Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/09f8b958-fb92-31b4-a2c6-ddbde09ed5ce.roa
File:                     09f8b958-fb92-31b4-a2c6-ddbde09ed5ce.roa (raw, json)
Hash identifier:          XnqDz+CHyFKoBaG7z156V2zWS2NrplTsbtqKYEkKx74=
Subject key identifier:   33:22:4B:0D:00:4E:3D:C7:35:C3:5B:77:43:19:B7:FD:A8:20:4E:87
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A4C2D542502417426E8A60800
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/09f8b958-fb92-31b4-a2c6-ddbde09ed5ce.roa
Signing time:             Tue 24 Jun 2025 12:33:32 +0000
ROA not before:           Tue 24 Jun 2025 12:33:32 +0000
ROA not after:            Mon 22 Sep 2025 12:33:32 +0000
asID:                     396550
IP address blocks:        192.12.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4c:2d:54:25:02:41:74:26:e8:a6:08:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 24 12:33:32 2025 GMT
            Not After : Sep 22 12:33:32 2025 GMT
        Subject: CN=4c513793-c4c3-4784-92dc-42ebe36db32d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:fb:db:47:e5:82:53:fa:e2:be:a6:b4:44:25:
                    8c:2b:ff:bc:1d:56:17:94:53:4b:95:b6:11:80:bd:
                    07:07:07:e1:6e:c1:c0:c1:6d:2b:a0:45:5d:f2:f5:
                    af:7f:48:51:e0:42:8c:f3:ce:4c:0c:91:67:7c:4d:
                    81:33:8d:d8:22:67:42:a9:e8:a3:9b:a5:22:6d:0f:
                    b8:1d:39:18:91:34:4b:ca:67:b4:18:c7:f8:2c:41:
                    e0:fb:58:7a:a0:66:4f:c3:5a:be:1e:15:de:0b:1c:
                    c5:52:da:58:fb:c1:e8:f3:99:13:7a:29:25:a7:d9:
                    f3:c6:2c:b0:ca:06:4b:df:09:48:c0:66:fd:72:6f:
                    1e:81:8d:88:50:9a:14:07:91:89:9c:be:92:5c:d4:
                    6b:ca:42:a0:7b:a9:b5:45:05:a5:e0:c3:b5:5e:1a:
                    83:03:a8:c6:73:af:54:03:cf:16:a9:6c:bd:aa:2d:
                    cd:ec:cc:b7:1b:03:f9:17:50:10:0a:7d:54:45:55:
                    1a:c9:e0:09:69:0d:0d:b7:3c:79:8f:96:53:19:11:
                    f7:1e:8f:d3:3d:1a:82:5b:f0:1f:a3:b6:3e:0e:ae:
                    30:30:2a:62:4e:35:2b:65:f5:ac:bc:9c:d3:b2:0c:
                    21:2b:1f:41:90:05:8b:72:87:10:dd:3d:40:e4:e8:
                    d6:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:22:4B:0D:00:4E:3D:C7:35:C3:5B:77:43:19:B7:FD:A8:20:4E:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/09f8b958-fb92-31b4-a2c6-ddbde09ed5ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.12.94.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:1b:a1:5a:3d:30:b6:f4:48:f3:e6:0d:f4:69:f7:2c:90:b4:
         58:b0:6c:bf:05:17:1f:66:e4:93:d2:7f:ec:60:14:38:f1:d3:
         b8:04:31:72:c9:d8:4f:49:87:88:a9:fc:f1:38:96:9c:e6:93:
         5c:c7:2e:e4:7d:9a:ef:4e:53:08:66:03:10:33:46:18:b2:15:
         97:41:9b:dc:be:75:70:b5:83:36:c4:d5:d4:53:f4:42:3d:d4:
         6f:70:bc:8b:21:fa:08:55:7f:28:77:b9:0b:26:a0:c1:c4:05:
         7c:59:8c:7e:09:3e:ad:ca:d8:d7:80:61:7b:36:5e:c5:93:6e:
         46:69:24:af:67:d6:f1:02:20:84:26:51:e6:b4:0d:ec:67:1e:
         fd:f7:76:a0:e6:ef:40:9b:44:c5:91:c4:53:cc:b7:92:92:85:
         71:87:be:25:03:b2:99:f2:9a:d8:c3:59:d5:36:2b:29:c4:9f:
         bc:f3:31:b1:61:00:95:4c:ad:26:87:d8:9d:6e:0f:a1:54:49:
         f4:2b:d1:33:e6:f2:93:41:0c:6a:20:c5:0a:c1:02:07:c5:fe:
         3e:b1:f2:f3:32:94:7c:51:61:9b:9e:85:f4:67:9a:05:1b:42:
         b8:60:aa:24:32:f1:90:08:61:15:10:b3:b2:27:04:c2:00:a4:
         0c:e5:30:04
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpMLVQlAkF0JuimCAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDYyNDEyMzMzMloXDTI1MDkyMjEyMzMzMlowLzEtMCsGA1UEAxMk
NGM1MTM3OTMtYzRjMy00Nzg0LTkyZGMtNDJlYmUzNmRiMzJkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiPvbR+WCU/rivqa0RCWMK/+8HVYXlFNLlbYR
gL0HBwfhbsHAwW0roEVd8vWvf0hR4EKM885MDJFnfE2BM43YImdCqeijm6UibQ+4
HTkYkTRLyme0GMf4LEHg+1h6oGZPw1q+HhXeCxzFUtpY+8Ho85kTeiklp9nzxiyw
ygZL3wlIwGb9cm8egY2IUJoUB5GJnL6SXNRrykKge6m1RQWl4MO1XhqDA6jGc69U
A88WqWy9qi3N7My3GwP5F1AQCn1URVUayeAJaQ0Ntzx5j5ZTGRH3Ho/TPRqCW/Af
o7Y+Dq4wMCpiTjUrZfWsvJzTsgwhKx9BkAWLcocQ3T1A5OjW2QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDMiSw0ATj3HNcNbd0MZt/2oIE6HMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMDlmOGI5NTgtZmI5Mi0z
MWI0LWEyYzYtZGRiZGUwOWVkNWNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwAxeMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA4boVo9MLb0SPPmDfRp9yyQtFiwbL8FFx9m5JPSf+xgFDjx07gEMXLJ
2E9Jh4ip/PE4lpzmk1zHLuR9mu9OUwhmAxAzRhiyFZdBm9y+dXC1gzbE1dRT9EI9
1G9wvIsh+ghVfyh3uQsmoMHEBXxZjH4JPq3K2NeAYXs2XsWTbkZpJK9n1vECIIQm
Uea0DexnHv33dqDm70CbRMWRxFPMt5KShXGHviUDspnymtjDWdU2KynEn7zzMbFh
AJVMrSaH2J1uD6FUSfQr0TPm8pNBDGogxQrBAgfF/j6x8vMylHxRYZuehfRnmgUb
QrhgqiQy8ZAIYRUQs7InBMIApAzlMAQ=
-----END CERTIFICATE-----
Generated at Mon Jun 30 11:16:32 2025 by rpki-client