Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e4b06a34-36fa-30e4-9014-22079f71b73c.roa
File:                     e4b06a34-36fa-30e4-9014-22079f71b73c.roa (raw, json)
Hash identifier:          SvnUbHfkPC3q3QmG8ZCbjPS6WXc1JVoc5Q6FMrnX+Gw=
Subject key identifier:   B2:B3:2D:D6:D8:EB:D2:13:C8:AD:C4:A6:8D:5A:37:74:B1:30:87:F0
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A172640B519AB58017D995080
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e4b06a34-36fa-30e4-9014-22079f71b73c.roa
Signing time:             Thu 05 Jun 2025 12:41:26 +0000
ROA not before:           Thu 05 Jun 2025 12:41:26 +0000
ROA not after:            Wed 03 Sep 2025 12:41:26 +0000
asID:                     397204
IP address blocks:        192.34.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:17:26:40:b5:19:ab:58:01:7d:99:50:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun  5 12:41:26 2025 GMT
            Not After : Sep  3 12:41:26 2025 GMT
        Subject: CN=c1094751-3030-449e-bb5b-1c09cffed3aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:95:a3:31:5d:5c:1c:fb:b3:e9:95:63:45:23:
                    19:00:fe:86:19:58:51:55:1f:e2:04:2b:f2:06:6f:
                    ae:c4:05:f2:a8:fa:0c:cc:78:9f:1b:aa:1c:39:4c:
                    45:37:93:c4:4d:c8:43:c2:ae:08:8a:be:0c:77:33:
                    0d:38:6a:74:4a:44:89:c0:ae:da:be:0d:6b:17:4e:
                    88:2c:a5:19:45:df:95:6f:1a:d5:32:d5:24:19:61:
                    0c:52:b8:d9:12:74:77:15:f7:ac:d5:77:59:e2:d9:
                    b2:38:35:f2:78:42:bc:52:a2:b7:c2:58:be:fe:ac:
                    74:36:2c:d3:d8:ae:90:14:3d:58:a7:c2:e3:f2:aa:
                    47:75:1e:59:ac:32:44:17:8b:f4:ef:db:1d:85:64:
                    f2:50:ac:47:60:70:22:de:30:aa:94:54:d9:1c:0d:
                    34:dd:c9:f4:d4:21:10:ab:fd:fb:4f:49:3b:b6:e0:
                    78:50:62:34:f8:f1:7e:15:05:72:b4:b2:16:db:b8:
                    03:34:e9:fd:90:e0:26:59:2d:20:a9:7d:57:f3:69:
                    1f:6c:17:1f:4c:93:c9:ad:6a:2d:a0:06:98:6c:bb:
                    6d:ce:d7:70:01:f8:ab:87:0c:64:cd:23:a9:68:d8:
                    0b:71:cc:5e:20:fa:29:8b:44:5a:07:68:ff:0d:f3:
                    8b:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:B3:2D:D6:D8:EB:D2:13:C8:AD:C4:A6:8D:5A:37:74:B1:30:87:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e4b06a34-36fa-30e4-9014-22079f71b73c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.34.234.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:b4:31:0c:12:eb:a4:d8:f7:4a:c4:66:cc:3a:f8:51:75:d0:
         9c:12:f8:3a:db:86:bf:eb:b5:0b:d8:1c:b2:7a:27:17:ab:b2:
         24:6b:f3:75:f8:08:4d:86:36:be:72:bc:0f:7e:8d:1f:ce:e2:
         ac:a8:ba:c3:92:94:0c:69:4f:12:9c:ae:dc:d9:cd:cb:59:f2:
         df:3f:3e:49:2b:83:59:ae:f5:b5:6a:46:f2:cb:b4:28:2a:f5:
         2e:f5:57:79:8c:f7:e6:e0:32:ab:11:f5:76:4c:38:af:ff:56:
         1a:3e:9b:2b:42:92:c3:49:c2:3e:9c:36:19:10:98:c0:40:9b:
         bf:f6:de:10:80:76:aa:01:7e:d8:24:e7:40:51:da:46:07:8f:
         a5:fe:a2:79:52:93:05:48:57:75:57:2e:3a:f8:58:37:4a:57:
         33:5f:3e:ca:35:64:39:a0:69:d3:ca:f6:d3:85:a3:85:ea:a2:
         26:74:2b:28:f7:e0:82:61:03:e4:b6:54:86:cc:16:4e:de:23:
         95:3e:a4:13:79:81:28:92:27:0f:dc:79:9d:4d:44:3a:be:59:
         f2:92:5f:d4:53:94:f4:4b:c9:5b:a3:49:b7:35:7c:3a:6e:67:
         cd:ac:4e:7b:c0:2b:ba:27:c3:90:d5:3b:b9:b4:a3:c3:de:42:
         1b:a1:97:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 19:34:38 2025 by rpki-client