Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/84bdaa5c-1322-3ded-8a62-4ff8ddd67c51.roa
File:                     84bdaa5c-1322-3ded-8a62-4ff8ddd67c51.roa (raw, json)
Hash identifier:          WcOSBrtYfblGeIMHXj/YJSkhQRWdy5sxQATYZUUHS28=
Subject key identifier:   B6:0F:B9:4A:CF:89:A7:5D:61:B6:B7:2C:4D:3B:C5:09:CD:91:24:71
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285849FF758EE1AB055F19B1707700
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/84bdaa5c-1322-3ded-8a62-4ff8ddd67c51.roa
Signing time:             Wed 28 May 2025 01:00:49 +0000
ROA not before:           Wed 28 May 2025 01:00:49 +0000
ROA not after:            Tue 26 Aug 2025 01:00:49 +0000
asID:                     19836
IP address blocks:        192.34.234.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ff:75:8e:e1:ab:05:5f:19:b1:70:77:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 28 01:00:49 2025 GMT
            Not After : Aug 26 01:00:49 2025 GMT
        Subject: CN=7f1075dc-3044-453c-8672-3156a6ffcd87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:06:4b:d8:9d:e9:94:ef:7e:71:f2:cd:25:89:
                    0c:98:67:84:d7:ce:15:4c:76:60:47:e5:e8:3c:0f:
                    e5:97:b9:4b:f8:63:8f:a1:24:83:82:ce:54:df:7b:
                    e7:6a:91:51:b9:35:c4:14:2a:39:7f:d6:e2:7c:e8:
                    7b:de:6b:c8:92:bb:dc:8b:ab:df:00:54:4c:26:dd:
                    b9:46:76:e4:27:b6:78:2a:8e:ba:9f:0c:91:6a:0e:
                    30:0e:71:94:fa:9b:e2:c2:3a:5a:90:a1:b1:cd:75:
                    61:55:b4:c8:af:48:ba:9a:72:58:3b:14:5e:8a:97:
                    09:79:1c:bb:2d:8a:9b:df:ea:9f:c9:fa:b6:87:64:
                    db:ef:11:78:59:0c:06:6e:3e:ce:57:86:b7:0b:45:
                    25:5b:9e:25:3b:7c:b7:b6:c8:4d:59:b1:3c:32:7e:
                    68:d9:e5:29:0f:b8:b5:44:ec:0b:26:60:0d:50:96:
                    08:19:08:f5:6f:01:5e:4b:3a:8e:f2:cf:45:63:22:
                    20:64:f7:e4:7d:42:32:3b:93:67:68:92:28:86:03:
                    04:f3:88:94:f4:14:4e:b4:1b:14:89:c1:be:2a:45:
                    9c:33:58:5b:ac:c8:91:23:c3:6e:d5:d9:6e:a0:8e:
                    83:bf:30:80:c6:75:5c:8e:eb:5f:b9:66:f0:ec:f6:
                    05:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:0F:B9:4A:CF:89:A7:5D:61:B6:B7:2C:4D:3B:C5:09:CD:91:24:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/84bdaa5c-1322-3ded-8a62-4ff8ddd67c51.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.34.234.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:a6:d3:f6:bc:50:9d:52:85:a5:f7:3a:40:d0:90:b5:cc:f1:
         37:95:af:54:29:eb:15:ab:48:57:b9:f9:42:b8:42:36:2c:50:
         78:fb:a6:e6:09:5e:cc:3c:d8:48:00:a4:dc:8d:88:d5:08:36:
         a6:e8:7d:dd:70:ed:96:5c:72:a2:0d:72:6f:65:85:40:46:e5:
         14:f8:3c:80:c6:88:08:06:fb:99:16:ac:e8:99:75:50:d3:2b:
         39:87:1c:8a:83:d4:17:51:d6:01:0c:6b:7f:4a:15:d8:e3:98:
         ed:c2:4c:e6:a4:92:4a:48:92:87:fe:09:98:87:f9:d8:bd:04:
         ad:3d:ab:c5:81:a1:d3:9c:b2:52:d5:58:6a:94:8a:fc:c2:67:
         8b:9c:7b:72:b7:78:e0:e0:07:8c:77:96:f4:48:78:c6:9d:c8:
         56:78:03:7a:21:0c:5b:99:47:fd:bc:30:ee:5e:00:11:72:47:
         90:42:da:23:91:dd:3f:5b:7f:d0:14:a4:5d:10:6e:14:be:1d:
         02:5d:74:02:6d:5c:40:7d:40:c6:17:7f:36:a8:17:50:25:90:
         36:d1:19:78:e4:bf:3a:27:44:9d:72:cd:62:d0:5e:fa:83:87:
         39:7e:6d:80:0d:79:eb:52:81:f3:63:a6:a8:71:6e:4a:ad:ed:
         d6:7d:97:50
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEn/dY7hqwVfGbFwdwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDUyODAxMDA0OVoXDTI1MDgyNjAxMDA0OVowLzEtMCsGA1UEAxMk
N2YxMDc1ZGMtMzA0NC00NTNjLTg2NzItMzE1NmE2ZmZjZDg3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhgZL2J3plO9+cfLNJYkMmGeE184VTHZgR+Xo
PA/ll7lL+GOPoSSDgs5U33vnapFRuTXEFCo5f9bifOh73mvIkrvci6vfAFRMJt25
RnbkJ7Z4Ko66nwyRag4wDnGU+pviwjpakKGxzXVhVbTIr0i6mnJYOxReipcJeRy7
LYqb3+qfyfq2h2Tb7xF4WQwGbj7OV4a3C0UlW54lO3y3tshNWbE8Mn5o2eUpD7i1
ROwLJmANUJYIGQj1bwFeSzqO8s9FYyIgZPfkfUIyO5NnaJIohgME84iU9BROtBsU
icG+KkWcM1hbrMiRI8Nu1dluoI6DvzCAxnVcjutfuWbw7PYFuwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFLYPuUrPiaddYba3LE07xQnNkSRxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvODRiZGFhNWMtMTMyMi0z
ZGVkLThhNjItNGZmOGRkZDY3YzUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCLqHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAMptP2vFCdUoWl9zpA0JC1zPE3la9UKesVq0hXuflCuEI2LFB4+6bm
CV7MPNhIAKTcjYjVCDam6H3dcO2WXHKiDXJvZYVARuUU+DyAxogIBvuZFqzomXVQ
0ys5hxyKg9QXUdYBDGt/ShXY45jtwkzmpJJKSJKH/gmYh/nYvQStPavFgaHTnLJS
1VhqlIr8wmeLnHtyt3jg4AeMd5b0SHjGnchWeAN6IQxbmUf9vDDuXgARckeQQtoj
kd0/W3/QFKRdEG4Uvh0CXXQCbVxAfUDGF382qBdQJZA20Rl45L86J0Sdcs1i0F76
g4c5fm2ADXnrUoHzY6aocW5Kre3WfZdQ
-----END CERTIFICATE-----
Generated at Fri Jun 6 19:40:25 2025 by rpki-client