Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/db1393d3-47f3-39d3-84ec-203a9059d0e4.roa
File:                     db1393d3-47f3-39d3-84ec-203a9059d0e4.roa (raw, json)
Hash identifier:          1l4ksNRx6dOKD25oivtoGDCT31Xd5v1DH/ralaFdjYM=
Subject key identifier:   B7:15:BA:BA:36:09:56:70:F8:A2:A8:5D:25:BE:6C:52:47:55:9C:FE
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AF686A6A89FA3AB2016E6C240
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/db1393d3-47f3-39d3-84ec-203a9059d0e4.roa
Signing time:             Sun 24 Aug 2025 13:00:42 +0000
ROA not before:           Sun 24 Aug 2025 13:00:42 +0000
ROA not after:            Sat 22 Nov 2025 14:00:42 +0000
asID:                     396580
IP address blocks:        192.34.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Sep 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f6:86:a6:a8:9f:a3:ab:20:16:e6:c2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 24 13:00:42 2025 GMT
            Not After : Nov 22 14:00:42 2025 GMT
        Subject: CN=8228b50b-29a6-4364-a327-3082e84b8f16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:94:18:b6:f5:19:e6:07:f4:b0:b4:3f:fe:86:
                    d7:39:70:6e:d5:e6:7f:e3:47:d4:da:cd:a0:4a:1b:
                    06:de:1a:a7:1d:40:51:95:d7:82:5f:01:c6:f6:1c:
                    95:53:5a:b8:99:e0:05:ed:61:e9:bf:59:d2:55:2b:
                    30:54:49:f3:23:fa:97:4e:95:c2:8f:ed:b2:4f:af:
                    8b:c3:87:c6:2e:7c:31:0a:1b:bb:ea:a3:ea:9f:85:
                    53:59:a8:e1:95:e2:fd:3b:b4:26:f1:92:a7:04:f0:
                    89:fa:b3:1c:b0:bf:45:03:fe:5e:1f:65:b0:f3:d3:
                    d0:39:fa:bf:97:fb:28:ff:99:04:22:a2:f7:c6:56:
                    5c:cf:40:c8:19:19:66:67:06:42:d3:21:62:9f:e3:
                    db:4f:9a:73:e5:76:98:f5:be:ea:d5:ba:5c:46:35:
                    08:02:5a:7a:72:d7:f2:6a:46:89:44:12:68:37:1f:
                    14:3d:5b:3d:56:31:1b:cd:18:e0:50:dd:a8:b8:95:
                    d1:b3:44:56:99:10:ce:35:6d:32:30:dc:da:f7:07:
                    1a:9d:30:66:3b:ca:37:56:8f:92:f7:2b:11:45:e2:
                    c5:79:07:84:71:ac:54:73:f3:6e:fb:88:11:58:5f:
                    f1:1c:7a:ee:59:d0:6b:88:05:0a:f6:54:ad:bc:41:
                    89:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:15:BA:BA:36:09:56:70:F8:A2:A8:5D:25:BE:6C:52:47:55:9C:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/db1393d3-47f3-39d3-84ec-203a9059d0e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.34.234.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:f6:d7:a7:d3:1d:66:bc:1a:50:70:39:0b:a0:2d:1f:ce:b4:
         18:34:40:cd:5b:9d:1a:3b:18:a5:d2:7d:bb:93:96:03:4a:6f:
         7b:53:05:53:f5:f8:c8:a5:0c:ff:e5:5b:2a:94:29:f3:81:2a:
         a3:a3:07:91:52:7a:43:49:e5:ef:64:ae:74:81:c5:22:ac:fa:
         90:e8:b5:b9:86:20:74:52:a6:aa:f1:39:32:bd:7a:69:0b:17:
         00:d7:bc:09:0d:ee:3e:c4:75:2d:51:3b:7f:83:53:ac:1d:fd:
         1e:fc:c9:3e:ad:dc:51:41:62:74:6d:14:ff:50:d9:65:e6:04:
         d3:4a:57:d3:df:de:ca:23:c3:96:a3:46:ae:6f:74:2c:46:22:
         f1:8a:9d:08:57:7b:4b:3f:0c:66:4c:c4:d3:b9:22:b1:82:6e:
         3d:0e:3d:45:16:35:7f:6a:b5:1f:76:cf:6b:b8:e8:08:75:23:
         a3:99:ea:25:81:c8:90:28:2b:5c:e5:b4:b2:c9:96:c9:1b:e4:
         da:7f:10:dd:ef:25:e3:9d:03:22:1b:b7:95:67:f9:b1:cb:21:
         93:35:24:f2:6a:3f:bc:6f:b8:4c:fe:a5:6a:a4:04:91:63:1a:
         60:21:f1:24:76:2d:4f:8a:3a:d0:e9:a1:0f:fa:c5:02:bd:1a:
         b1:db:f8:f1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr2hqaon6OrIBbmwkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDgyNDEzMDA0MloXDTI1MTEyMjE0MDA0MlowLzEtMCsGA1UEAxMk
ODIyOGI1MGItMjlhNi00MzY0LWEzMjctMzA4MmU4NGI4ZjE2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZQYtvUZ5gf0sLQ//obXOXBu1eZ/40fU2s2g
ShsG3hqnHUBRldeCXwHG9hyVU1q4meAF7WHpv1nSVSswVEnzI/qXTpXCj+2yT6+L
w4fGLnwxChu76qPqn4VTWajhleL9O7Qm8ZKnBPCJ+rMcsL9FA/5eH2Ww89PQOfq/
l/so/5kEIqL3xlZcz0DIGRlmZwZC0yFin+PbT5pz5XaY9b7q1bpcRjUIAlp6ctfy
akaJRBJoNx8UPVs9VjEbzRjgUN2ouJXRs0RWmRDONW0yMNza9wcanTBmO8o3Vo+S
9ysRReLFeQeEcaxUc/Nu+4gRWF/xHHruWdBriAUK9lStvEGJ5wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLcVuro2CVZw+KKoXSW+bFJHVZz+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZGIxMzkzZDMtNDdmMy0z
OWQzLTg0ZWMtMjAzYTkwNTlkMGU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCLqMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGr216fTHWa8GlBwOQugLR/OtBg0QM1bnRo7GKXSfbuTlgNKb3tTBVP1
+MilDP/lWyqUKfOBKqOjB5FSekNJ5e9krnSBxSKs+pDotbmGIHRSpqrxOTK9emkL
FwDXvAkN7j7EdS1RO3+DU6wd/R78yT6t3FFBYnRtFP9Q2WXmBNNKV9Pf3sojw5aj
Rq5vdCxGIvGKnQhXe0s/DGZMxNO5IrGCbj0OPUUWNX9qtR92z2u46Ah1I6OZ6iWB
yJAoK1zltLLJlskb5Np/EN3vJeOdAyIbt5Vn+bHLIZM1JPJqP7xvuEz+pWqkBJFj
GmAh8SR2LU+KOtDpoQ/6xQK9GrHb+PE=
-----END CERTIFICATE-----
Generated at Wed Sep 10 20:47:36 2025 by rpki-client