Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/65c390ce-b388-3a7a-bb84-0c4eb54e4de0.roa
File:                     65c390ce-b388-3a7a-bb84-0c4eb54e4de0.roa (raw, json)
Hash identifier:          VlLje2Ds+PsWN4fYB0RyzHWOq4i5I8ny8mjPAdAnNXc=
Subject key identifier:   22:CB:36:8C:74:6A:31:D7:29:FF:AD:68:98:75:DF:4C:14:90:5A:F9
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A4C2D53D80A10292413FA7380
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/65c390ce-b388-3a7a-bb84-0c4eb54e4de0.roa
Signing time:             Tue 24 Jun 2025 12:33:32 +0000
ROA not before:           Tue 24 Jun 2025 12:33:32 +0000
ROA not after:            Mon 22 Sep 2025 12:33:32 +0000
asID:                     396609
IP address blocks:        192.12.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4c:2d:53:d8:0a:10:29:24:13:fa:73:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 24 12:33:32 2025 GMT
            Not After : Sep 22 12:33:32 2025 GMT
        Subject: CN=fd115596-c2ce-4755-b4e4-f6898e851e93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:12:c4:8a:04:a7:c8:d5:fb:38:de:3a:b8:01:
                    c9:b3:20:19:f5:f8:8f:d6:0e:e2:ee:5d:c6:95:20:
                    22:fa:36:66:59:ff:94:d0:cb:db:69:88:b9:68:29:
                    ce:7d:c6:e0:fc:50:4e:08:e6:f7:10:86:db:e5:1d:
                    61:40:e2:ac:d5:dc:8b:48:d5:e9:ca:4f:cf:cc:21:
                    b7:36:15:47:0e:ef:40:67:d4:97:bc:65:26:b8:a6:
                    4c:9f:a6:93:45:87:e1:dd:03:3f:b2:2e:45:18:cf:
                    5c:f0:30:49:b8:1b:e9:de:ec:e6:c5:2c:4d:a5:56:
                    2c:29:72:75:1b:83:11:21:8b:22:3e:15:33:dd:8d:
                    80:1c:4c:30:1e:05:ce:ce:21:bc:a1:81:63:33:17:
                    b5:c7:ad:53:38:2d:75:12:7a:65:d3:68:0b:0a:ea:
                    5d:a6:63:b9:14:4f:97:91:95:3a:46:bb:a6:81:61:
                    28:82:36:31:04:1f:48:f0:e2:16:2f:0c:6e:be:38:
                    c2:b8:de:9a:79:0d:9c:a5:b4:60:b7:37:da:8a:4a:
                    93:9f:45:97:76:9f:62:7b:1c:fd:4e:66:fb:ee:1e:
                    12:41:1c:bf:15:ab:24:d6:c5:5c:97:ff:1b:4f:d2:
                    8e:a4:6e:e7:cb:92:aa:e7:ee:3a:ad:45:64:df:95:
                    bd:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:CB:36:8C:74:6A:31:D7:29:FF:AD:68:98:75:DF:4C:14:90:5A:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/65c390ce-b388-3a7a-bb84-0c4eb54e4de0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.12.94.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:13:5e:fe:38:95:f5:58:02:70:a4:2e:22:3c:3f:ec:dc:af:
         66:75:08:4a:af:24:b6:a1:05:b4:b9:9b:2d:d6:c4:4b:2b:65:
         91:69:16:5f:82:b2:94:dc:03:e5:fb:6d:ef:61:5a:32:4e:7e:
         70:3d:c8:d5:be:b6:e1:b6:6e:59:aa:0f:59:97:d4:87:c3:42:
         bc:5c:4c:13:69:a8:70:d6:68:c5:26:2c:97:a9:42:95:cb:71:
         49:18:ad:95:87:c3:a6:61:60:96:ac:7a:c8:28:2c:32:fa:9c:
         6a:37:f5:c5:f6:f9:47:c2:96:19:35:fb:85:4f:77:85:07:6d:
         1e:6d:ef:db:3c:77:d1:c2:9d:a8:18:db:ea:54:8a:91:ee:15:
         ff:c8:c0:44:71:d6:fd:9a:68:21:74:dc:e9:62:5f:c6:25:0a:
         9f:cb:01:25:2b:30:b7:cf:25:6c:b7:01:77:03:56:5b:b0:26:
         b3:b0:8c:ec:56:81:3b:78:ea:44:66:ea:f2:a3:ff:d9:dc:95:
         4e:87:30:ec:28:07:c2:00:6c:b5:ad:df:9b:ce:03:42:88:ce:
         5d:08:6b:36:52:04:51:73:fd:6b:d0:fd:7c:84:1e:c2:91:2a:
         1d:7c:92:15:2c:4b:e9:cc:ef:5d:88:6d:7d:b8:b7:31:db:ba:
         0f:54:76:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 16:22:26 2025 by rpki-client