Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6eebfc5a-be23-3d12-98b8-4cf3212ba535.roa
File:                     6eebfc5a-be23-3d12-98b8-4cf3212ba535.roa (raw, json)
Hash identifier:          cDDMz7efk+izXIQNU9iE8GCZDXSMSVzY2P9FZiYfuXk=
Subject key identifier:   D3:9B:D4:1A:2A:8F:4D:90:8E:E2:3C:B0:30:E3:E3:55:26:DE:18:40
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B434CA15B4552D4D6FD7E9440
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6eebfc5a-be23-3d12-98b8-4cf3212ba535.roa
Signing time:             Sun 21 Sep 2025 01:00:32 +0000
ROA not before:           Sun 21 Sep 2025 01:00:32 +0000
ROA not after:            Sat 20 Dec 2025 02:00:32 +0000
asID:                     36617
IP address blocks:        192.12.94.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:43:4c:a1:5b:45:52:d4:d6:fd:7e:94:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 21 01:00:32 2025 GMT
            Not After : Dec 20 02:00:32 2025 GMT
        Subject: CN=de8d09dd-2446-4584-a237-3628fa0c2fbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:9d:10:c8:e5:e5:cd:d3:7a:41:eb:f3:ad:50:
                    6f:fd:3b:6a:f5:f1:25:a6:60:6c:41:3f:7f:01:6b:
                    cb:e1:fa:91:0e:4d:9f:72:58:77:51:04:19:ff:17:
                    60:a4:90:8d:e9:1f:c5:a0:03:e7:d2:b9:db:ee:85:
                    94:d6:e8:40:16:1f:56:cb:eb:da:0d:a9:5c:11:e8:
                    20:c9:9f:98:b7:c7:75:a6:ef:59:5d:e0:0c:13:4d:
                    4d:7e:e1:64:37:c3:a7:0c:67:55:6c:cd:40:d9:da:
                    6a:38:d4:9c:6a:e1:39:c8:e7:57:7c:24:dd:40:49:
                    c7:39:99:2d:fb:a7:63:a7:eb:74:0e:b0:e1:d8:3a:
                    a3:d9:9f:3b:10:80:7e:81:a7:cc:a4:4b:27:ea:9d:
                    5c:22:23:83:e4:29:93:b9:df:55:ed:5f:64:bc:24:
                    0d:2c:09:6a:d3:96:11:35:0a:a8:0b:a7:f2:94:5f:
                    0b:47:fd:95:73:a3:51:3e:15:b8:5e:45:a1:f8:28:
                    6f:78:45:b3:59:93:16:bc:2d:79:51:f8:d0:f1:2c:
                    17:43:4e:e8:f0:0a:a7:c3:fa:14:43:aa:fd:ed:40:
                    3f:63:c7:9a:eb:a7:0c:fd:74:2a:4d:bd:fd:1b:ba:
                    c0:36:30:94:89:91:b0:c6:5e:8c:48:6c:b5:a7:68:
                    de:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:9B:D4:1A:2A:8F:4D:90:8E:E2:3C:B0:30:E3:E3:55:26:DE:18:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6eebfc5a-be23-3d12-98b8-4cf3212ba535.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.12.94.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:40:24:0f:0b:3e:f6:73:f3:ee:c0:93:b9:ee:23:01:f0:3e:
         c7:66:ad:9c:6f:6d:41:7e:3d:54:73:bc:b0:c9:a7:ea:ca:a1:
         6a:78:fd:80:6c:18:9e:c5:51:5f:fc:13:b7:86:b6:7e:e7:b1:
         e3:a7:1d:cd:3a:17:30:53:86:eb:29:63:5b:2a:7f:14:c7:42:
         b6:25:01:96:49:28:2c:ba:f9:13:f2:0f:62:f7:af:03:be:df:
         05:02:6a:5a:fb:89:8a:36:fd:b9:cb:01:fc:55:0f:89:21:c6:
         90:61:a9:1c:e4:e2:64:55:2e:64:32:e8:b0:0c:0f:68:7c:af:
         27:2a:0e:5e:6c:65:62:1f:ca:8a:f5:db:bc:4a:4a:2f:7a:15:
         6b:e7:04:24:07:33:35:00:b9:3a:f8:a5:3d:c3:20:1b:ca:4a:
         81:f0:ff:08:d6:7b:fb:71:4d:85:18:c1:a5:9a:51:dc:c0:be:
         ef:5e:b6:ba:f7:5e:cc:45:ce:fe:1e:cb:34:ee:12:61:8f:9b:
         b2:c1:48:37:1a:ad:45:6d:7d:d2:80:25:7d:44:f0:9b:50:c9:
         17:a3:a8:9d:be:e4:81:49:7a:a3:a8:b1:98:35:ea:85:31:71:
         1a:ad:3d:12:73:aa:d1:a3:7d:ad:87:28:7f:21:75:d5:2d:04:
         66:43:19:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:14:27 2025 by rpki-client