Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ce33d5db-d147-32b6-a3bd-2e0dd7e18f84.roa
File:                     ce33d5db-d147-32b6-a3bd-2e0dd7e18f84.roa (raw, json)
Hash identifier:          uC6rqLImB8KCMzIAQK/rErxZYFzb/Ld21RkJlHYhaW0=
Subject key identifier:   C7:FC:36:4B:6A:11:45:6E:FF:F8:75:64:F5:9C:7A:A7:91:82:B0:52
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AF68698CA659D35C3D8624AB0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ce33d5db-d147-32b6-a3bd-2e0dd7e18f84.roa
Signing time:             Sun 24 Aug 2025 13:00:42 +0000
ROA not before:           Sun 24 Aug 2025 13:00:42 +0000
ROA not after:            Sat 22 Nov 2025 14:00:42 +0000
asID:                     36624
IP address blocks:        192.34.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Sep 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f6:86:98:ca:65:9d:35:c3:d8:62:4a:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 24 13:00:42 2025 GMT
            Not After : Nov 22 14:00:42 2025 GMT
        Subject: CN=7caf792c-602a-499e-9b89-214c51c3244a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:02:7e:f6:84:eb:e1:15:f4:0b:c0:14:da:c2:
                    0c:ba:d4:20:2f:98:6d:9f:3a:ba:b1:91:d3:ae:3f:
                    f0:62:50:0c:12:16:b3:e9:fe:53:0f:d8:59:8c:7a:
                    50:63:c0:49:9a:38:d2:df:97:3a:19:38:e7:4e:b1:
                    42:b1:a1:cc:1d:80:95:4d:43:d4:95:65:b6:5c:ac:
                    5b:b2:ab:5b:dd:58:6a:0a:17:04:cb:83:89:aa:c9:
                    cd:7f:67:46:cd:47:77:07:ec:83:14:57:50:66:60:
                    78:68:02:e6:fa:88:0a:6e:05:c2:55:86:06:16:66:
                    ce:31:4a:e7:49:2f:ae:87:97:68:40:cb:7c:34:a7:
                    bb:5e:6f:76:e3:be:22:35:d2:29:6f:ce:3a:89:5f:
                    2b:60:fa:2b:62:1a:f6:56:09:d0:55:f5:1a:dc:59:
                    91:78:32:27:49:1a:df:e6:ef:1e:a2:f0:33:ef:df:
                    e4:e8:e8:b7:30:e9:51:e2:5b:6f:e4:0d:93:70:35:
                    35:66:3f:96:fb:03:ed:a6:be:49:00:f4:e0:ee:d2:
                    53:b7:ec:2d:ed:d5:e4:ef:89:e8:21:40:bc:f0:21:
                    a0:7a:25:c3:5a:0e:a9:96:27:18:f5:fa:ac:3b:b7:
                    cc:91:5c:c0:31:cd:70:ea:f0:57:f8:77:77:a9:10:
                    d3:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:FC:36:4B:6A:11:45:6E:FF:F8:75:64:F5:9C:7A:A7:91:82:B0:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ce33d5db-d147-32b6-a3bd-2e0dd7e18f84.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.34.234.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:85:ec:65:99:70:fa:8b:8c:d0:38:d1:1a:0d:4d:f4:7f:ad:
         b0:14:63:ee:f6:7c:6b:64:9e:e4:46:d7:56:64:5b:fd:77:bb:
         96:f5:ab:21:ae:d9:77:0b:d1:37:ab:93:58:73:39:47:ba:4f:
         4b:a7:ac:08:b9:56:4f:cd:df:a5:02:ec:6b:4b:45:cd:7f:7c:
         30:8e:8c:13:e5:03:9f:63:a7:d8:64:e5:1b:61:45:6b:06:51:
         d6:65:78:94:cf:85:58:2d:42:96:c8:2f:fa:95:d9:65:fc:87:
         6e:1f:58:cc:8d:d9:eb:44:c7:81:09:d9:6f:89:db:51:23:62:
         f6:80:99:e5:07:99:1f:5b:51:af:32:4d:00:a5:cc:3c:80:c7:
         a2:c1:2a:cc:5c:da:28:16:b1:37:ae:14:17:63:ab:bd:9e:f7:
         7d:dd:e5:73:03:26:32:bd:d2:41:04:57:39:91:25:31:4d:c0:
         3e:63:75:c5:18:aa:ff:c9:ca:da:cb:42:0f:45:14:85:65:68:
         47:40:d9:b6:9d:e7:9f:ec:60:fc:bb:82:fd:e9:48:42:3c:eb:
         29:4f:b3:f6:59:c7:2e:e9:1f:98:e8:80:ea:00:b0:34:84:11:
         1f:33:f9:ed:8c:58:a1:62:19:14:0a:c2:02:f6:bb:c7:3c:83:
         29:8a:25:73
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr2hpjKZZ01w9hiSrAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDgyNDEzMDA0MloXDTI1MTEyMjE0MDA0MlowLzEtMCsGA1UEAxMk
N2NhZjc5MmMtNjAyYS00OTllLTliODktMjE0YzUxYzMyNDRhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4AJ+9oTr4RX0C8AU2sIMutQgL5htnzq6sZHT
rj/wYlAMEhaz6f5TD9hZjHpQY8BJmjjS35c6GTjnTrFCsaHMHYCVTUPUlWW2XKxb
sqtb3VhqChcEy4OJqsnNf2dGzUd3B+yDFFdQZmB4aALm+ogKbgXCVYYGFmbOMUrn
SS+uh5doQMt8NKe7Xm92474iNdIpb846iV8rYPorYhr2VgnQVfUa3FmReDInSRrf
5u8eovAz79/k6Oi3MOlR4ltv5A2TcDU1Zj+W+wPtpr5JAPTg7tJTt+wt7dXk74no
IUC88CGgeiXDWg6plicY9fqsO7fMkVzAMc1w6vBX+Hd3qRDT5QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMf8NktqEUVu//h1ZPWceqeRgrBSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvY2UzM2Q1ZGItZDE0Ny0z
MmI2LWEzYmQtMmUwZGQ3ZTE4Zjg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCLqMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFiF7GWZcPqLjNA40RoNTfR/rbAUY+72fGtknuRG11ZkW/13u5b1qyGu
2XcL0Terk1hzOUe6T0unrAi5Vk/N36UC7GtLRc1/fDCOjBPlA59jp9hk5RthRWsG
UdZleJTPhVgtQpbIL/qV2WX8h24fWMyN2etEx4EJ2W+J21EjYvaAmeUHmR9bUa8y
TQClzDyAx6LBKsxc2igWsTeuFBdjq72e933d5XMDJjK90kEEVzmRJTFNwD5jdcUY
qv/JytrLQg9FFIVlaEdA2bad55/sYPy7gv3pSEI86ylPs/ZZxy7pH5jogOoAsDSE
ER8z+e2MWKFiGRQKwgL2u8c8gymKJXM=
-----END CERTIFICATE-----
Generated at Thu Sep 11 06:14:33 2025 by rpki-client