Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9309498e-8bee-4db3-b4ef-5fd6f3576eb3/1e5a4ada-db5b-31a4-8492-720d5e5c918c.roa
File:                     1e5a4ada-db5b-31a4-8492-720d5e5c918c.roa (raw, json)
Hash identifier:          i8tz90p9CpyE917RJfI93lwSiLwmryLCgiWOcapS7Qc=
Subject key identifier:   B9:83:7B:32:8C:C0:D4:D9:B5:92:A7:84:69:BF:90:D5:4E:79:53:5C
Certificate issuer:       /CN=9309498e-8bee-4db3-b4ef-5fd6f3576eb3
Certificate serial:       010D0C9F4328584A1F902139614E8B1010DBADFC
Authority key identifier: 17:A1:2C:2F:D3:E3:EA:3B:E7:9F:FD:38:65:EF:F9:35:A5:D8:61:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9309498e-8bee-4db3-b4ef-5fd6f3576eb3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9309498e-8bee-4db3-b4ef-5fd6f3576eb3/1e5a4ada-db5b-31a4-8492-720d5e5c918c.roa
Signing time:             Sun 08 Jun 2025 13:01:01 +0000
ROA not before:           Sun 08 Jun 2025 13:01:01 +0000
ROA not after:            Sat 06 Sep 2025 13:01:01 +0000
asID:                     61317
IP address blocks:        192.48.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9309498e-8bee-4db3-b4ef-5fd6f3576eb3/9309498e-8bee-4db3-b4ef-5fd6f3576eb3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9309498e-8bee-4db3-b4ef-5fd6f3576eb3/9309498e-8bee-4db3-b4ef-5fd6f3576eb3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9309498e-8bee-4db3-b4ef-5fd6f3576eb3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1f:90:21:39:61:4e:8b:10:10:db:ad:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9309498e-8bee-4db3-b4ef-5fd6f3576eb3
        Validity
            Not Before: Jun  8 13:01:01 2025 GMT
            Not After : Sep  6 13:01:01 2025 GMT
        Subject: CN=17360698-6749-464f-a391-90faf2ddaa82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:3e:63:57:2e:cf:ff:e3:ba:44:92:cd:a6:1a:
                    da:78:db:a8:70:b7:49:e1:9e:66:58:fa:52:10:c3:
                    3a:fb:0a:53:cc:b8:e1:08:16:8b:f1:f3:b4:f4:52:
                    a6:07:3b:62:bf:a0:83:bd:13:ac:03:00:f5:7e:d6:
                    00:18:60:c5:de:e1:d3:bf:5f:f5:98:2f:0d:be:bb:
                    d6:d1:50:4e:ff:1a:37:34:75:98:42:05:1a:a1:57:
                    db:43:a7:e6:59:1c:41:c4:20:29:69:b0:06:21:be:
                    98:9f:68:32:ae:d8:af:d6:c5:67:35:30:30:b3:5a:
                    2a:be:6e:b6:f4:83:36:14:a7:08:4a:da:c8:06:32:
                    07:32:e4:dd:90:4a:e3:a5:ee:9e:e9:c6:fa:ca:f1:
                    9a:5d:39:48:3d:20:13:51:de:2b:c3:04:39:5e:d4:
                    fa:e2:07:83:9d:c8:38:0d:26:ff:e3:8c:04:81:7e:
                    a6:0c:3c:f7:23:14:79:23:8d:d1:bf:df:46:9b:3a:
                    26:97:84:5f:8a:50:1e:c2:ce:60:a0:1a:60:d6:91:
                    65:41:80:cb:4f:ff:f6:27:ef:6d:31:59:c0:c1:de:
                    b6:28:9f:f9:02:6f:ad:05:dd:4f:07:09:d0:b9:73:
                    f8:27:ed:85:69:b5:04:67:e1:d1:9b:ab:8d:23:69:
                    b6:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:83:7B:32:8C:C0:D4:D9:B5:92:A7:84:69:BF:90:D5:4E:79:53:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9309498e-8bee-4db3-b4ef-5fd6f3576eb3/1e5a4ada-db5b-31a4-8492-720d5e5c918c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9309498e-8bee-4db3-b4ef-5fd6f3576eb3/9309498e-8bee-4db3-b4ef-5fd6f3576eb3.crl

