16:2e:2d:2f:d6:4b:17:9b:88:
                    25:11:94:64:30:aa:4b:cc:f5:d1:ec:17:4e:36:c9:
                    ce:d3:0c:4e:38:ce:44:3e:99:7d:40:19:5e:cc:0f:
                    ee:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:E5:10:7F:63:2F:D9:63:AC:57:FA:03:06:52:B2:70:17:0A:32:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6a0cd91b-9c32-3b46-bcf4-3e003a576acc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.34.234.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:a0:5c:3c:c1:7d:a0:7c:5a:5e:6d:a4:5a:48:7d:3f:6a:45:
         51:c9:c0:84:15:b1:66:3f:ce:24:12:7d:f8:06:30:e6:88:a4:
         67:a9:51:51:80:b0:51:e3:11:83:fe:82:b5:9a:ae:46:4f:8d:
         9b:a4:43:d4:a4:cc:41:5d:6c:5c:43:51:d0:bb:da:8e:28:4f:
         8b:17:0e:5a:6f:91:0a:93:af:b1:7f:af:52:2d:8f:14:fe:36:
         b7:35:43:58:d3:b9:92:02:ab:78:ae:33:03:57:a9:01:e5:6f:
         be:92:9b:b8:66:ae:89:85:bb:1a:97:b5:32:9f:5c:44:df:6c:
         dd:ea:e2:53:34:e4:b7:85:c6:21:88:0f:25:62:f5:ab:77:28:
         98:40:35:a0:fb:94:db:3d:f7:c2:23:4c:55:84:80:00:2d:91:
         8a:a7:52:69:0c:19:1d:6f:c6:01:23:82:f2:14:fd:28:8a:af:
         39:f2:a4:06:98:43:ab:f6:a0:be:82:7a:ea:7f:71:92:b2:78:
         d7:aa:2c:75:eb:24:33:1e:b1:21:8d:51:3f:d7:67:82:01:67:
         5b:0b:79:a4:7c:a4:53:06:14:15:cc:ac:bb:fa:d8:7f:6f:a4:
         15:a7:91:77:25:d7:f0:f3:3d:78:0f:a3:02:ec:0d:e6:7c:63:
         34:ef:92:72
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEkgPH8IpNIkfoOc+QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDMwOTAyMDAzOVoXDTI1MDYwNzAxMDAzOVowLzEtMCsGA1UEAxMk
NjhlYjQxYTEtZmJmMC00M2E3LWIxN2EtN2RhYTViOTY5NDA1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxlFCl/w6249zCG9rWwVWpgTPuhB9DStnbs1M
Tp2iuY5iXqeP1zBBLgg/H0f+4sMyF+POT2PSM1zYbjowlvFMmZvfybL1f22mZ7nd
p1wcFNK8mCuaqps2R2Zv7SM3BZrnWoQj4WtYkGn6caNBZ1v7LZ2ckLLPja2RN6Au
qaDavKk346DatHL2qqR/sTyq+vt5tKQtzJFSQUpLTesgOO6rmCkyzgXIykhrBrJy
a6CGJsbz/8Mh6CSUP3WT9ZUtaGq6UswDVoNrAtl5nFXfVw4y7xuZ8JeBJhkWLi0v
1ksXm4glEZRkMKpLzPXR7BdONsnO0wxOOM5EPpl9QBlezA/usQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFNjlEH9jL9ljrFf6AwZSsnAXCjL0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNmEwY2Q5MWItOWMzMi0z
YjQ2LWJjZjQtM2UwMDNhNTc2YWNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCLqHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQACoFw8wX2gfFpebaRaSH0/akVRycCEFbFmP84kEn34BjDmiKRnqVFR
gLBR4xGD/oK1mq5GT42bpEPUpMxBXWxcQ1HQu9qOKE+LFw5ab5EKk6+xf69SLY8U
/ja3NUNY07mSAqt4rjMDV6kB5W++kpu4Zq6Jhbsal7Uyn1xE32zd6uJTNOS3hcYh
iA8lYvWrdyiYQDWg+5TbPffCI0xVhIAALZGKp1JpDBkdb8YBI4LyFP0oiq858qQG
mEOr9qC+gnrqf3GSsnjXqix16yQzHrEhjVE/12eCAWdbC3mkfKRTBhQVzKy7+th/
b6QVp5F3Jdfw8z14D6MC7A3mfGM075Jy
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:17:21 2025 by rpki-client