Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/21c09dbc-b385-3270-b60c-a07988cd92cb.roa
File:                     21c09dbc-b385-3270-b60c-a07988cd92cb.roa (raw, json)
Hash identifier:          bZzRpkP6ocXc+M71YlmRxyizf+oJQeWQlG+JtCF7VLc=
Subject key identifier:   1F:24:B2:F6:E7:84:CB:2F:EC:5E:64:D6:AB:98:31:E6:A8:E5:8C:A1
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B434C5F77D56CF2C650C91E80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/21c09dbc-b385-3270-b60c-a07988cd92cb.roa
Signing time:             Sun 21 Sep 2025 01:00:32 +0000
ROA not before:           Sun 21 Sep 2025 01:00:32 +0000
ROA not after:            Sat 20 Dec 2025 02:00:32 +0000
asID:                     396572
IP address blocks:        192.12.94.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:43:4c:5f:77:d5:6c:f2:c6:50:c9:1e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 21 01:00:32 2025 GMT
            Not After : Dec 20 02:00:32 2025 GMT
        Subject: CN=44f15bc9-36b3-4ea8-aeac-6e0fe14c53cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a3:08:c5:91:17:0a:32:00:dc:e6:0e:ff:fb:
                    ca:a1:d2:e5:50:ce:53:c2:34:2a:e8:ce:5d:76:4a:
                    f0:34:4d:96:fa:61:74:a5:37:83:f2:0e:11:d4:8f:
                    a3:4e:ac:d3:fc:6c:99:3c:d3:7d:a3:06:59:df:af:
                    e2:05:09:01:ef:5e:bc:73:0b:ee:53:84:7b:86:54:
                    4b:1c:f2:ad:c2:45:b8:d7:af:9c:04:32:80:fd:9d:
                    20:e8:91:d8:7e:c0:a2:35:5e:a6:99:61:84:ab:23:
                    29:1d:e4:6e:1b:fa:c2:32:0c:b0:57:42:81:4b:ad:
                    55:a7:1b:25:55:29:7b:ad:40:16:d7:b2:51:43:3e:
                    b0:2b:27:d4:bc:c4:8b:27:05:91:54:29:81:56:dd:
                    f7:32:5c:7d:b0:cc:5c:d9:98:06:d8:90:42:7c:4a:
                    b2:a5:e0:e3:f8:f4:c5:95:26:6e:21:76:9b:f3:c7:
                    6b:a5:c6:35:18:e7:67:fa:9a:0a:0f:a1:e1:ff:82:
                    bd:a0:6a:9e:84:86:9b:77:98:7e:8d:12:d5:f9:13:
                    2a:13:ef:e4:c6:51:cf:26:3e:ff:34:72:8f:9a:35:
                    19:a2:73:77:b0:c2:6c:e6:b9:19:c8:b9:a6:0c:05:
                    ff:40:d9:ce:98:0e:ae:6a:47:f8:a4:97:71:d6:c3:
                    55:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:24:B2:F6:E7:84:CB:2F:EC:5E:64:D6:AB:98:31:E6:A8:E5:8C:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/21c09dbc-b385-3270-b60c-a07988cd92cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.12.94.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:b9:02:59:2f:64:ac:bb:cc:59:80:f4:99:f9:31:f2:8d:de:
         aa:7c:fc:aa:8d:2c:f8:ca:5c:f4:8b:1f:e0:90:ea:b9:86:e9:
         b4:27:34:68:a0:33:bd:3c:b3:fa:0d:ec:16:da:a3:5a:4b:0b:
         3d:7e:81:a2:b0:bd:90:86:51:0a:78:b4:90:23:b5:c2:7b:55:
         af:75:62:3f:d5:49:87:15:86:38:ac:d5:f2:08:df:dd:b6:9c:
         c4:cb:40:c7:20:9c:03:af:3e:ce:7b:a2:96:76:ac:65:43:36:
         9e:13:13:81:bf:d0:4d:e9:ae:6a:fa:0f:f9:f9:42:bb:1c:2f:
         de:e3:68:27:c2:0c:3d:16:0c:9b:b3:6c:72:a8:39:6f:6c:c9:
         00:c7:3e:e5:52:8b:5e:87:d3:77:b9:4f:32:66:ad:3e:3f:82:
         ff:42:3a:5a:e8:e7:14:32:27:85:cd:37:3f:2a:6a:cb:09:a7:
         46:46:23:5c:58:75:91:55:c9:60:38:81:b6:74:5f:bd:86:ac:
         5e:7f:2a:f5:ea:94:7c:4a:a5:9c:18:ab:21:1a:86:8a:dc:93:
         12:25:41:e6:e8:f9:1c:f8:9f:4b:8a:e6:d1:8b:98:63:02:2b:
         8b:c7:02:63:43:c5:cf:e8:eb:f4:ff:bb:88:f7:ef:36:a3:65:
         0a:a3:f5:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:22:42 2025 by rpki-client