Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/82f313df-34c0-3f1b-881d-78a0f0ac02b9.roa
File:                     82f313df-34c0-3f1b-881d-78a0f0ac02b9.roa (raw, json)
Hash identifier:          e495DfPiSOUaMSa1TtXVtAto5aGB1/siuWsbfQ4M1ZE=
Subject key identifier:   2D:04:71:E3:C9:77:CF:45:09:94:42:E7:5E:56:6A:1B:E3:69:6E:33
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A4C2D50D410B7E0203AEFC040
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/82f313df-34c0-3f1b-881d-78a0f0ac02b9.roa
Signing time:             Tue 24 Jun 2025 12:33:30 +0000
ROA not before:           Tue 24 Jun 2025 12:33:30 +0000
ROA not after:            Mon 22 Sep 2025 12:33:30 +0000
asID:                     396605
IP address blocks:        192.12.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4c:2d:50:d4:10:b7:e0:20:3a:ef:c0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 24 12:33:30 2025 GMT
            Not After : Sep 22 12:33:30 2025 GMT
        Subject: CN=0e4ab167-ad93-4da1-ab78-d72fea1cfc3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:ab:0d:c3:88:36:6c:ef:f7:fa:a6:d6:e1:37:
                    71:c9:cb:ad:94:e3:9e:67:d2:47:76:1a:43:59:b7:
                    52:91:e0:58:d4:b0:eb:f0:37:e3:e1:62:bf:07:a3:
                    72:2a:58:b1:9c:ea:ab:9e:04:aa:d1:f0:9b:36:b0:
                    66:2c:2b:fd:30:4b:aa:3c:86:d6:45:af:9b:28:35:
                    9f:8c:4f:12:61:57:07:38:8b:7a:c0:30:d3:fa:2b:
                    82:c6:3f:a0:87:c3:c4:fa:36:e3:24:33:c0:65:1c:
                    90:07:96:08:67:95:1a:e1:4e:6f:6d:e3:29:59:d8:
                    57:77:f9:91:15:07:03:a3:e3:98:ca:7e:df:88:eb:
                    4c:27:6b:87:b1:08:88:87:cc:e1:ea:a4:eb:c7:ac:
                    0c:9e:a4:11:f7:c7:bc:fe:ea:6a:48:52:6e:6a:75:
                    68:41:1d:84:72:1f:6b:57:25:c9:07:25:5a:9c:aa:
                    c3:5b:bd:bd:b4:e1:ec:4e:0b:d1:90:7e:e9:8f:70:
                    97:ef:73:ba:2b:d7:69:38:56:1a:3f:e2:93:ff:ef:
                    60:fd:91:a9:e0:33:33:0b:14:1d:c4:b1:a2:7f:f1:
                    b9:fa:6c:65:c5:52:fa:86:44:4d:ec:8e:98:f5:00:
                    c1:66:ec:bb:e0:91:e8:44:00:e8:dd:98:16:a9:39:
                    50:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:04:71:E3:C9:77:CF:45:09:94:42:E7:5E:56:6A:1B:E3:69:6E:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/82f313df-34c0-3f1b-881d-78a0f0ac02b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.12.94.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:47:47:9b:a5:dc:39:98:77:2a:42:1a:30:c7:1b:13:38:ad:
         28:9c:f8:77:9b:e6:b8:a1:46:50:6e:8b:43:63:af:e2:79:9a:
         a6:67:e6:71:a3:d6:e0:91:74:94:36:c4:d6:ac:96:39:ec:07:
         0e:32:9f:99:37:07:16:69:0e:c0:1e:bd:74:de:c3:56:89:dd:
         a6:d9:9c:cb:e2:81:8c:af:c9:93:99:02:1d:8d:92:83:ae:64:
         fc:33:37:70:f6:a6:eb:91:03:98:01:37:3e:db:5a:02:f9:c3:
         2f:43:c7:47:c7:82:73:65:ce:56:ac:39:c8:89:3e:d9:81:68:
         dc:ee:61:89:75:a1:db:46:02:a9:49:25:ee:29:c7:9d:95:1e:
         79:a0:09:4c:f0:56:29:55:44:23:5b:8f:9f:cc:8a:a9:46:11:
         a4:80:e1:f2:f4:23:7d:6f:3b:04:17:6b:80:3e:e3:d8:14:f4:
         36:cc:67:0c:02:0a:2c:56:22:bb:25:58:1e:66:d2:4e:25:17:
         55:5f:99:7b:c1:78:0f:e1:c4:95:3d:ef:1e:bf:55:45:e6:c2:
         e5:b0:b4:dd:eb:28:25:91:a5:0f:c3:98:f9:05:91:85:b3:cd:
         d9:03:c3:e6:71:4a:ad:a2:f0:d5:e5:6f:60:bc:dd:a0:1d:19:
         7c:09:98:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 13:40:40 2025 by rpki-client