Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/22f87a14-af08-3e1a-b319-8ccd0761d9a1.roa
File:                     22f87a14-af08-3e1a-b319-8ccd0761d9a1.roa (raw, json)
Hash identifier:          NULoVbjBEmMggUqAw7n9PCRrhNz44Cz59iWif9Dnyrk=
Subject key identifier:   71:76:E7:34:9A:CA:B0:32:48:8E:94:75:5F:30:1F:02:E9:5D:AD:01
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B434C4DCA606590AC40009B00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/22f87a14-af08-3e1a-b319-8ccd0761d9a1.roa
Signing time:             Sun 21 Sep 2025 01:00:32 +0000
ROA not before:           Sun 21 Sep 2025 01:00:32 +0000
ROA not after:            Sat 20 Dec 2025 02:00:32 +0000
asID:                     396606
IP address blocks:        192.12.94.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:43:4c:4d:ca:60:65:90:ac:40:00:9b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 21 01:00:32 2025 GMT
            Not After : Dec 20 02:00:32 2025 GMT
        Subject: CN=fa572ea6-794b-4cb0-96f7-190cadb4cdfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:a5:64:f2:0d:34:ff:04:8e:d9:6c:bd:3b:cd:
                    b1:c2:99:b4:94:a2:d9:17:05:43:0d:50:2f:ae:06:
                    65:9b:7d:81:f3:dc:35:db:61:48:c1:62:24:5c:ae:
                    b5:b0:2d:0a:b0:3d:4e:ad:11:8b:97:50:33:ed:b9:
                    3d:b2:b2:9f:de:ed:f1:ad:e9:9d:13:13:8b:aa:63:
                    13:08:61:5a:53:2e:5c:d6:f3:b0:b8:90:15:3c:f6:
                    b0:d7:a2:94:3b:36:3f:ef:6f:87:db:9e:6d:c6:ad:
                    6d:b3:c5:98:34:13:c0:f6:34:a7:21:98:d3:d8:0a:
                    11:29:ea:05:0f:d6:61:72:e9:9a:2d:09:a5:ad:b6:
                    19:dd:5b:e2:d8:f3:dd:8d:62:33:22:f3:7a:40:ef:
                    95:85:49:bc:ce:1a:a6:a4:81:0b:b0:e8:4f:e5:0f:
                    37:d0:6e:12:4d:68:bd:cc:77:92:88:d5:fc:b0:32:
                    47:0e:1d:a5:2d:60:fb:ff:70:89:a3:b5:38:c1:24:
                    6e:6d:f4:d1:7a:90:a1:76:59:4b:7d:ab:39:bd:d0:
                    97:a6:9e:ef:2c:39:27:6f:b4:99:e3:35:45:8e:86:
                    b0:cc:87:9d:98:7d:dc:7b:09:d5:09:3b:6d:e2:92:
                    e4:58:66:1e:58:a0:44:84:74:23:1a:8a:9e:40:0d:
                    73:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:76:E7:34:9A:CA:B0:32:48:8E:94:75:5F:30:1F:02:E9:5D:AD:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/22f87a14-af08-3e1a-b319-8ccd0761d9a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.12.94.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:8a:f2:c3:5d:fb:32:f2:e1:fe:fb:d5:2d:80:82:ea:6c:56:
         8c:4a:a9:18:ae:77:56:75:0d:0b:97:77:9c:b7:0d:a9:fe:27:
         dd:77:b7:17:ae:f2:cd:6b:c0:94:3b:09:6e:bf:84:a6:ee:57:
         e8:e9:4d:33:35:77:ba:84:32:22:0f:56:53:b6:f7:07:8f:75:
         3a:0b:3f:63:d9:1b:ba:85:f9:d4:9f:7a:fc:94:f3:8b:5a:bf:
         dd:4f:18:88:96:76:e9:7a:09:a9:58:8c:a4:be:50:c2:76:d7:
         8f:0e:dc:7a:09:6e:a8:e6:8d:65:5d:56:78:db:57:2f:61:89:
         57:53:b5:59:8c:a0:18:f4:fe:b7:48:55:e5:ee:61:83:da:0a:
         6f:37:2f:99:02:21:98:ae:29:d4:ef:02:a1:3a:00:0e:dd:5b:
         f0:4a:47:03:b9:c0:45:01:2b:72:e1:5f:14:19:78:cf:1b:29:
         b8:7a:67:fe:fc:c6:be:1a:1e:9e:79:36:59:da:88:8f:bb:57:
         e2:0d:e3:ad:25:eb:84:4b:f1:cd:07:f8:62:a2:02:e5:36:61:
         ea:aa:fc:2d:50:f5:83:f6:fd:1a:3f:26:8b:c8:b6:1b:8e:ad:
         70:32:b1:60:07:02:9b:3c:e9:09:bf:96:ae:25:fa:b3:29:1a:
         4f:62:0d:f1
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtDTE3KYGWQrEAAmwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDkyMTAxMDAzMloXDTI1MTIyMDAyMDAzMlowLzEtMCsGA1UEAxMk
ZmE1NzJlYTYtNzk0Yi00Y2IwLTk2ZjctMTkwY2FkYjRjZGZiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7aVk8g00/wSO2Wy9O82xwpm0lKLZFwVDDVAv
rgZlm32B89w122FIwWIkXK61sC0KsD1OrRGLl1Az7bk9srKf3u3xremdExOLqmMT
CGFaUy5c1vOwuJAVPPaw16KUOzY/72+H255txq1ts8WYNBPA9jSnIZjT2AoRKeoF
D9ZhcumaLQmlrbYZ3Vvi2PPdjWIzIvN6QO+VhUm8zhqmpIELsOhP5Q830G4STWi9
zHeSiNX8sDJHDh2lLWD7/3CJo7U4wSRubfTRepChdllLfas5vdCXpp7vLDknb7SZ
4zVFjoawzIedmH3cewnVCTtt4pLkWGYeWKBEhHQjGoqeQA1zHQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFHF25zSayrAySI6UdV8wHwLpXa0BMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMjJmODdhMTQtYWYwOC0z
ZTFhLWIzMTktOGNjZDA3NjFkOWExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwAxeHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCbivLDXfsy8uH++9UtgILqbFaMSqkYrndWdQ0Ll3ectw2p/ifdd7cX
rvLNa8CUOwluv4Sm7lfo6U0zNXe6hDIiD1ZTtvcHj3U6Cz9j2Ru6hfnUn3r8lPOL
Wr/dTxiIlnbpegmpWIykvlDCdtePDtx6CW6o5o1lXVZ421cvYYlXU7VZjKAY9P63
SFXl7mGD2gpvNy+ZAiGYrinU7wKhOgAO3VvwSkcDucBFASty4V8UGXjPGym4emf+
/Ma+Gh6eeTZZ2oiPu1fiDeOtJeuES/HNB/hiogLlNmHqqvwtUPWD9v0aPyaLyLYb
jq1wMrFgBwKbPOkJv5auJfqzKRpPYg3x
-----END CERTIFICATE-----
Generated at Mon Oct 20 06:32:03 2025 by rpki-client