Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7a632739-8494-3e4a-92fd-c7397864ab0d.roa
File:                     7a632739-8494-3e4a-92fd-c7397864ab0d.roa (raw, json)
Hash identifier:          yvkRoS3AINX48AuwB+oBpNMdBWkNHOqzVLG2jkMJNRc=
Subject key identifier:   62:86:80:89:4D:5A:6D:F7:6B:25:93:CD:C0:28:A1:3B:2D:35:50:E0
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A4C2D5176AB8026179F53A01E
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7a632739-8494-3e4a-92fd-c7397864ab0d.roa
Signing time:             Tue 24 Jun 2025 12:33:30 +0000
ROA not before:           Tue 24 Jun 2025 12:33:30 +0000
ROA not after:            Mon 22 Sep 2025 12:33:30 +0000
asID:                     396589
IP address blocks:        192.12.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4c:2d:51:76:ab:80:26:17:9f:53:a0:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 24 12:33:30 2025 GMT
            Not After : Sep 22 12:33:30 2025 GMT
        Subject: CN=ad4afe21-8b12-4f12-b9c7-b06b51ebc509
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:93:30:e0:5c:ff:38:36:e6:8b:58:38:87:9e:
                    1d:8b:1b:f1:3b:76:51:87:c8:ef:0f:eb:9a:35:98:
                    63:83:ed:2f:52:f2:a2:a7:97:d9:65:15:b1:58:18:
                    a3:d5:95:88:2c:3c:c3:88:8c:8d:1a:50:20:d1:ec:
                    dd:9a:85:64:db:35:9d:46:31:96:b0:25:0d:22:4c:
                    57:ac:5b:25:cb:c3:cd:f7:df:c4:57:e2:e7:65:f3:
                    a6:00:b5:e2:83:74:d7:88:52:44:e3:20:75:c6:a7:
                    08:85:c7:8d:02:5b:a1:b5:da:e2:9b:43:91:10:aa:
                    1c:7b:65:fb:25:24:3b:3a:2e:82:2f:af:0c:5f:18:
                    16:04:16:0b:1b:a2:25:6f:04:db:49:99:9c:e4:7f:
                    88:49:77:03:c7:23:0a:37:4d:3b:3a:ce:71:5a:d4:
                    7f:4f:de:c7:13:3e:fd:12:be:6c:10:8c:5a:a8:c4:
                    e5:ae:25:50:f5:cd:d8:dc:54:c6:e5:a6:0f:94:36:
                    22:63:5a:e8:2d:a9:bb:ce:60:fe:13:57:2e:e4:5c:
                    f4:80:a3:1e:08:f4:0b:b7:64:b9:61:08:1c:91:94:
                    72:be:17:3e:87:2c:a9:93:e4:e2:1d:c6:3f:a4:aa:
                    e4:35:f4:3a:ad:8e:e2:48:4c:3d:a2:3e:28:5d:4d:
                    c9:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:86:80:89:4D:5A:6D:F7:6B:25:93:CD:C0:28:A1:3B:2D:35:50:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7a632739-8494-3e4a-92fd-c7397864ab0d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.12.94.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:64:ab:db:4f:c1:37:0f:f1:e2:3d:3b:0a:1a:0c:12:cf:26:
         4e:d9:32:2b:10:4e:bd:6b:ec:8d:b8:19:05:c7:84:45:b1:75:
         56:78:70:79:a4:a7:a1:1f:c4:87:cf:f7:c4:d2:76:f9:71:30:
         c9:90:d4:fc:a0:47:b2:97:00:85:00:ff:77:51:eb:7d:3b:cf:
         86:1b:d1:60:6a:b9:b9:31:27:ef:4d:7f:3f:16:8e:e3:60:94:
         fa:cd:49:ec:bc:ea:89:86:a1:14:e1:2f:89:bf:2b:83:fa:5b:
         ad:a2:6b:7a:8f:62:9b:8a:26:2e:45:49:76:b7:91:c7:4d:af:
         61:23:31:66:dd:3a:0e:dc:f1:7b:84:67:40:13:35:06:82:39:
         34:9c:44:c6:04:e6:6e:db:1c:3c:df:bc:93:6c:f5:21:92:6f:
         7b:60:88:88:90:fb:fe:8a:1b:6b:f5:79:9b:3f:9b:12:67:39:
         50:83:35:0c:8d:ee:68:b8:0c:03:09:a8:d2:72:81:bd:b9:4c:
         f1:c9:0f:3d:11:66:be:56:21:a8:94:27:4e:c0:3c:0d:63:8e:
         b1:e1:da:47:03:40:b6:f7:a4:2c:88:65:0e:60:4f:34:c4:1e:
         ac:31:5e:3c:a4:fb:6f:7f:13:da:35:b9:06:9b:17:67:9e:ec:
         9a:32:69:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 20:30:26 2025 by rpki-client