            X509v3 Authority Key Identifier:
                keyid:17:A1:2C:2F:D3:E3:EA:3B:E7:9F:FD:38:65:EF:F9:35:A5:D8:61:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9309498e-8bee-4db3-b4ef-5fd6f3576eb3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.48.234.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:05:c1:72:04:c4:13:57:17:72:c2:15:8a:64:bb:4f:1f:d9:
         59:f1:d2:14:5b:af:a5:d9:61:6f:89:8f:bf:e2:8c:1f:ec:9f:
         82:f3:a9:3f:fe:37:cc:65:91:62:b4:e6:e0:9f:63:e2:c7:d9:
         e4:f5:df:a6:67:68:bc:7d:5a:22:8c:b1:c8:d5:eb:8d:9f:71:
         49:b4:6f:76:29:a4:cb:66:a6:52:48:52:8c:94:89:c0:42:f0:
         5f:24:f8:db:78:0c:1b:fa:a3:ee:e1:18:8f:ae:aa:0b:f3:f3:
         fe:48:54:30:bb:b7:42:2d:c4:12:e5:f2:2a:eb:81:92:42:c6:
         0b:1a:46:57:14:5e:86:c2:2d:de:68:c7:ae:8b:30:1d:74:5d:
         c9:5c:6b:29:a0:6a:61:f7:a7:bb:9d:0e:43:75:7b:ef:03:03:
         55:b8:9f:eb:fa:83:20:b4:e5:58:58:11:9d:d8:5f:a7:4c:dd:
         78:44:a4:98:92:30:3e:43:2b:6c:7f:87:19:64:85:85:37:a8:
         bb:b2:1f:2e:64:60:5d:80:be:0b:23:41:b8:5c:c2:98:8b:8a:
         e1:7b:50:d1:23:22:1a:fd:6f:1f:78:e5:02:60:e8:bb:c7:cb:
         70:c1:4b:68:45:72:45:be:de:aa:e6:4a:6f:6d:22:6d:9a:cb:
         18:07:94:68
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEofkCE5YU6LEBDbrfwwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTMwOTQ5OGUtOGJlZS00ZGIzLWI0ZWYtNWZkNmYzNTc2
ZWIzMB4XDTI1MDYwODEzMDEwMVoXDTI1MDkwNjEzMDEwMVowLzEtMCsGA1UEAxMk
MTczNjA2OTgtNjc0OS00NjRmLWEzOTEtOTBmYWYyZGRhYTgyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgD5jVy7P/+O6RJLNphraeNuocLdJ4Z5mWPpS
EMM6+wpTzLjhCBaL8fO09FKmBztiv6CDvROsAwD1ftYAGGDF3uHTv1/1mC8NvrvW
0VBO/xo3NHWYQgUaoVfbQ6fmWRxBxCApabAGIb6Yn2gyrtiv1sVnNTAws1oqvm62
9IM2FKcIStrIBjIHMuTdkErjpe6e6cb6yvGaXTlIPSATUd4rwwQ5XtT64geDncg4
DSb/44wEgX6mDDz3IxR5I43Rv99Gmzoml4RfilAews5goBpg1pFlQYDLT//2J+9t
MVnAwd62KJ/5Am+tBd1PBwnQuXP4J+2FabUEZ+HRm6uNI2m2MwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLmDezKMwNTZtZKnhGm/kNVOeVNcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MzA5
NDk4ZS04YmVlLTRkYjMtYjRlZi01ZmQ2ZjM1NzZlYjMvMWU1YTRhZGEtZGI1Yi0z
MWE0LTg0OTItNzIwZDVlNWM5MThjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTMwOTQ5OGUtOGJlZS00ZGIzLWI0
ZWYtNWZkNmYzNTc2ZWIzLzkzMDk0OThlLThiZWUtNGRiMy1iNGVmLTVmZDZmMzU3
NmViMy5jcmwwHwYDVR0jBBgwFoAUF6EsL9Pj6jvnn/04Ze/5NaXYYakwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MzA5NDk4ZS04YmVlLTRkYjMtYjRlZi01ZmQ2
ZjM1NzZlYjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDDqMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADgFwXIExBNXF3LCFYpku08f2Vnx0hRbr6XZYW+Jj7/ijB/sn4LzqT/+
N8xlkWK05uCfY+LH2eT136ZnaLx9WiKMscjV642fcUm0b3YppMtmplJIUoyUicBC
8F8k+Nt4DBv6o+7hGI+uqgvz8/5IVDC7t0ItxBLl8irrgZJCxgsaRlcUXobCLd5o
x66LMB10XclcaymgamH3p7udDkN1e+8DA1W4n+v6gyC05VhYEZ3YX6dM3XhEpJiS
MD5DK2x/hxlkhYU3qLuyHy5kYF2AvgsjQbhcwpiLiuF7UNEjIhr9bx945QJg6LvH
y3DBS2hFckW+3qrmSm9tIm2ayxgHlGg=
-----END CERTIFICATE-----
Generated at Sun Jun 15 05:12:03 2025 by rpki-client