Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5e08b04b-3e1d-3293-b356-550c69476676.roa
File:                     5e08b04b-3e1d-3293-b356-550c69476676.roa (raw, json)
Hash identifier:          d8i/fmlkaVGYL7GLTXJY5a+ECM5+Oo+FbgP8ZDLkn9Y=
Subject key identifier:   2A:85:8C:18:D9:89:47:5B:BB:56:55:06:D2:BD:ED:B4:2D:51:17:5D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A4C2D552CFEC912B62AB48280
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5e08b04b-3e1d-3293-b356-550c69476676.roa
Signing time:             Tue 24 Jun 2025 12:33:32 +0000
ROA not before:           Tue 24 Jun 2025 12:33:32 +0000
ROA not after:            Mon 22 Sep 2025 12:33:32 +0000
asID:                     36620
IP address blocks:        192.12.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4c:2d:55:2c:fe:c9:12:b6:2a:b4:82:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 24 12:33:32 2025 GMT
            Not After : Sep 22 12:33:32 2025 GMT
        Subject: CN=83fafe2a-7875-4a26-bfe6-17daf7b7c8a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:91:27:50:2e:c8:02:6a:7e:f0:69:24:e8:58:
                    e8:18:03:37:89:99:3e:d0:89:a9:c0:84:9b:8b:42:
                    13:df:23:5e:d1:a4:eb:15:df:f9:7e:2e:ce:6b:e5:
                    4b:b1:7a:fa:6b:13:2a:90:8f:49:e9:01:25:83:59:
                    72:88:0e:11:6d:4a:cf:97:96:fb:a6:84:ed:8c:b0:
                    ab:ed:40:da:4e:a6:1a:54:63:7a:89:54:07:ff:c4:
                    81:ce:07:45:5c:61:c3:c0:fe:e5:4c:99:38:f3:9e:
                    2a:af:82:33:f9:2d:38:8f:2f:d1:95:e7:80:d7:8c:
                    6f:03:f7:51:5f:27:d0:55:73:76:6d:3c:a8:de:20:
                    d3:ae:12:3f:4b:3d:f6:79:42:87:ee:5f:1b:5f:2f:
                    f2:0a:c2:0a:3c:f8:5f:81:90:5b:9c:8b:47:e7:7e:
                    ed:b4:8e:7d:f6:57:68:56:6a:66:40:1e:f8:cd:38:
                    ec:d2:1d:ad:7d:90:d7:0d:9e:64:81:f9:86:08:d7:
                    09:8b:1d:5f:f3:45:9d:c8:a1:2e:7b:df:18:f1:c9:
                    87:34:5e:97:02:24:c7:ea:81:cc:e6:2c:d0:dd:f6:
                    5f:88:80:68:bf:2f:63:04:97:e1:36:3d:68:a9:d4:
                    9d:5e:bc:92:78:89:87:3b:ae:13:d8:f0:7c:cc:18:
                    6f:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:85:8C:18:D9:89:47:5B:BB:56:55:06:D2:BD:ED:B4:2D:51:17:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5e08b04b-3e1d-3293-b356-550c69476676.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.12.94.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:79:02:a6:f7:6c:98:25:9c:44:a6:54:35:4f:24:8d:eb:44:
         90:d8:0e:a8:4c:bf:88:b4:ec:fa:9e:e3:c4:f0:18:85:b6:4c:
         0f:b9:82:ed:15:39:be:d4:5a:e9:ef:a0:2e:b2:7d:db:53:d1:
         75:47:cf:2e:d3:63:81:53:00:5e:a1:40:98:a5:80:37:20:76:
         0e:2a:53:2e:58:77:5a:d3:40:f5:b0:33:e3:68:dd:fd:21:bc:
         36:3c:12:41:23:5b:6c:58:57:74:af:00:b9:35:4f:fd:2c:df:
         7f:e9:07:72:0c:2e:80:80:59:79:f4:6d:0c:75:36:c5:76:a3:
         9d:31:3c:0b:c5:0d:62:5a:b4:8d:e2:9a:6c:5a:5e:ec:fe:dd:
         9c:bb:0b:37:55:1c:0a:e2:46:e5:3a:aa:6a:0e:e6:d0:bc:02:
         62:ee:65:fe:a4:0b:9a:8e:36:a9:0d:f7:f2:f3:7a:3e:14:34:
         e2:ed:b1:da:c2:b2:69:a4:39:83:1f:6b:65:13:ba:97:2e:d6:
         d1:23:b0:a2:9c:aa:e5:b0:d1:88:d4:b8:19:75:b5:09:34:68:
         0c:6e:ba:27:af:d0:d6:8c:7e:34:35:00:b7:04:39:91:3d:88:
         e7:12:89:9d:43:aa:f3:e4:7f:98:fc:a8:fc:a3:c1:57:d2:24:
         39:c5:16:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 12:30:50 2025 by rpki-client