Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/07e6abda-27a4-3ac7-8110-61f6db5bf812.roa
File:                     07e6abda-27a4-3ac7-8110-61f6db5bf812.roa (raw, json)
Hash identifier:          otd37No6fv6c5QCAwTYbX5TF+Fdz3/Do/Yt/BBmhoOw=
Subject key identifier:   8D:14:0B:41:79:EF:E4:EE:4E:C7:0E:8B:C7:F4:62:C6:D3:1D:11:4C
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B434C68207B196A6328D93E00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/07e6abda-27a4-3ac7-8110-61f6db5bf812.roa
Signing time:             Sun 21 Sep 2025 01:00:32 +0000
ROA not before:           Sun 21 Sep 2025 01:00:32 +0000
ROA not after:            Sat 20 Dec 2025 02:00:32 +0000
asID:                     40717
IP address blocks:        192.12.94.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:43:4c:68:20:7b:19:6a:63:28:d9:3e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 21 01:00:32 2025 GMT
            Not After : Dec 20 02:00:32 2025 GMT
        Subject: CN=9513a426-2c2f-4df1-999c-632407a95fad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:a1:5c:91:e3:de:66:ad:e5:fa:50:05:32:24:
                    bb:24:c9:e4:48:d4:ff:50:33:7d:8d:25:97:11:49:
                    f2:01:5f:8e:f6:ee:06:c2:83:2b:0f:49:cd:59:f0:
                    62:21:77:6a:1a:a5:59:39:e8:ca:fc:05:4d:6d:fd:
                    29:9d:d5:7c:52:d2:f4:89:fc:45:29:bd:e6:e3:eb:
                    20:76:f5:b4:57:0d:a1:9d:7d:04:bb:f3:b6:73:67:
                    29:f1:5a:be:97:f8:f6:09:24:00:a0:33:c0:43:35:
                    ed:88:ac:5d:f7:9d:00:a9:a8:02:27:f4:bf:68:8b:
                    31:bc:1f:56:f6:d7:c5:6a:0a:38:39:96:00:a6:8d:
                    28:04:57:69:b7:7a:00:49:68:07:02:88:ed:86:e2:
                    7a:1d:9d:e5:25:0d:82:5d:ae:0e:2b:aa:9e:c8:d0:
                    c4:96:df:cf:ab:40:c4:68:e0:e7:58:33:3c:7c:a7:
                    19:fb:54:3c:f5:19:c4:08:e6:fb:61:ac:c0:46:05:
                    c2:ef:f9:1b:85:66:e6:f9:67:6d:77:74:56:25:90:
                    f7:be:33:26:2a:84:97:56:c0:08:03:94:c6:b9:a8:
                    25:ff:e6:d6:cd:68:3e:a9:08:a7:a2:63:65:bb:15:
                    ea:7e:19:71:fc:e5:7e:10:80:21:15:ab:fd:d5:e0:
                    95:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:14:0B:41:79:EF:E4:EE:4E:C7:0E:8B:C7:F4:62:C6:D3:1D:11:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/07e6abda-27a4-3ac7-8110-61f6db5bf812.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.12.94.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:52:e6:3d:68:59:92:8f:fb:2c:45:01:d9:02:1e:3a:f2:36:
         25:62:f5:ee:65:ec:79:b5:37:17:16:19:a7:3a:d6:46:d6:0c:
         a8:6c:b8:30:80:35:0f:bf:5c:a8:f3:a8:5d:02:51:20:29:bf:
         7b:d3:6b:b1:ec:1a:8e:11:cd:9f:cc:bf:56:08:52:1c:0e:09:
         42:7c:44:28:33:d5:99:b5:e0:d7:bb:28:fa:41:a6:ea:97:d8:
         ad:e8:4b:cd:ad:7b:4e:dc:dc:c0:86:b0:dd:eb:d3:07:25:1c:
         1b:3a:f1:09:36:68:d0:6d:25:9a:fb:a7:39:2d:60:ef:4e:0a:
         88:bc:37:75:9a:b4:06:31:07:f0:16:4e:74:8f:7d:dd:54:a0:
         0a:24:ac:7c:9b:2e:62:1d:e1:c7:02:b2:2a:32:45:d1:46:d9:
         6c:33:e5:bf:e3:c5:ae:fa:fd:bb:44:44:4a:95:a1:af:c7:c1:
         08:e1:c7:42:22:f7:a6:7b:3e:aa:d8:28:e2:39:a7:c6:46:95:
         02:b1:93:05:cd:38:fb:d1:c7:24:ef:18:64:8c:54:4a:5b:76:
         81:a7:dd:1d:9f:3e:c2:c1:dc:15:a2:51:11:31:40:8e:15:04:
         df:30:c5:ff:81:64:f8:50:8c:0a:73:c2:e3:b5:d5:ce:f3:18:
         27:35:29:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 03:56:49 2025 by rpki-client