Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/62c7fbe8-dc72-3d89-9db9-a60f97cc3670.roa
File:                     62c7fbe8-dc72-3d89-9db9-a60f97cc3670.roa (raw, json)
Hash identifier:          0tShRO6Kujelk6gzrCIJJkKVnYkbo0R0l+I1UtkWnW4=
Subject key identifier:   72:C1:93:ED:9A:15:4C:5D:0D:33:CA:C9:97:E5:C4:6C:60:4E:A3:67
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B434C4C626693800DA5B17000
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/62c7fbe8-dc72-3d89-9db9-a60f97cc3670.roa
Signing time:             Sun 21 Sep 2025 01:00:32 +0000
ROA not before:           Sun 21 Sep 2025 01:00:32 +0000
ROA not after:            Sat 20 Dec 2025 02:00:32 +0000
asID:                     396611
IP address blocks:        192.12.94.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:43:4c:4c:62:66:93:80:0d:a5:b1:70:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 21 01:00:32 2025 GMT
            Not After : Dec 20 02:00:32 2025 GMT
        Subject: CN=7446e20b-8393-4c47-83d1-1a155ba57b34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:ea:f2:06:2c:05:f6:29:f4:fd:49:34:5d:b9:
                    fd:40:69:00:33:59:32:54:9d:2f:9a:fa:d1:45:52:
                    1a:ff:f6:5b:be:06:4b:cd:90:5f:68:f8:7a:e7:e4:
                    73:67:3a:91:26:bc:ff:6e:d3:f4:3f:07:e7:3e:38:
                    aa:39:0b:13:30:c2:af:89:9b:16:6b:9f:b1:5f:57:
                    36:e7:e0:a0:00:0e:76:63:50:7a:97:a4:39:51:06:
                    80:b1:a6:51:5e:45:39:2b:43:d3:f3:a6:14:21:15:
                    09:ac:f3:da:62:90:c1:70:e0:73:15:95:4e:52:b4:
                    4b:f7:87:a4:5c:0b:35:dd:fe:55:9d:8b:85:5d:bf:
                    6a:f0:74:84:e9:06:8b:8f:02:f3:7e:9c:ec:08:56:
                    28:f8:7b:ba:4d:52:cc:fa:69:e0:05:d0:38:14:81:
                    64:cb:0e:9a:72:fa:f7:b2:68:d7:a6:ac:31:06:e9:
                    0c:d3:10:63:39:3a:4a:56:41:f6:4d:84:3b:93:6d:
                    83:a8:1e:a8:57:63:5c:54:f7:2d:7b:8c:1f:37:fe:
                    c7:b0:b5:61:7b:47:66:11:0a:2f:0d:b5:a3:72:77:
                    05:78:3a:24:e6:3d:bf:ab:ab:a9:c1:a6:f2:e8:b7:
                    9e:48:1e:77:50:f0:97:11:cc:b6:2d:bf:eb:b4:f6:
                    da:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:C1:93:ED:9A:15:4C:5D:0D:33:CA:C9:97:E5:C4:6C:60:4E:A3:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/62c7fbe8-dc72-3d89-9db9-a60f97cc3670.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.12.94.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:c2:a5:5d:17:57:ed:d8:c1:62:1c:d3:47:fe:c4:a1:5f:71:
         e7:23:c6:97:13:1b:8a:c3:af:54:22:09:73:a9:15:6c:be:4a:
         0b:d0:6b:61:e6:60:31:e9:16:78:7d:f8:32:94:7e:00:99:98:
         cb:b8:f8:ea:3d:16:31:20:c1:93:42:b6:b2:12:0c:c5:06:18:
         ef:e5:c3:fa:67:0b:8b:29:85:4b:01:be:fa:b9:bd:f9:a8:d8:
         4d:a7:a1:8b:d1:b0:71:14:eb:b9:f2:ce:86:bb:91:db:9c:3a:
         72:88:01:22:bc:99:39:fd:d0:27:08:47:91:71:2a:91:d7:9a:
         70:ba:53:15:08:2e:ea:eb:e9:c3:51:91:c1:76:ad:ac:c0:65:
         9a:e2:24:71:bd:ab:74:23:6a:c1:11:f9:c5:21:be:34:f6:32:
         c1:1a:28:54:ff:0a:21:07:71:d3:cf:f9:b9:45:02:bd:75:ad:
         8b:89:6b:06:5f:8f:df:de:dd:38:ee:b8:2b:82:f2:08:11:5f:
         a0:79:a5:d8:08:be:40:04:cc:3b:81:9e:82:16:9b:1d:90:7f:
         37:f2:0f:d2:52:a2:c9:07:bb:a0:aa:44:cd:1e:0e:89:1a:c0:
         ed:07:fe:34:08:42:c3:dc:b7:d1:07:b0:46:54:c6:92:5e:c5:
         ea:93:11:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:34:06 2025 by rpki-client