Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6635ca0a-c92a-3e70-aeca-457a07a54544.roa
File:                     6635ca0a-c92a-3e70-aeca-457a07a54544.roa (raw, json)
Hash identifier:          CR9ueqk7mF9wBlXKuZ4N6m5Zpm23iaNvWBy79fxOJ6s=
Subject key identifier:   9F:AF:0C:B1:8C:7C:50:C8:45:F0:A8:ED:D7:AD:D3:7F:C1:7E:6A:FF
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B2B91A3DEFAB7C352A531EAC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6635ca0a-c92a-3e70-aeca-457a07a54544.roa
Signing time:             Fri 12 Sep 2025 13:00:42 +0000
ROA not before:           Fri 12 Sep 2025 13:00:42 +0000
ROA not after:            Thu 11 Dec 2025 14:00:42 +0000
asID:                     396543
IP address blocks:        192.12.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2b:91:a3:de:fa:b7:c3:52:a5:31:ea:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 12 13:00:42 2025 GMT
            Not After : Dec 11 14:00:42 2025 GMT
        Subject: CN=25a000b4-aa6f-47db-b403-8d48c465ea9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c2:44:ca:e0:71:b2:72:26:2e:d2:b9:5b:fa:
                    e8:c2:a4:a7:69:64:5e:a2:a4:2e:80:17:79:24:eb:
                    27:96:4e:ce:b3:ab:c4:37:cd:a7:40:cd:40:18:ff:
                    39:ec:a0:97:a1:0f:3e:64:64:ea:05:4e:35:ab:12:
                    57:f8:86:5c:04:84:98:43:31:b8:cd:ba:ba:a1:f5:
                    c3:c7:9e:71:c4:c0:c3:55:4e:8f:61:b0:de:33:1c:
                    cd:77:dc:a3:05:bb:31:91:bc:0b:07:f4:32:51:a9:
                    f3:1b:7f:40:9d:e2:f9:f3:c1:49:47:66:79:74:7d:
                    35:5f:66:f3:9c:9e:24:8b:53:f6:6f:0d:24:16:1a:
                    42:6f:d2:00:0b:4b:a4:a1:79:93:5e:83:93:9d:cc:
                    a2:cf:78:f5:21:c7:f4:9b:01:83:b1:96:26:a4:00:
                    77:85:8f:dc:a3:f9:97:bc:0d:a5:f0:57:ef:90:32:
                    79:19:d0:e5:74:47:3a:4e:a2:85:cb:58:94:73:e6:
                    5a:ac:8f:bb:3c:e6:02:83:ab:21:14:21:d6:57:3e:
                    5f:01:6f:67:cc:5a:98:8c:85:48:ab:16:5b:ef:f6:
                    41:40:db:0e:c3:7b:2e:11:07:db:22:37:16:b8:55:
                    f3:15:3f:26:ff:80:6c:73:94:5f:4d:4a:b5:b8:eb:
                    6a:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:AF:0C:B1:8C:7C:50:C8:45:F0:A8:ED:D7:AD:D3:7F:C1:7E:6A:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6635ca0a-c92a-3e70-aeca-457a07a54544.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.12.94.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:5c:db:c1:8f:a7:81:36:26:ba:f9:99:db:4b:fd:fc:01:9f:
         0a:75:63:42:b9:21:16:1d:44:52:a4:6c:65:df:dd:d2:5e:03:
         73:37:00:3c:a1:e9:94:f9:41:44:e5:62:5f:3f:df:c6:ea:14:
         68:2c:c2:31:c4:a9:de:c3:18:20:d4:24:73:79:45:06:24:c8:
         c4:bd:d2:76:00:96:b0:a2:d8:53:2f:e7:aa:b7:23:43:f3:e5:
         ae:b2:b1:19:83:51:2c:40:84:96:fc:d6:bb:e2:a2:c8:0d:87:
         a8:aa:80:3c:ca:2d:1a:01:1f:7e:ab:f8:07:9e:fc:dd:51:bb:
         5f:3a:68:5e:0e:8e:92:3d:7d:7f:ab:15:66:a0:dd:e4:2f:3c:
         19:72:9a:78:b6:53:1b:2b:11:0c:ff:50:cc:64:52:89:18:ff:
         fe:10:44:a9:56:94:40:72:9b:54:d8:8d:c6:65:2e:40:17:39:
         6d:2c:a3:c4:38:41:ae:7b:d6:45:6b:69:c4:24:1f:af:27:03:
         46:55:19:f7:20:39:9b:93:e6:72:23:0a:f2:14:3b:c1:e5:15:
         9a:82:a4:32:dd:b9:13:39:1e:3e:c9:8d:9b:66:61:8c:86:32:
         6b:89:6a:54:ff:3d:de:6a:74:c3:b3:a7:d3:52:62:08:10:63:
         b6:fe:14:99
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsrkaPe+rfDUqUx6sAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDkxMjEzMDA0MloXDTI1MTIxMTE0MDA0MlowLzEtMCsGA1UEAxMk
MjVhMDAwYjQtYWE2Zi00N2RiLWI0MDMtOGQ0OGM0NjVlYTliMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw8JEyuBxsnImLtK5W/rowqSnaWReoqQugBd5
JOsnlk7Os6vEN82nQM1AGP857KCXoQ8+ZGTqBU41qxJX+IZcBISYQzG4zbq6ofXD
x55xxMDDVU6PYbDeMxzNd9yjBbsxkbwLB/QyUanzG39AneL588FJR2Z5dH01X2bz
nJ4ki1P2bw0kFhpCb9IAC0ukoXmTXoOTncyiz3j1Icf0mwGDsZYmpAB3hY/co/mX
vA2l8FfvkDJ5GdDldEc6TqKFy1iUc+ZarI+7POYCg6shFCHWVz5fAW9nzFqYjIVI
qxZb7/ZBQNsOw3suEQfbIjcWuFXzFT8m/4Bsc5RfTUq1uOtqVQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJ+vDLGMfFDIRfCo7det03/Bfmr/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNjYzNWNhMGEtYzkyYS0z
ZTcwLWFlY2EtNDU3YTA3YTU0NTQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwAxeMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHVc28GPp4E2Jrr5mdtL/fwBnwp1Y0K5IRYdRFKkbGXf3dJeA3M3ADyh
6ZT5QUTlYl8/38bqFGgswjHEqd7DGCDUJHN5RQYkyMS90nYAlrCi2FMv56q3I0Pz
5a6ysRmDUSxAhJb81rviosgNh6iqgDzKLRoBH36r+Aee/N1Ru186aF4OjpI9fX+r
FWag3eQvPBlymni2UxsrEQz/UMxkUokY//4QRKlWlEBym1TYjcZlLkAXOW0so8Q4
Qa571kVracQkH68nA0ZVGfcgOZuT5nIjCvIUO8HlFZqCpDLduRM5Hj7JjZtmYYyG
MmuJalT/Pd5qdMOzp9NSYggQY7b+FJk=
-----END CERTIFICATE-----
Generated at Mon Oct 20 15:16:56 2025 by rpki-client