Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1df23f5e-9ee3-34f0-8efd-983b2efe93ec.roa
File:                     1df23f5e-9ee3-34f0-8efd-983b2efe93ec.roa (raw, json)
Hash identifier:          jZI3Vm10JofS7016D8ageAtCJyX9SPz1eRC2fKFXdYM=
Subject key identifier:   C5:6D:9F:AB:78:CE:13:2F:72:59:9A:8E:A9:A7:05:6C:70:84:12:0D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A4C2D50A56C38032E966A6260
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1df23f5e-9ee3-34f0-8efd-983b2efe93ec.roa
Signing time:             Tue 24 Jun 2025 12:33:30 +0000
ROA not before:           Tue 24 Jun 2025 12:33:30 +0000
ROA not after:            Mon 22 Sep 2025 12:33:30 +0000
asID:                     36624
IP address blocks:        192.12.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4c:2d:50:a5:6c:38:03:2e:96:6a:62:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 24 12:33:30 2025 GMT
            Not After : Sep 22 12:33:30 2025 GMT
        Subject: CN=85eaf263-8b13-466c-9aad-ba37c1d25bef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:67:f4:a8:00:b9:d2:56:72:83:67:91:da:49:
                    95:01:e7:f1:8e:d8:cb:7f:cf:50:4f:f7:23:25:fe:
                    10:99:02:e4:21:76:33:4b:80:76:d0:9e:bd:69:89:
                    1a:ef:0d:9c:51:ad:3d:e6:73:35:34:13:68:de:42:
                    0c:34:15:4d:2c:14:d3:04:ce:ff:be:64:50:bc:6c:
                    f8:d4:bd:1b:7e:88:bb:10:62:5a:f3:c2:46:f0:78:
                    c9:8e:d9:59:45:43:b3:11:36:b1:1e:e3:47:41:c1:
                    ba:b5:e9:41:7d:e6:c5:85:cb:b9:ea:c8:f6:8b:46:
                    04:94:e9:66:e1:82:a8:2c:17:f5:ef:ed:de:da:83:
                    0a:4f:6e:a4:fe:f3:56:b4:6c:ae:cc:eb:35:2d:b7:
                    87:e4:34:b9:88:8f:d2:d7:f1:c3:4f:26:05:d8:88:
                    ae:ca:68:ed:80:58:98:2d:9e:91:1f:09:e7:22:5f:
                    a1:f9:72:23:52:38:40:41:3d:82:a3:10:ce:d2:69:
                    5c:13:3a:f3:db:1c:63:e8:9a:75:e1:cc:ad:fd:e5:
                    85:ac:79:9a:ec:15:6c:e8:fb:2f:63:fc:08:d4:2a:
                    0a:75:c3:e3:06:5a:12:91:ff:1f:a8:ff:55:40:7c:
                    92:d7:69:b8:a0:7e:a2:cb:e2:3c:a6:fc:ed:10:df:
                    19:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:6D:9F:AB:78:CE:13:2F:72:59:9A:8E:A9:A7:05:6C:70:84:12:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1df23f5e-9ee3-34f0-8efd-983b2efe93ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.12.94.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:d6:71:6d:de:a5:c8:47:cf:c9:cd:36:e0:41:4c:63:4e:01:
         fc:7e:78:dc:75:be:ac:ea:49:43:6e:8e:af:f4:7b:7e:b5:cc:
         d4:d5:24:72:c4:0b:2c:00:8f:54:48:14:95:f1:5d:c0:0c:06:
         8c:4c:39:f8:88:1d:3b:a7:a4:52:b6:68:d4:3b:2f:34:94:dc:
         fa:ec:bc:dc:50:3a:14:26:f6:7c:e5:ec:aa:fc:ef:5e:e9:a6:
         37:dc:5e:96:a5:c5:aa:a0:be:96:e5:d3:34:82:fd:b6:b7:76:
         ed:50:82:36:a4:f6:0d:9b:9c:e7:9b:00:28:77:89:a2:af:a8:
         9e:94:70:8e:82:42:6b:6a:4b:a8:13:fb:98:ce:78:56:ff:e1:
         df:0f:e1:92:73:42:2f:1e:27:84:e9:1c:57:20:83:76:8d:b1:
         d6:46:58:be:89:e6:bb:77:af:72:47:90:f8:7a:ba:a5:d9:35:
         e4:db:7b:1c:0b:90:4d:e5:f2:8c:38:8e:83:d7:8e:45:c3:c4:
         b2:cf:3f:0b:8b:1f:9c:c6:26:ac:8c:0d:3b:34:b9:b9:fb:92:
         16:54:fc:05:64:b7:4a:d4:63:97:fe:37:fa:9a:84:4d:67:b6:
         0e:be:cc:3e:8b:15:0b:a6:c9:11:db:74:2e:1e:83:80:91:ab:
         e7:90:08:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 13:40:49 2025 by rpki-client