Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/133b3d74-aa59-31b5-ad6f-3c731bdf9084.roa
File:                     133b3d74-aa59-31b5-ad6f-3c731bdf9084.roa (raw, json)
Hash identifier:          PrCydI66IEIbuERdqmP2EkgdKBpgdjvzQNU8e01DCK0=
Subject key identifier:   80:30:9D:33:49:00:FC:48:01:20:DF:CC:6C:CB:7C:5F:08:DD:19:E9
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B2B91A458650821F39B6DDEE0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/133b3d74-aa59-31b5-ad6f-3c731bdf9084.roa
Signing time:             Fri 12 Sep 2025 13:00:42 +0000
ROA not before:           Fri 12 Sep 2025 13:00:42 +0000
ROA not after:            Thu 11 Dec 2025 14:00:42 +0000
asID:                     36625
IP address blocks:        192.12.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2b:91:a4:58:65:08:21:f3:9b:6d:de:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 12 13:00:42 2025 GMT
            Not After : Dec 11 14:00:42 2025 GMT
        Subject: CN=87432a80-108f-4e7e-8d47-7a8a5f850fa7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:7e:8f:3d:48:c9:bb:cf:7c:37:b6:e7:ba:27:
                    9d:62:6a:a5:f8:88:f5:ed:12:fb:35:1d:97:1d:08:
                    5d:d9:0b:ce:8a:91:d4:25:e2:96:6d:88:f9:31:25:
                    62:20:75:33:97:06:ac:cf:3f:d6:82:6e:ef:7a:8b:
                    3f:38:bd:c1:c3:ba:6b:cf:c6:5a:b2:6a:4a:2b:d8:
                    43:9f:df:a7:96:0a:ff:88:0c:6e:1e:15:8f:bc:55:
                    c8:e6:c3:6f:d3:fb:be:e4:ec:71:64:80:56:00:53:
                    2c:60:52:cd:8e:f7:aa:70:d2:1b:23:0c:19:19:89:
                    21:4d:bf:ea:1a:d4:0b:e8:21:91:2e:27:85:9e:af:
                    72:74:9b:92:c3:ba:8d:b9:ad:88:9c:52:c4:cf:e9:
                    f5:84:60:8b:a5:d5:7f:11:20:d3:3f:a7:a4:a1:e4:
                    3e:2e:14:7b:d7:24:ff:d8:ec:a7:4b:39:a7:d4:ed:
                    6c:46:df:36:7e:e2:b6:83:23:57:3c:66:83:4c:a4:
                    23:d4:f6:51:ca:06:bd:86:f3:c9:1e:1d:81:c6:78:
                    6b:78:e6:e1:0f:23:52:d7:8f:11:1b:5b:82:53:cd:
                    bc:ff:70:a1:b3:fb:2c:be:35:78:36:3e:34:88:14:
                    5a:6b:19:45:fe:c7:e1:4a:2f:a3:04:3f:9d:cf:fa:
                    ef:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:30:9D:33:49:00:FC:48:01:20:DF:CC:6C:CB:7C:5F:08:DD:19:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/133b3d74-aa59-31b5-ad6f-3c731bdf9084.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.12.94.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:0a:51:a8:59:61:2e:60:69:b0:4e:0d:fd:79:c8:c4:8a:bd:
         ab:3c:a1:0f:e5:e5:89:3d:be:04:f2:2c:0a:e2:eb:53:66:b2:
         aa:fd:72:1a:ba:61:c0:05:4a:39:31:53:2e:ad:99:37:cd:1e:
         9f:af:cc:73:49:76:8a:b2:30:50:5f:94:2d:f3:eb:35:17:2b:
         ca:55:a1:10:99:d9:e7:a0:d2:86:9f:5b:ad:0e:53:0c:a1:f1:
         62:56:98:e9:a6:bb:9e:9e:22:ed:1f:51:16:27:02:47:90:fe:
         78:72:67:04:0f:43:49:24:31:c5:c2:42:47:29:72:23:be:1e:
         5b:94:95:f8:fd:a3:bd:a4:68:6a:be:9e:2a:f8:83:f8:80:28:
         dc:db:c8:c9:9c:6e:84:77:d8:0f:ec:d5:77:db:07:21:09:69:
         71:70:74:e8:ec:fd:d5:3c:00:bf:96:4b:b2:7a:0c:9f:5a:92:
         75:6c:f3:9a:5c:f4:99:30:73:f4:d9:c4:ff:52:aa:01:b6:af:
         25:2d:28:ae:ca:bf:00:80:9d:41:cb:1d:51:7d:b3:1c:61:0e:
         a6:1a:21:12:90:33:8f:ec:af:19:be:5a:57:8e:e4:d1:f5:fc:
         38:cb:50:87:9e:b9:a5:67:0f:a6:e2:09:00:cb:6d:af:02:0c:
         38:6b:99:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:14:35 2025 by rpki-client