Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/133b3d74-aa59-31b5-ad6f-3c731bdf9084.roa
File:                     133b3d74-aa59-31b5-ad6f-3c731bdf9084.roa (raw, json)
Hash identifier:          OzN0U2tDRII+YwtW/lkQdfzT5LcxWf//AQjB5UtaVkU=
Subject key identifier:   CF:6A:E2:D6:A3:2B:7E:B0:BA:1D:B8:E7:F6:7B:96:68:B2:9C:7D:2E
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A4C2D550BEB748C92B6D56B40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/133b3d74-aa59-31b5-ad6f-3c731bdf9084.roa
Signing time:             Tue 24 Jun 2025 12:33:32 +0000
ROA not before:           Tue 24 Jun 2025 12:33:32 +0000
ROA not after:            Mon 22 Sep 2025 12:33:32 +0000
asID:                     36625
IP address blocks:        192.12.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4c:2d:55:0b:eb:74:8c:92:b6:d5:6b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 24 12:33:32 2025 GMT
            Not After : Sep 22 12:33:32 2025 GMT
        Subject: CN=560a5ca2-5d48-40b8-9970-f6d45bd41cf8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:00:7d:40:01:89:d4:2a:ff:ac:7a:6c:78:c8:
                    38:33:75:2f:fb:69:52:25:b4:df:97:f1:66:63:f2:
                    7f:13:a3:1a:fd:bb:7d:6e:15:47:5d:07:72:ca:eb:
                    96:82:7f:dc:9d:6b:55:f3:d1:72:6e:86:65:5e:0d:
                    1c:87:5c:c5:15:7c:b9:47:aa:14:32:5b:40:9d:db:
                    6a:54:f4:85:35:fd:ce:6a:94:32:50:60:59:23:3f:
                    f9:aa:77:1d:5e:a0:00:cc:02:f2:9a:27:6a:13:ae:
                    e6:52:b3:e0:54:8d:68:c6:0b:bf:4b:88:e0:8f:2c:
                    cb:3d:57:8e:4f:48:89:f3:72:ed:9f:6f:86:6a:51:
                    ab:d5:63:fa:b0:42:45:35:74:24:45:39:70:6e:66:
                    35:29:b0:d0:db:d7:09:a8:8a:0c:ca:3c:01:73:c6:
                    40:c1:4b:0a:7b:53:48:d4:67:88:b5:77:a6:b3:0a:
                    17:94:1c:7b:e1:1e:46:72:80:04:45:84:13:6b:7f:
                    51:06:47:ca:c7:9d:79:d7:d4:51:e8:7d:63:71:9f:
                    c1:10:e5:66:c1:a6:db:20:0f:74:3f:c4:55:50:97:
                    85:29:56:73:c8:59:1c:21:84:4c:11:3a:a9:e2:9b:
                    61:75:7b:01:7b:c6:16:3a:95:09:ff:67:e9:69:84:
                    a5:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:6A:E2:D6:A3:2B:7E:B0:BA:1D:B8:E7:F6:7B:96:68:B2:9C:7D:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/133b3d74-aa59-31b5-ad6f-3c731bdf9084.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.12.94.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:9f:cb:cb:cb:ae:8e:08:98:4c:8b:34:d2:41:82:2e:ca:5d:
         f9:39:fb:39:48:17:e4:bf:68:97:f2:d0:a7:4f:16:d1:72:13:
         07:31:c4:84:0a:0c:04:54:f8:42:d7:7c:ee:21:b5:c9:61:7b:
         52:20:9e:b2:ac:aa:04:58:39:4f:20:e4:62:88:0c:42:ef:25:
         2a:67:07:bd:b4:9c:a1:af:e0:cf:4e:8a:8a:d4:99:58:11:ae:
         de:46:c6:35:63:dc:be:57:fa:13:bb:f5:3f:28:f3:69:d6:a3:
         48:8e:7c:e6:f0:04:f1:b9:a8:33:09:64:64:3e:67:a1:84:e4:
         85:e8:a4:16:fe:3e:d7:10:39:66:65:4c:63:a2:39:f3:10:a0:
         ea:a5:a5:7d:93:97:c8:29:d1:9a:55:ba:11:c1:36:c3:94:4c:
         ee:dd:ab:bb:c5:2f:01:6f:b6:18:4a:c4:57:e2:75:73:2a:b5:
         fe:48:98:df:88:de:3f:bb:b2:78:53:ab:f9:41:2e:37:74:aa:
         c0:91:be:68:05:08:aa:ee:06:a5:e4:e5:4e:50:87:55:2d:0b:
         20:f1:df:74:0c:a6:dc:29:fc:f8:01:76:cd:45:9b:34:71:ba:
         44:9d:f9:95:8b:06:e5:33:30:b3:80:6f:dc:9d:c4:49:ca:0e:
         b4:cd:db:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 11:47:29 2025 by rpki-client