Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/811388a5-bc5f-3db7-985e-94457e855cfb.roa
File:                     811388a5-bc5f-3db7-985e-94457e855cfb.roa (raw, json)
Hash identifier:          ZyVzmBTZL4fjV8JnZnrOeFrNgNcexvTES3b7qFdZEac=
Subject key identifier:   A4:AC:01:04:6E:BF:87:77:24:7C:AA:52:DF:FD:75:56:25:75:37:63
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285849FF758CA4A439A634D6472580
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/811388a5-bc5f-3db7-985e-94457e855cfb.roa
Signing time:             Wed 28 May 2025 01:00:49 +0000
ROA not before:           Wed 28 May 2025 01:00:49 +0000
ROA not after:            Tue 26 Aug 2025 01:00:49 +0000
asID:                     396611
IP address blocks:        192.34.234.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ff:75:8c:a4:a4:39:a6:34:d6:47:25:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 28 01:00:49 2025 GMT
            Not After : Aug 26 01:00:49 2025 GMT
        Subject: CN=eb2fc9f5-6103-42f0-adcf-707d40261b39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:2f:73:0f:63:17:cb:d9:e0:95:14:6e:ee:ab:
                    79:a8:55:a5:52:e3:72:b9:e6:9d:cf:f6:f4:43:39:
                    df:ef:fb:49:7a:9f:06:29:9c:99:00:02:09:07:38:
                    02:1f:91:c2:60:81:0b:bb:3e:08:58:f5:60:8a:aa:
                    34:57:07:78:85:e2:fb:5f:9b:0c:84:e9:63:50:99:
                    8c:92:6d:b5:5b:ee:25:76:a2:33:c5:28:b3:ad:90:
                    56:37:dc:2d:35:22:57:ff:08:48:70:b1:76:f3:52:
                    fa:b0:92:ac:55:cb:55:f8:29:37:eb:e1:ac:0e:c6:
                    0b:37:31:df:17:23:74:5c:31:9c:23:30:f0:d2:3d:
                    a2:3d:1b:8d:26:c1:47:a7:16:6d:6b:c9:3f:f9:be:
                    40:90:71:f4:f3:57:98:0b:3e:6d:ea:a8:68:58:87:
                    d8:ce:c3:d0:54:56:60:5b:85:05:10:5a:02:e8:3a:
                    2b:2e:fa:62:6c:a7:ea:dc:6a:d6:fc:fd:d4:6f:82:
                    ff:42:e0:14:4f:61:14:19:2e:ef:dc:44:1c:d7:46:
                    d3:ce:0c:6a:c2:ac:ca:d1:07:e4:e0:b1:e0:bb:23:
                    da:72:e7:b7:6b:17:65:40:78:4b:28:de:c8:d6:da:
                    59:e5:2b:97:5f:22:ac:f0:84:37:1f:2a:dc:b2:65:
                    4f:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:AC:01:04:6E:BF:87:77:24:7C:AA:52:DF:FD:75:56:25:75:37:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/811388a5-bc5f-3db7-985e-94457e855cfb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.34.234.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:5c:73:3d:70:5d:e4:2c:49:13:87:b8:e5:ce:85:58:cb:6a:
         bd:18:b7:62:1d:98:55:cc:35:71:82:19:4a:b3:5f:78:98:88:
         79:73:48:15:e6:89:b7:f5:e6:02:f6:aa:78:0b:9f:58:9f:d5:
         73:bb:ea:54:18:cd:4a:50:a2:4a:ef:ec:75:f4:a5:9f:a9:62:
         11:90:e2:d2:bf:35:50:08:35:1b:a6:98:b0:75:a6:8c:9c:51:
         cd:7d:77:a0:98:b1:9c:c7:2c:0c:c4:e2:9b:a8:52:35:02:d6:
         b1:5d:93:af:9f:9f:86:86:b9:95:b7:21:bb:8a:18:3d:d8:6c:
         15:26:17:f0:35:57:a8:68:9b:d6:e0:9d:96:c7:af:af:81:52:
         0b:00:df:b1:bf:f3:ef:12:f1:ad:ae:56:8c:1e:13:06:ca:9c:
         d3:a8:7c:fa:b3:cc:8e:9f:ec:32:88:a1:b7:30:1d:90:8e:b5:
         93:5d:dd:4b:20:ce:0a:f0:ab:a8:01:ea:25:be:a5:4a:25:80:
         46:82:5d:38:f7:ad:53:14:91:de:ba:ea:1b:92:ac:e4:b3:6a:
         38:05:7b:24:81:aa:da:cb:b3:0e:75:e7:f6:fc:f1:03:44:2a:
         c4:9d:63:6c:c2:79:5b:74:15:2b:58:71:75:dd:69:05:d6:24:
         5e:be:5b:01
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEn/dYykpDmmNNZHJYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDUyODAxMDA0OVoXDTI1MDgyNjAxMDA0OVowLzEtMCsGA1UEAxMk
ZWIyZmM5ZjUtNjEwMy00MmYwLWFkY2YtNzA3ZDQwMjYxYjM5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApS9zD2MXy9nglRRu7qt5qFWlUuNyueadz/b0
Qznf7/tJep8GKZyZAAIJBzgCH5HCYIELuz4IWPVgiqo0Vwd4heL7X5sMhOljUJmM
km21W+4ldqIzxSizrZBWN9wtNSJX/whIcLF281L6sJKsVctV+Ck36+GsDsYLNzHf
FyN0XDGcIzDw0j2iPRuNJsFHpxZta8k/+b5AkHH081eYCz5t6qhoWIfYzsPQVFZg
W4UFEFoC6DorLvpibKfq3GrW/P3Ub4L/QuAUT2EUGS7v3EQc10bTzgxqwqzK0Qfk
4LHguyPacue3axdlQHhLKN7I1tpZ5SuXXyKs8IQ3HyrcsmVP6wIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFKSsAQRuv4d3JHyqUt/9dVYldTdjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvODExMzg4YTUtYmM1Zi0z
ZGI3LTk4NWUtOTQ0NTdlODU1Y2ZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCLqHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCPXHM9cF3kLEkTh7jlzoVYy2q9GLdiHZhVzDVxghlKs194mIh5c0gV
5om39eYC9qp4C59Yn9Vzu+pUGM1KUKJK7+x19KWfqWIRkOLSvzVQCDUbppiwdaaM
nFHNfXegmLGcxywMxOKbqFI1AtaxXZOvn5+GhrmVtyG7ihg92GwVJhfwNVeoaJvW
4J2Wx6+vgVILAN+xv/PvEvGtrlaMHhMGypzTqHz6s8yOn+wyiKG3MB2QjrWTXd1L
IM4K8KuoAeolvqVKJYBGgl04961TFJHeuuobkqzks2o4BXskgaray7MOdef2/PED
RCrEnWNswnlbdBUrWHF13WkF1iRevlsB
-----END CERTIFICATE-----
Generated at Fri Jun 6 19:33:04 2025 by rpki-client