Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8132b7cd-340f-309f-a52a-31724c30f4e6.roa
File:                     8132b7cd-340f-309f-a52a-31724c30f4e6.roa (raw, json)
Hash identifier:          gAb4FtEGaUbN4VM+a1UQ5lGBASOsTDIaVLe09MPkhu0=
Subject key identifier:   5B:C1:D1:64:24:3C:0E:60:E2:AD:B7:FF:B9:64:EB:21:37:EC:D5:E0
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B2B91A1ABBE8008570A675780
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8132b7cd-340f-309f-a52a-31724c30f4e6.roa
Signing time:             Fri 12 Sep 2025 13:00:42 +0000
ROA not before:           Fri 12 Sep 2025 13:00:42 +0000
ROA not after:            Thu 11 Dec 2025 14:00:42 +0000
asID:                     396599
IP address blocks:        192.12.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2b:91:a1:ab:be:80:08:57:0a:67:57:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 12 13:00:42 2025 GMT
            Not After : Dec 11 14:00:42 2025 GMT
        Subject: CN=a4359650-7a34-4ec3-bdd1-be2824305e82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:31:68:05:19:12:4b:fe:75:9e:d3:bc:7b:84:
                    66:f9:fd:a8:cc:97:8e:d5:27:21:a8:57:c9:1b:8c:
                    db:c0:34:72:cd:02:d0:d0:78:c5:b6:ab:76:4f:70:
                    1b:2c:be:2e:e4:66:f1:77:7f:ac:22:a2:c4:67:1a:
                    ac:76:bd:0f:c1:3b:a6:4b:27:cf:f0:10:a9:82:2c:
                    df:3f:49:07:6b:f3:c6:1b:e3:b6:15:e9:33:df:79:
                    1e:2e:46:a5:26:cf:bd:09:82:69:7e:dc:ff:c7:01:
                    15:07:b1:00:fd:79:95:30:b9:5b:d0:69:2c:72:3b:
                    87:62:ed:38:b5:39:ad:a0:0c:21:37:db:d2:13:99:
                    ab:7f:46:f0:81:07:a0:b6:02:f8:58:78:15:a7:c9:
                    d0:13:55:a8:ea:39:18:10:2c:5d:3b:33:91:3d:ab:
                    1b:e7:65:95:63:3d:31:ac:28:ea:92:ed:d8:fc:75:
                    f1:f1:55:cc:3d:76:e6:95:fa:e0:ae:ba:b9:a9:0e:
                    ce:8c:31:79:c9:8e:5b:10:67:d8:d9:f7:97:b6:2f:
                    e6:3a:e9:11:8c:0b:b9:df:91:b2:e9:e1:1a:7a:41:
                    f6:dd:25:ac:71:06:02:34:5d:f1:3c:73:57:b4:a4:
                    c6:a3:94:08:64:3d:43:6b:8a:e2:78:65:7e:aa:2a:
                    a5:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:C1:D1:64:24:3C:0E:60:E2:AD:B7:FF:B9:64:EB:21:37:EC:D5:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8132b7cd-340f-309f-a52a-31724c30f4e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.12.94.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:64:e8:ef:e8:07:48:77:ff:32:e8:11:18:51:ef:0e:0f:3f:
         6f:fa:4a:65:86:55:8a:90:3e:ba:33:f5:88:16:12:5c:6e:05:
         b2:6e:01:84:06:47:45:f3:ad:f9:0a:8d:89:2f:33:17:3f:20:
         09:4c:90:08:c9:98:f5:02:0a:81:0e:68:6a:c8:73:16:37:ca:
         f5:79:69:69:70:4f:bc:5f:e8:2b:98:97:04:6b:98:32:05:0c:
         bd:78:19:3c:86:26:63:52:82:f9:e2:4e:f0:43:04:a6:6c:e6:
         b3:5a:d9:f9:37:29:6d:d2:c5:e7:af:ad:29:5f:cd:00:25:91:
         7f:2d:62:7b:eb:ca:c8:dd:f4:9b:c2:9d:ec:e8:4f:c1:55:5c:
         24:5b:c7:54:07:9e:9d:a3:d7:f9:e5:e8:af:a4:0d:4c:63:1f:
         26:1e:c3:a4:c2:14:fb:97:31:31:cd:34:aa:85:a3:b3:31:fd:
         2a:c7:a4:28:a9:63:7c:b5:c6:d2:1a:b8:ac:19:85:92:34:4e:
         60:06:82:e2:bd:16:9e:85:4c:70:93:86:63:e1:9c:73:e8:00:
         dc:2c:5f:d4:5c:0d:05:54:d9:d9:70:da:d3:65:a9:aa:4a:ca:
         76:d0:3e:33:a7:c0:46:d4:9a:9a:65:2a:d1:c1:57:68:36:17:
         93:ee:52:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:45:23 2025 by rpki-client