Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/374ff573-1000-309f-ac79-5cea77715d1e.roa
File:                     374ff573-1000-309f-ac79-5cea77715d1e.roa (raw, json)
Hash identifier:          iuQiyGG6j1NOHp7nAcyVIT8PB1eTtds6nJH8mXwWrT4=
Subject key identifier:   8D:48:66:33:92:11:6F:FA:C3:86:02:63:FE:4D:78:5D:DC:B6:55:54
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B2B91A122958E08091F46BA40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/374ff573-1000-309f-ac79-5cea77715d1e.roa
Signing time:             Fri 12 Sep 2025 13:00:42 +0000
ROA not before:           Fri 12 Sep 2025 13:00:42 +0000
ROA not after:            Thu 11 Dec 2025 14:00:42 +0000
asID:                     397212
IP address blocks:        192.12.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2b:91:a1:22:95:8e:08:09:1f:46:ba:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 12 13:00:42 2025 GMT
            Not After : Dec 11 14:00:42 2025 GMT
        Subject: CN=66ba60cf-91db-42f4-84d1-196e360c1f32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e5:69:e8:81:1e:e7:5c:fd:72:ab:33:df:de:
                    70:05:ee:c9:bb:07:d2:f5:92:51:e3:28:fa:8a:ba:
                    aa:fd:96:e0:fb:b5:a0:c7:05:a9:65:99:a9:24:37:
                    58:21:6e:f5:e4:13:a0:43:1f:2e:7f:dd:c2:d8:04:
                    ef:c4:81:d5:e9:72:f4:d9:2f:15:29:85:0f:6e:08:
                    7c:79:b0:a4:24:5b:41:f6:c4:09:e8:63:07:3c:ab:
                    19:42:2f:d1:00:e6:1a:b0:46:6d:f5:b9:b7:d0:49:
                    4d:1c:1b:4e:09:23:3e:11:49:f5:c5:4d:b8:e4:a8:
                    10:5e:34:4e:e4:23:c6:a7:7e:df:fe:58:5a:93:85:
                    d6:ce:a9:fd:0f:6a:a1:d8:ee:33:53:e3:86:5c:c3:
                    28:dc:74:fc:a7:f8:2f:81:2e:ca:e9:35:56:24:2e:
                    cf:2e:0e:d2:62:0e:22:a9:66:ce:b2:55:57:ca:2c:
                    7d:3e:48:1a:a6:4d:f7:45:18:ec:a2:46:1a:fb:b4:
                    73:ff:15:3b:b8:9c:cb:a4:e5:55:5c:4b:09:3b:46:
                    17:00:e8:5b:6a:c4:37:ce:0a:1e:c6:b6:1f:2e:1f:
                    d5:1f:36:b2:73:f5:aa:de:fa:2d:a9:fb:a2:42:7e:
                    e2:0d:1d:af:da:80:19:de:d6:a6:54:9b:7c:01:a7:
                    ca:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:48:66:33:92:11:6F:FA:C3:86:02:63:FE:4D:78:5D:DC:B6:55:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/374ff573-1000-309f-ac79-5cea77715d1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.12.94.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:8f:c7:c2:ea:db:2e:33:7a:74:44:e1:d3:b5:ba:f7:c4:3d:
         ab:1e:eb:8b:9d:c8:cc:8d:16:99:80:78:19:b1:e2:e1:d4:7b:
         30:bf:6b:d7:d2:50:c6:5b:19:f0:67:e2:57:1c:80:43:59:a3:
         50:03:4b:3c:7b:66:c1:37:40:8e:fd:91:de:d7:c5:17:9b:7e:
         ef:f1:1f:9a:c1:99:25:39:ff:1b:79:63:ca:84:05:ee:65:5d:
         4f:c9:9d:6d:44:b5:04:48:c4:d7:19:39:d3:b9:71:cf:b4:c9:
         4c:ec:f6:04:37:83:e5:68:fc:62:8d:bf:ee:c0:f9:b9:27:b5:
         b9:1f:a9:be:a1:15:c9:d5:59:46:12:54:75:99:d9:1d:3d:21:
         e0:fe:f7:70:11:97:cd:76:66:33:9e:d8:63:bb:5e:ae:57:86:
         96:8b:21:1f:c0:84:88:c7:40:f1:33:32:da:4f:8e:5b:b7:06:
         f9:04:fa:d2:7a:f3:b3:b4:f5:fd:db:08:7a:45:bd:6d:ba:a2:
         23:2d:21:dc:b0:e9:6c:f4:87:2f:8b:fd:79:e6:25:98:e1:46:
         09:c6:da:6d:4e:84:3a:61:71:74:ac:72:af:12:0d:21:22:7d:
         06:86:f5:ec:f0:af:7c:00:8d:e1:ff:8f:bb:fe:38:32:80:a2:
         dd:58:92:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:17:45 2025 by rpki-client