Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/88b2b97d-62f3-32a6-b72a-48e72dc27a5b.roa
File:                     88b2b97d-62f3-32a6-b72a-48e72dc27a5b.roa (raw, json)
Hash identifier:          OiMbuBfQFbmQ6+RC+nnUHtgNo+Ntkv/pHe7c8gzJDpk=
Subject key identifier:   3E:B2:4D:8B:00:71:4C:BE:2E:CC:D1:A7:04:BE:F1:47:99:E9:6C:21
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A172641691BDFEE4383D36F00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/88b2b97d-62f3-32a6-b72a-48e72dc27a5b.roa
Signing time:             Thu 05 Jun 2025 12:41:26 +0000
ROA not before:           Thu 05 Jun 2025 12:41:26 +0000
ROA not after:            Wed 03 Sep 2025 12:41:26 +0000
asID:                     397203
IP address blocks:        192.34.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:17:26:41:69:1b:df:ee:43:83:d3:6f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun  5 12:41:26 2025 GMT
            Not After : Sep  3 12:41:26 2025 GMT
        Subject: CN=88173cdd-0429-435e-b899-3efb0c70a8ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:0c:34:69:d3:01:00:51:52:ef:09:7b:22:04:
                    31:bd:01:77:eb:61:44:96:0d:cb:14:f7:c3:d3:e7:
                    dc:47:9a:84:69:74:e3:bc:26:df:7d:d5:9f:89:2b:
                    99:30:03:5d:22:4b:c8:c0:84:7b:17:15:20:23:de:
                    c8:58:bb:29:49:be:2c:6b:48:a5:24:36:a9:b8:e6:
                    96:ed:d2:72:c5:be:b5:8b:a6:2d:c7:84:a7:cc:cd:
                    27:12:68:d1:c2:e7:f0:f9:7b:4d:68:5e:cb:46:85:
                    d9:52:ff:de:c4:ad:c9:a2:62:8d:b1:77:d0:15:3d:
                    eb:bb:e0:fc:cb:55:14:d9:d7:4f:78:ca:3d:ea:2c:
                    ed:07:e1:26:77:ca:5e:69:ff:5d:c6:b5:92:33:9b:
                    9e:d5:b9:5b:8a:a6:04:a5:fd:71:46:81:c5:a6:6d:
                    cf:6c:2f:6f:ec:78:00:b8:58:7d:6e:8c:71:00:4e:
                    39:bf:5a:2d:9b:52:2e:37:16:83:7a:09:7c:c4:68:
                    47:2b:97:7b:54:d7:3c:3f:61:73:71:af:41:1d:d8:
                    23:e7:ea:ec:f3:55:e6:3d:d6:c0:a1:8d:61:fb:0a:
                    bf:c4:2a:6a:aa:cf:34:2f:c0:de:d6:df:3f:ed:d4:
                    2b:b7:16:14:17:dc:80:7a:e8:34:19:ae:89:d6:38:
                    db:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:B2:4D:8B:00:71:4C:BE:2E:CC:D1:A7:04:BE:F1:47:99:E9:6C:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/88b2b97d-62f3-32a6-b72a-48e72dc27a5b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.34.234.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:2c:d1:2e:da:49:32:85:0d:b3:fd:0f:9c:e0:41:12:ef:6a:
         da:d0:6a:41:5c:f0:30:70:68:36:17:23:03:be:84:ff:25:c3:
         8c:71:9d:93:b3:a7:30:26:5e:aa:2d:54:4f:2d:1f:c1:81:d2:
         91:4d:41:eb:cb:30:5c:16:e0:70:63:67:d4:f9:a8:4d:75:fe:
         7b:8c:d4:6c:1e:23:89:1f:99:c1:be:de:b7:ed:57:59:b8:61:
         d2:17:42:93:82:52:3d:69:ec:70:8b:f9:a3:82:57:22:fb:bc:
         17:20:1e:e6:81:ec:89:52:b7:07:ff:0a:e1:1d:4b:67:de:96:
         34:10:e3:cd:bb:2e:31:44:0d:7d:36:a3:99:83:7d:42:62:60:
         97:79:d9:fd:19:d0:d0:14:7a:13:76:d6:d5:c6:cc:f9:30:86:
         bb:1d:b5:77:e4:78:00:21:1e:08:b2:64:b8:2a:c7:1e:08:82:
         a2:dc:15:1c:cf:01:b0:9d:d2:a6:99:81:f0:1c:82:19:be:3b:
         56:5d:f4:7a:0e:8c:6c:24:c2:99:9f:3a:6d:b9:7c:4f:f6:f4:
         9f:42:4a:5a:86:6e:01:dd:72:0f:cd:f9:d2:0f:ca:44:56:cc:
         31:67:f9:bf:73:62:63:69:c4:55:de:5f:25:60:a4:28:e1:9f:
         fd:5c:45:bc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoXJkFpG9/uQ4PTbwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDYwNTEyNDEyNloXDTI1MDkwMzEyNDEyNlowLzEtMCsGA1UEAxMk
ODgxNzNjZGQtMDQyOS00MzVlLWI4OTktM2VmYjBjNzBhOGVjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAugw0adMBAFFS7wl7IgQxvQF362FElg3LFPfD
0+fcR5qEaXTjvCbffdWfiSuZMANdIkvIwIR7FxUgI97IWLspSb4sa0ilJDapuOaW
7dJyxb61i6Ytx4SnzM0nEmjRwufw+XtNaF7LRoXZUv/exK3JomKNsXfQFT3ru+D8
y1UU2ddPeMo96iztB+Emd8peaf9dxrWSM5ue1blbiqYEpf1xRoHFpm3PbC9v7HgA
uFh9boxxAE45v1otm1IuNxaDegl8xGhHK5d7VNc8P2Fzca9BHdgj5+rs81XmPdbA
oY1h+wq/xCpqqs80L8De1t8/7dQrtxYUF9yAeug0Ga6J1jjb8wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFD6yTYsAcUy+LszRpwS+8UeZ6WwhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvODhiMmI5N2QtNjJmMy0z
MmE2LWI3MmEtNDhlNzJkYzI3YTViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCLqMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC8s0S7aSTKFDbP9D5zgQRLvatrQakFc8DBwaDYXIwO+hP8lw4xxnZOz
pzAmXqotVE8tH8GB0pFNQevLMFwW4HBjZ9T5qE11/nuM1GweI4kfmcG+3rftV1m4
YdIXQpOCUj1p7HCL+aOCVyL7vBcgHuaB7IlStwf/CuEdS2feljQQ4827LjFEDX02
o5mDfUJiYJd52f0Z0NAUehN21tXGzPkwhrsdtXfkeAAhHgiyZLgqxx4IgqLcFRzP
AbCd0qaZgfAcghm+O1Zd9HoOjGwkwpmfOm25fE/29J9CSlqGbgHdcg/N+dIPykRW
zDFn+b9zYmNpxFXeXyVgpCjhn/1cRbw=
-----END CERTIFICATE-----
Generated at Fri Jun 6 19:42:33 2025 by rpki-client