Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c358bafc-dd64-36da-99f4-9718f68a72a3.roa
File:                     c358bafc-dd64-36da-99f4-9718f68a72a3.roa (raw, json)
Hash identifier:          MHE2k+bVTt/WPRJ5iXg+VNYwWmYK5o3te58y6kcUGTg=
Subject key identifier:   BF:A7:4A:4C:46:F5:EB:39:49:B0:D8:92:45:E7:DB:1F:FE:C8:DF:38
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AE031A378439B8E8989401500
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c358bafc-dd64-36da-99f4-9718f68a72a3.roa
Signing time:             Sat 16 Aug 2025 13:00:42 +0000
ROA not before:           Sat 16 Aug 2025 13:00:42 +0000
ROA not after:            Fri 14 Nov 2025 14:00:42 +0000
asID:                     396595
IP address blocks:        192.34.234.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e0:31:a3:78:43:9b:8e:89:89:40:15:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 16 13:00:42 2025 GMT
            Not After : Nov 14 14:00:42 2025 GMT
        Subject: CN=742bf4af-c7b0-4297-b85f-2323d085ed2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:3c:92:d5:bf:06:48:ef:1e:1f:e6:d2:c9:14:
                    2b:20:7f:76:3f:0a:5c:c0:fd:d0:2e:3c:b7:e0:5c:
                    01:37:5b:0a:11:8d:b9:b7:77:1c:bb:85:12:a0:e7:
                    88:5e:32:eb:b7:14:d2:9f:8f:ba:90:8f:ac:78:76:
                    60:52:62:3d:c5:52:70:8b:f4:f8:fe:95:e9:b7:30:
                    99:66:fa:7f:b4:14:10:e9:31:41:69:c1:93:3d:30:
                    4d:53:ef:6a:21:ef:aa:80:12:30:c4:78:40:87:89:
                    5a:d4:db:d0:06:02:b3:02:f5:41:84:f2:c8:73:6e:
                    4c:1f:3d:6f:01:26:0f:82:10:2f:7f:b8:1f:9e:67:
                    00:41:3e:f2:bc:5c:c8:3a:f7:8e:55:bd:7d:39:ef:
                    92:8a:7b:81:37:97:e8:cd:2f:a3:39:d4:3a:be:f7:
                    e7:75:2b:07:eb:8d:90:86:d2:c7:a4:e7:29:fe:54:
                    6c:2c:07:db:ea:da:e9:1f:e1:cc:69:1d:9b:6e:43:
                    03:22:03:f5:54:7f:9d:27:74:d0:c4:16:f2:ac:d7:
                    eb:81:84:d2:f4:47:1f:cb:24:b9:a0:4f:87:2f:e3:
                    83:c9:62:64:04:0d:e4:a0:68:8f:bb:5a:2c:61:24:
                    fb:2d:b0:80:7f:e5:01:ee:5b:38:9b:16:ef:3f:27:
                    6e:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:A7:4A:4C:46:F5:EB:39:49:B0:D8:92:45:E7:DB:1F:FE:C8:DF:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c358bafc-dd64-36da-99f4-9718f68a72a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.34.234.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:46:30:56:8c:fc:65:52:a2:c8:f3:64:63:18:4c:1d:6b:17:
         05:ad:39:23:ff:ab:c1:0b:0a:23:25:d9:78:4d:18:e9:55:b3:
         e1:9c:3c:e0:f8:91:41:2a:a9:31:cf:64:88:a6:12:55:21:2d:
         9e:e2:5d:ba:60:d1:41:7b:9e:56:27:53:ce:3d:6d:fc:30:38:
         3f:dc:e7:3d:fd:23:bf:0f:bc:a5:e8:e5:44:28:0a:4d:4c:78:
         df:71:a9:05:ec:61:06:03:71:b8:22:0f:bf:ae:a2:c8:a7:14:
         90:41:05:86:cf:24:8f:bb:d7:7a:c3:68:72:52:1a:8d:fe:8d:
         e9:02:47:1f:25:e5:22:0a:96:54:a6:35:57:1a:f5:76:a8:cb:
         76:01:77:62:0b:9d:2c:cb:b3:69:7f:bc:64:59:6d:3c:3c:5d:
         5e:be:da:63:d6:11:2d:ab:04:f7:b7:82:4f:f0:bd:86:9c:c4:
         dd:01:56:04:d1:5b:a7:58:70:5e:58:28:0d:14:cf:48:b2:eb:
         e5:df:3a:eb:d1:f8:84:01:c0:e0:50:14:85:94:f8:e3:44:83:
         b6:58:a3:e7:99:03:46:66:03:55:7c:09:29:72:9d:88:82:43:
         4b:f5:d9:91:74:d2:75:91:23:52:40:51:ed:6b:96:61:ed:72:
         26:bb:7b:b7
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWErgMaN4Q5uOiYlAFQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDgxNjEzMDA0MloXDTI1MTExNDE0MDA0MlowLzEtMCsGA1UEAxMk
NzQyYmY0YWYtYzdiMC00Mjk3LWI4NWYtMjMyM2QwODVlZDJkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvjyS1b8GSO8eH+bSyRQrIH92PwpcwP3QLjy3
4FwBN1sKEY25t3ccu4USoOeIXjLrtxTSn4+6kI+seHZgUmI9xVJwi/T4/pXptzCZ
Zvp/tBQQ6TFBacGTPTBNU+9qIe+qgBIwxHhAh4la1NvQBgKzAvVBhPLIc25MHz1v
ASYPghAvf7gfnmcAQT7yvFzIOveOVb19Oe+SinuBN5fozS+jOdQ6vvfndSsH642Q
htLHpOcp/lRsLAfb6trpH+HMaR2bbkMDIgP1VH+dJ3TQxBbyrNfrgYTS9EcfyyS5
oE+HL+ODyWJkBA3koGiPu1osYST7LbCAf+UB7ls4mxbvPyduzQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFL+nSkxG9es5SbDYkkXn2x/+yN84MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYzM1OGJhZmMtZGQ2NC0z
NmRhLTk5ZjQtOTcxOGY2OGE3MmEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCLqHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAlRjBWjPxlUqLI82RjGEwdaxcFrTkj/6vBCwojJdl4TRjpVbPhnDzg
+JFBKqkxz2SIphJVIS2e4l26YNFBe55WJ1POPW38MDg/3Oc9/SO/D7yl6OVEKApN
THjfcakF7GEGA3G4Ig+/rqLIpxSQQQWGzySPu9d6w2hyUhqN/o3pAkcfJeUiCpZU
pjVXGvV2qMt2AXdiC50sy7Npf7xkWW08PF1evtpj1hEtqwT3t4JP8L2GnMTdAVYE
0VunWHBeWCgNFM9Isuvl3zrr0fiEAcDgUBSFlPjjRIO2WKPnmQNGZgNVfAkpcp2I
gkNL9dmRdNJ1kSNSQFHta5Zh7XImu3u3
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:58:33 2025 by rpki-client