Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ce1802f1-3d54-322f-99fe-d05a8ca8bd7f.roa
File:                     ce1802f1-3d54-322f-99fe-d05a8ca8bd7f.roa (raw, json)
Hash identifier:          1rivytFkO5g5QVzHI8/QB9+NSIsEV1fN5py7yhOBDwU=
Subject key identifier:   E3:21:C7:DA:3B:9B:EF:E7:D4:45:4C:CC:A3:48:BA:4B:B5:1B:40:54
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AE031A1DF87D85A4F9A605E00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ce1802f1-3d54-322f-99fe-d05a8ca8bd7f.roa
Signing time:             Sat 16 Aug 2025 13:00:42 +0000
ROA not before:           Sat 16 Aug 2025 13:00:42 +0000
ROA not after:            Fri 14 Nov 2025 14:00:42 +0000
asID:                     396578
IP address blocks:        192.34.234.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e0:31:a1:df:87:d8:5a:4f:9a:60:5e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 16 13:00:42 2025 GMT
            Not After : Nov 14 14:00:42 2025 GMT
        Subject: CN=e17508be-4b8d-4a53-8d78-358417c04da1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:32:44:26:b4:45:df:a8:7d:f0:0b:c2:6e:7a:
                    79:f3:ab:7e:32:5e:33:40:cc:3f:ba:fb:67:03:ba:
                    bb:f7:cb:fb:a6:b5:cc:39:62:ba:8c:21:78:9d:8f:
                    94:20:0f:47:3b:02:2d:6f:d0:d1:b4:63:b9:30:e4:
                    c4:00:bf:cc:a3:cd:ee:19:21:3c:f4:34:43:d3:0e:
                    a5:d4:1e:29:47:60:8d:f4:a8:de:7f:fc:fd:7f:52:
                    58:d7:da:42:16:9f:b3:f7:b4:58:40:03:dc:c3:d8:
                    3d:bd:3f:54:10:b9:12:aa:9b:a7:62:da:c1:12:1e:
                    b3:a1:e9:51:13:29:47:59:70:80:89:9c:08:ac:27:
                    8b:96:75:96:5c:00:77:9c:90:f8:22:1f:2b:c8:0b:
                    10:37:42:04:d1:bb:0d:8f:5e:13:25:75:94:3c:ab:
                    7a:9c:01:35:9d:38:68:ac:87:66:1f:49:a2:93:47:
                    a2:9d:7c:54:1b:82:3e:ec:51:3a:b5:fa:42:5f:60:
                    6f:f1:1b:7d:c8:e8:0f:00:96:a6:80:0e:ec:5b:3c:
                    d5:ac:ac:a5:54:2b:d3:05:a0:ee:76:b0:55:c4:3a:
                    7e:38:06:12:87:ea:76:27:92:c2:7f:dc:a0:12:0c:
                    58:52:95:a5:14:a1:58:dd:d8:23:5b:4d:ee:ec:4c:
                    47:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:21:C7:DA:3B:9B:EF:E7:D4:45:4C:CC:A3:48:BA:4B:B5:1B:40:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ce1802f1-3d54-322f-99fe-d05a8ca8bd7f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.34.234.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:4d:be:f3:0d:b0:3b:f4:4a:2d:c9:1c:56:60:07:94:34:51:
         ae:cb:b9:4d:45:34:b1:86:ad:87:01:66:59:5f:17:e8:37:76:
         84:c3:00:9e:8f:dd:b0:98:1a:6d:b3:58:df:ac:fc:ee:03:41:
         66:7e:2a:a6:2d:85:6a:63:76:cc:81:02:6b:50:4b:ba:90:05:
         ae:fe:cf:3a:60:d3:7a:c6:f3:b8:f7:df:8c:12:01:df:51:69:
         63:f1:ef:66:52:7e:53:36:8e:b8:d4:f4:e1:80:ac:8d:4f:b6:
         9f:45:62:4a:f2:f4:c1:14:14:9a:d2:90:50:65:5a:a3:04:96:
         f3:52:ee:91:da:49:c5:3d:8d:4f:ad:bc:cb:19:6d:6a:dd:25:
         7c:84:f7:82:19:e6:0f:0a:b3:df:d5:e3:a1:2f:0a:2f:b6:0f:
         d5:ef:91:3b:de:c4:4f:5c:b0:cc:f1:04:eb:ca:ba:3c:0d:fc:
         57:33:22:a7:14:79:b1:d0:94:56:15:de:52:57:43:fb:1b:56:
         cf:66:1b:34:43:f0:dd:45:b5:fb:ef:95:32:71:e4:8a:4b:a0:
         98:2f:27:d2:92:53:db:ae:3d:1d:d0:e5:ef:a9:48:2f:ef:ce:
         1e:41:f3:4f:5e:98:91:a1:ae:19:f8:c1:a1:0a:c0:7e:92:7e:
         60:90:e9:2a
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWErgMaHfh9haT5pgXgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDgxNjEzMDA0MloXDTI1MTExNDE0MDA0MlowLzEtMCsGA1UEAxMk
ZTE3NTA4YmUtNGI4ZC00YTUzLThkNzgtMzU4NDE3YzA0ZGExMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhzJEJrRF36h98AvCbnp586t+Ml4zQMw/uvtn
A7q798v7prXMOWK6jCF4nY+UIA9HOwItb9DRtGO5MOTEAL/Mo83uGSE89DRD0w6l
1B4pR2CN9Kjef/z9f1JY19pCFp+z97RYQAPcw9g9vT9UELkSqpunYtrBEh6zoelR
EylHWXCAiZwIrCeLlnWWXAB3nJD4Ih8ryAsQN0IE0bsNj14TJXWUPKt6nAE1nTho
rIdmH0mik0einXxUG4I+7FE6tfpCX2Bv8Rt9yOgPAJamgA7sWzzVrKylVCvTBaDu
drBVxDp+OAYSh+p2J5LCf9ygEgxYUpWlFKFY3dgjW03u7ExHDQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFOMhx9o7m+/n1EVMzKNIuku1G0BUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvY2UxODAyZjEtM2Q1NC0z
MjJmLTk5ZmUtZDA1YThjYThiZDdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCLqHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAGTb7zDbA79EotyRxWYAeUNFGuy7lNRTSxhq2HAWZZXxfoN3aEwwCe
j92wmBpts1jfrPzuA0FmfiqmLYVqY3bMgQJrUEu6kAWu/s86YNN6xvO499+MEgHf
UWlj8e9mUn5TNo641PThgKyNT7afRWJK8vTBFBSa0pBQZVqjBJbzUu6R2knFPY1P
rbzLGW1q3SV8hPeCGeYPCrPf1eOhLwovtg/V75E73sRPXLDM8QTryro8DfxXMyKn
FHmx0JRWFd5SV0P7G1bPZhs0Q/DdRbX775UyceSKS6CYLyfSklPbrj0d0OXvqUgv
784eQfNPXpiRoa4Z+MGhCsB+kn5gkOkq
-----END CERTIFICATE-----
Generated at Sat Aug 23 13:08:09 2025 by rpki-client