Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/837b019a-fd6f-33d5-8edc-518d64770843.roa
File:                     837b019a-fd6f-33d5-8edc-518d64770843.roa (raw, json)
Hash identifier:          rvF9z08grcqFu+mFeEvXuM4/QWc402KLucmB0/AclqQ=
Subject key identifier:   FB:95:F2:D4:65:C6:F3:05:80:D6:1D:32:C1:91:82:EE:7D:F1:52:9B
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A17263AC02DA6AF3113CDCE80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/837b019a-fd6f-33d5-8edc-518d64770843.roa
Signing time:             Thu 05 Jun 2025 12:41:23 +0000
ROA not before:           Thu 05 Jun 2025 12:41:23 +0000
ROA not after:            Wed 03 Sep 2025 12:41:23 +0000
asID:                     396616
IP address blocks:        192.34.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:17:26:3a:c0:2d:a6:af:31:13:cd:ce:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun  5 12:41:23 2025 GMT
            Not After : Sep  3 12:41:23 2025 GMT
        Subject: CN=30668474-0e33-46ce-af23-9fad9d426064
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:18:8e:3f:2c:13:6b:d5:0b:df:cc:4f:16:4b:
                    79:c9:0c:16:34:71:ed:fd:f8:67:ce:9a:3c:00:90:
                    26:40:b3:16:6b:07:de:25:e6:c6:f4:7f:25:8e:d3:
                    3e:30:cb:e1:35:44:64:2d:16:d7:5e:dc:71:10:0c:
                    f1:60:87:48:bf:fd:1a:90:d7:f7:b5:3c:0b:53:b1:
                    1f:c5:09:d6:04:33:6e:9a:99:79:f0:ba:ee:ec:05:
                    23:5d:b9:81:83:2e:d5:dc:21:c0:79:cc:69:0e:16:
                    ad:ad:45:d2:7d:da:28:49:7f:24:56:57:30:8e:96:
                    cb:7f:50:d7:db:eb:7b:c6:2e:8d:dd:41:04:15:2f:
                    97:b1:c9:5b:cb:e6:64:21:d7:c1:d0:b0:2d:3c:eb:
                    25:88:f9:27:16:73:33:ca:a4:61:40:ab:ee:a1:4b:
                    27:06:30:9d:37:a0:fb:36:83:b6:ab:28:a8:2c:ab:
                    3c:aa:ae:a7:ef:4b:ad:06:92:1c:12:1a:16:dd:65:
                    a9:c3:1a:d2:2c:f3:52:b3:31:1c:8b:64:75:eb:96:
                    38:a4:83:23:b7:ee:ec:1c:11:6d:c0:e0:09:00:36:
                    a9:5b:83:88:32:85:84:49:78:aa:4d:2f:77:d8:0d:
                    0b:ef:d1:86:c3:1d:63:a2:a9:b9:73:1c:75:8d:27:
                    30:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:95:F2:D4:65:C6:F3:05:80:D6:1D:32:C1:91:82:EE:7D:F1:52:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/837b019a-fd6f-33d5-8edc-518d64770843.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.34.234.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:cb:cc:ac:14:20:b3:27:cb:f1:6b:5d:18:16:b8:0f:99:40:
         db:05:c2:ef:82:a3:bf:72:d7:31:de:08:df:40:8c:92:8a:a3:
         ab:1f:08:6f:f2:c4:94:d7:9d:61:16:fd:3b:bf:9f:31:d3:bb:
         20:95:79:60:87:5b:70:7d:c2:0b:cc:21:3e:50:e7:e1:e4:c0:
         11:5a:63:02:44:d6:e0:e7:25:cb:a6:ce:e2:27:76:89:52:5b:
         58:b0:34:85:20:dd:f9:f7:45:a8:bc:2c:42:67:76:16:f0:86:
         e4:0a:64:c5:82:f8:71:31:58:23:b6:54:84:f9:82:c0:d9:7c:
         e7:b4:ba:fe:5a:fa:e2:42:0f:63:8b:c7:d5:16:5d:40:84:83:
         9c:02:13:db:9a:7d:bb:cb:05:0c:9a:b7:63:30:1a:f8:3f:32:
         0a:fe:f0:36:94:75:aa:f5:94:7c:03:df:49:2f:54:30:62:33:
         c5:65:63:a0:10:6f:a4:11:a5:83:4c:d2:d9:21:b8:a4:85:88:
         79:12:68:c7:fe:9a:5c:7e:59:40:79:ac:ab:3e:24:55:fa:30:
         12:56:c2:0a:9d:6e:10:65:f1:34:73:2e:89:0e:24:45:03:dc:
         50:f5:20:af:27:fa:96:00:9f:1d:f5:1b:52:11:53:d4:c3:14:
         32:2b:0a:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 19:35:34 2025 by rpki-client