Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/72b1af10-9491-3c80-b4ed-f0e4cf4bbdeb.roa
File:                     72b1af10-9491-3c80-b4ed-f0e4cf4bbdeb.roa (raw, json)
Hash identifier:          kN4ViLw4r/JSI5hm2B7253pxBoMlI07mbXuArnuGDIE=
Subject key identifier:   4F:95:8F:82:0E:00:C2:65:8F:5B:3A:FF:5E:4C:0B:F4:58:C2:57:30
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B434C9C9704F1E4808B5D3640
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/72b1af10-9491-3c80-b4ed-f0e4cf4bbdeb.roa
Signing time:             Sun 21 Sep 2025 01:00:32 +0000
ROA not before:           Sun 21 Sep 2025 01:00:32 +0000
ROA not after:            Sat 20 Dec 2025 02:00:32 +0000
asID:                     19836
IP address blocks:        192.12.94.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:43:4c:9c:97:04:f1:e4:80:8b:5d:36:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 21 01:00:32 2025 GMT
            Not After : Dec 20 02:00:32 2025 GMT
        Subject: CN=90adae34-1336-4cba-834e-2a0a9033a6bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:32:a0:83:61:8b:ce:5d:99:d2:36:70:2c:80:
                    a8:36:f0:17:ad:6e:18:13:1a:8d:4b:72:8e:be:46:
                    50:70:3e:69:ed:68:bb:d6:be:04:cc:d4:11:cd:14:
                    bf:81:91:be:c0:2a:dd:7e:f7:b7:09:1d:3b:14:2e:
                    2e:1e:31:25:35:9f:d9:2f:92:a0:f9:a9:63:90:84:
                    3e:75:f7:c3:5c:09:80:d3:cc:29:b9:52:fc:28:e5:
                    70:68:d6:53:ea:c4:3a:81:88:30:db:8a:5d:0e:8d:
                    5c:42:38:a9:bd:8a:d4:fc:c3:13:7f:2c:ae:7e:d1:
                    25:ca:ef:51:b4:7a:a4:88:3a:9e:83:6e:ad:82:c4:
                    72:fa:0a:cc:1b:fa:95:77:4c:57:ce:0e:7e:36:93:
                    36:be:05:2e:73:5f:4b:bc:98:a2:fe:9e:58:7c:29:
                    3c:fd:c3:29:1c:79:95:59:b5:72:26:96:d5:92:d4:
                    7b:2f:00:46:d8:30:29:2d:c4:df:af:c8:1d:2a:98:
                    bc:bd:54:65:78:f5:f6:35:f0:d9:cb:7c:22:7d:e8:
                    3f:2c:cc:aa:b0:db:fc:fe:4f:11:96:09:24:17:15:
                    3e:9e:05:38:32:ff:66:42:16:12:b5:1d:b4:5a:49:
                    38:1a:40:34:6c:7e:71:a3:ef:82:b7:3d:e1:79:c0:
                    d2:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:95:8F:82:0E:00:C2:65:8F:5B:3A:FF:5E:4C:0B:F4:58:C2:57:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/72b1af10-9491-3c80-b4ed-f0e4cf4bbdeb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.12.94.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:b7:ee:37:ee:b4:a0:48:bf:6e:6e:80:a1:8b:5e:f4:1f:b3:
         b4:19:c0:02:98:a2:0e:a8:a8:a2:c8:d2:22:8e:fd:10:55:7c:
         27:aa:72:15:70:c4:52:0d:bc:04:b6:eb:7c:d9:d7:90:63:1f:
         9e:9d:ee:71:ad:c1:35:69:24:be:bd:14:d7:03:83:47:09:83:
         0a:1d:f1:ff:cc:43:d0:6c:de:c1:c1:82:3e:05:62:34:af:32:
         38:01:df:33:78:02:8f:f0:7a:8e:53:ec:1a:70:96:d0:2a:ed:
         fa:82:b9:27:a1:ea:7d:06:61:42:2c:73:92:c5:5b:f3:58:87:
         c8:13:cf:9a:aa:cb:5a:14:d7:16:0a:b8:70:71:bc:2d:19:ed:
         c0:9e:92:61:d8:1d:1a:3f:c2:bf:9c:3a:33:aa:f2:5d:43:8a:
         9d:fe:fd:87:78:82:71:48:b0:92:68:bd:51:0b:1c:90:73:f8:
         43:86:2f:08:86:87:4f:11:80:8f:d1:0f:34:c9:2e:ae:68:0a:
         a7:ac:df:5f:d1:66:36:60:a9:31:61:4d:ff:5b:e9:78:23:11:
         3f:13:60:2c:f0:d1:92:4c:3a:c2:81:c2:0e:25:e9:6e:f8:94:
         fd:14:31:c6:3b:50:58:77:7e:80:bf:31:89:97:e6:e7:a9:4d:
         3d:e5:a4:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:12:57 2025 by rpki-client