Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5137ef0f-eebe-3e39-be29-4157219a4537.roa
File:                     5137ef0f-eebe-3e39-be29-4157219a4537.roa (raw, json)
Hash identifier:          3U3c1/Sv27tnivYVrv9ZaS0nPUI5YcIG8nBycEPOlTI=
Subject key identifier:   3E:6F:02:40:79:03:FC:B8:15:DE:6C:8A:AD:CE:85:CA:3E:E3:B4:6D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B434C55A5863A0FCB3CF99470
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5137ef0f-eebe-3e39-be29-4157219a4537.roa
Signing time:             Sun 21 Sep 2025 01:00:32 +0000
ROA not before:           Sun 21 Sep 2025 01:00:32 +0000
ROA not after:            Sat 20 Dec 2025 02:00:32 +0000
asID:                     36620
IP address blocks:        192.12.94.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:43:4c:55:a5:86:3a:0f:cb:3c:f9:94:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 21 01:00:32 2025 GMT
            Not After : Dec 20 02:00:32 2025 GMT
        Subject: CN=1fffb27a-fddd-427e-8976-ca27adf01353
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:01:49:e8:2f:af:b1:df:91:91:cc:a7:f5:99:
                    4f:c5:d8:04:a9:db:13:d9:07:97:11:4b:be:a0:62:
                    ef:73:36:9d:97:df:04:90:0d:d4:5e:d1:d8:29:c9:
                    95:05:7c:96:db:c2:03:82:9b:d9:62:4d:83:48:40:
                    31:90:77:6b:bf:9f:4a:2f:71:42:76:47:8b:e5:60:
                    c5:ab:ee:50:14:87:4c:fb:56:e8:27:84:8c:c0:3c:
                    12:07:80:ea:3c:8a:bb:54:60:a6:7e:d9:70:3a:a9:
                    18:09:26:e9:9c:06:32:43:88:bc:52:2f:0e:5e:96:
                    89:ea:d0:ee:4d:97:da:8e:68:be:2d:83:44:e7:e1:
                    94:29:9c:1a:3f:bf:20:76:d6:db:99:76:a0:67:ad:
                    a8:c6:d2:f0:1d:45:13:9a:7c:c5:b1:eb:1b:6a:62:
                    1e:af:c2:34:e9:7d:1a:cb:04:a1:b3:f0:2e:a3:f2:
                    19:5a:bc:b0:23:06:2d:c4:92:9a:f0:2e:3c:80:6f:
                    09:2b:ee:a0:eb:5e:09:69:e6:a7:b3:35:50:5b:20:
                    34:50:47:0e:3e:a3:3f:bc:b8:6a:a1:cc:33:e5:84:
                    f4:91:15:da:2e:35:b6:78:8e:93:a7:43:1d:5d:96:
                    75:be:20:7f:2d:45:46:9d:a5:1b:a8:aa:e8:6b:81:
                    f8:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:6F:02:40:79:03:FC:B8:15:DE:6C:8A:AD:CE:85:CA:3E:E3:B4:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5137ef0f-eebe-3e39-be29-4157219a4537.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.12.94.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:4d:b2:1b:e6:16:eb:a0:c3:54:79:f7:ea:86:2d:eb:de:38:
         7e:d5:a0:db:cb:d1:61:82:da:f3:fd:74:e8:4d:69:13:71:6c:
         cd:c0:e8:ca:bc:94:49:01:a8:3f:32:52:6e:1e:22:83:9f:77:
         e6:c4:08:b2:58:19:e8:92:89:7e:94:73:9b:01:93:dd:23:09:
         6a:6f:ce:f3:f6:f8:fa:5c:f6:1d:7c:24:7b:45:64:4b:6c:13:
         1c:5b:ca:a2:d2:83:91:ef:df:87:73:92:d3:68:a8:e6:4d:87:
         ab:2e:c3:d9:d5:78:09:a4:be:67:70:10:78:bf:c6:b3:1b:97:
         9b:bf:e4:5b:96:b8:dd:91:ae:a0:2a:0a:c6:9f:93:a1:a3:79:
         83:32:ad:88:99:2c:34:56:88:e1:a8:d2:fb:2d:b7:38:68:f8:
         74:c3:27:9a:1f:2a:a2:e5:2e:a1:77:5e:f7:3c:50:bc:f9:5b:
         71:00:e1:a3:30:32:81:cd:c2:62:7d:dc:a9:4a:1e:9e:5f:1d:
         e9:f1:0a:6e:8f:ac:18:be:3b:de:de:ae:13:4b:53:6d:90:c7:
         3e:75:c3:d9:a2:ef:97:99:4f:c2:dc:0f:ea:b3:7b:7f:33:f6:
         4b:c1:f1:f8:b1:94:2e:24:cc:90:12:93:ac:a2:59:36:f7:61:
         7b:2a:9c:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:40:30 2025 by rpki-client