Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/14bfa9d6-756b-314d-ab30-44e98d9d827b.roa
File:                     14bfa9d6-756b-314d-ab30-44e98d9d827b.roa (raw, json)
Hash identifier:          l1wTN1Zs76EMUwP5e2+639oJcFKM4cAn0BUR6RuUQ64=
Subject key identifier:   D3:FC:31:B7:6C:C7:0F:53:09:81:59:F8:5C:C4:EC:2E:53:6B:D8:43
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B434CAB419C2B494694692540
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/14bfa9d6-756b-314d-ab30-44e98d9d827b.roa
Signing time:             Sun 21 Sep 2025 01:00:32 +0000
ROA not before:           Sun 21 Sep 2025 01:00:32 +0000
ROA not after:            Sat 20 Dec 2025 02:00:32 +0000
asID:                     396563
IP address blocks:        192.12.94.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:43:4c:ab:41:9c:2b:49:46:94:69:25:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 21 01:00:32 2025 GMT
            Not After : Dec 20 02:00:32 2025 GMT
        Subject: CN=67131c0b-a2ed-47ba-ba36-033e8320009e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:9e:7e:d0:1c:dd:ab:56:e7:37:40:3b:01:c7:
                    cb:1a:5a:cb:f2:9c:db:bf:eb:1d:5c:8c:a6:08:c0:
                    8d:2e:25:55:e3:9e:00:3d:99:07:84:f3:68:45:c3:
                    35:06:a2:9d:de:8a:de:de:61:c5:5f:d0:40:b2:15:
                    63:42:e5:69:8e:3f:5b:d8:2f:b1:1d:1e:ad:bf:34:
                    65:ba:ef:bd:02:b0:52:54:c4:75:46:d7:8e:06:56:
                    42:f8:b4:30:d9:36:e7:4b:c3:11:f0:91:b1:64:a4:
                    08:12:34:17:91:a5:16:40:87:c7:f1:05:c3:f9:e7:
                    2c:a4:95:02:54:cc:7e:bd:6a:be:c5:22:6e:96:f7:
                    6b:80:eb:bd:d5:39:ed:a6:63:53:1b:57:93:03:97:
                    03:6a:20:26:d2:98:7c:ac:a6:96:ce:aa:d8:00:ae:
                    7e:a8:80:62:03:59:62:43:d2:e9:a8:70:87:e9:ca:
                    4d:fb:16:8e:47:c3:79:28:b9:f6:e9:52:83:11:36:
                    6c:51:cd:4d:1b:d8:f7:0e:46:95:f2:bf:1a:a5:27:
                    dc:f2:56:73:1a:5e:70:ec:87:16:15:dd:ad:61:d4:
                    ec:cd:61:bf:06:8e:b1:3a:dd:a6:94:46:76:03:7f:
                    2f:a5:d5:b8:52:28:0c:55:f6:a9:cd:2e:b5:c1:95:
                    c6:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:FC:31:B7:6C:C7:0F:53:09:81:59:F8:5C:C4:EC:2E:53:6B:D8:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/14bfa9d6-756b-314d-ab30-44e98d9d827b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.12.94.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:c1:37:88:27:db:e5:bd:d5:8c:fa:60:23:ef:1e:8f:3f:e9:
         41:1a:cb:c3:5c:9c:d8:e9:af:b3:f6:bb:1b:6d:e1:c7:c1:da:
         f2:62:f1:33:ef:08:83:60:62:6f:23:9b:c9:ba:38:fd:42:bb:
         77:e7:ed:cd:cc:8a:96:fb:a1:6c:e2:6a:cf:a3:42:bd:ee:64:
         38:b5:46:47:22:b5:e4:95:39:3f:a8:ce:fe:e2:18:a2:3f:fb:
         85:24:6b:a8:3c:4c:ac:6b:0b:fa:06:0d:03:73:97:e1:7b:2c:
         80:dc:69:ab:52:e1:9b:d9:88:6d:d2:f0:a4:62:ef:f1:f8:cc:
         3e:f7:5f:5e:4b:70:93:de:a2:fa:76:72:cf:49:8b:98:7d:66:
         75:05:d7:1c:4b:46:38:76:b4:7b:b0:c6:73:bd:5c:c8:d5:5c:
         1b:0d:fc:34:1b:d7:34:d5:f6:0c:ec:5b:3b:b3:2a:55:52:58:
         32:99:1d:f0:34:69:5b:38:88:19:8d:ea:91:ed:e7:76:f8:8b:
         c7:49:91:c9:10:3d:96:b1:6b:c9:32:2a:51:62:b1:87:a8:64:
         de:93:38:57:a6:38:bc:d5:18:a7:47:34:b6:1b:71:f7:da:f3:
         dd:e0:39:98:50:1f:cc:1c:3a:57:a3:45:c8:7c:45:1a:8b:68:
         d0:da:be:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:12:16 2025 by rpki-client