Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9193e9e6-e84b-32fd-a547-ced36e4db1fb.roa
File:                     9193e9e6-e84b-32fd-a547-ced36e4db1fb.roa (raw, json)
Hash identifier:          CRu52g6Y5xOmONWEjP5zFJ5lVOqL/WP3W2lrFFVmfDY=
Subject key identifier:   14:BB:0E:93:61:32:C1:81:D3:92:F2:1F:67:7A:09:EB:C7:6E:0F:F2
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B2B91A05EE92527FC06779800
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9193e9e6-e84b-32fd-a547-ced36e4db1fb.roa
Signing time:             Fri 12 Sep 2025 13:00:42 +0000
ROA not before:           Fri 12 Sep 2025 13:00:42 +0000
ROA not after:            Thu 11 Dec 2025 14:00:42 +0000
asID:                     397204
IP address blocks:        192.12.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2b:91:a0:5e:e9:25:27:fc:06:77:98:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 12 13:00:42 2025 GMT
            Not After : Dec 11 14:00:42 2025 GMT
        Subject: CN=d848b3f3-e027-44a0-b874-9948f3b901e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f2:38:4c:6d:8d:a0:d6:a1:b1:07:d7:ec:ab:
                    a5:c7:45:f8:9a:d8:08:b8:b6:8b:e5:d8:04:f9:55:
                    13:ad:56:22:5c:10:65:27:21:d1:bb:77:27:d7:ad:
                    28:ab:d4:f2:ac:57:e7:2b:da:37:95:a7:f1:4a:a7:
                    78:2c:56:02:e3:06:4a:11:60:2c:3a:6f:49:8e:20:
                    fe:b3:e6:e6:a6:cd:8d:0e:36:4e:c4:96:7d:8f:ac:
                    9b:34:39:82:c2:65:31:be:2a:32:b0:43:da:48:84:
                    27:17:e8:48:de:e9:f5:3b:81:ed:f3:42:30:3b:1f:
                    45:f4:56:56:54:fc:7f:b2:5b:3e:c7:61:cd:a0:ee:
                    a9:db:7c:2f:aa:68:b3:72:72:4f:b7:88:39:6c:4b:
                    0f:4f:e9:a3:10:5f:81:4a:79:19:b7:72:4f:ff:3c:
                    08:2a:26:3c:f9:b3:97:34:aa:3b:51:0d:34:e7:6a:
                    7a:cf:8d:60:aa:a8:41:9a:30:88:7c:a9:3f:b1:a0:
                    38:d9:63:19:a1:a4:05:1f:fb:7e:4f:cc:16:62:f5:
                    f2:88:bf:c2:9a:6b:e6:38:74:f0:b0:6d:13:53:cd:
                    e5:12:b5:35:74:9a:26:e8:3d:6a:fe:68:ff:93:20:
                    9f:3c:5b:27:08:2d:7b:17:ba:79:89:b4:54:36:9c:
                    af:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:BB:0E:93:61:32:C1:81:D3:92:F2:1F:67:7A:09:EB:C7:6E:0F:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9193e9e6-e84b-32fd-a547-ced36e4db1fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.12.94.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:f9:80:fd:77:fc:49:8f:66:ca:79:7a:e1:42:14:7e:b1:b1:
         b5:b5:ff:01:7a:b5:62:35:f0:8b:47:b0:e5:aa:ea:c0:31:ec:
         e9:55:2b:59:a8:af:a0:ac:e0:76:6d:9b:e2:3c:5a:a3:6e:b5:
         cb:57:aa:30:30:2d:a0:ef:66:db:f3:22:f7:8a:e4:f8:07:50:
         97:24:ca:e1:d9:be:e1:3a:3e:7a:0e:78:34:a9:de:3c:e7:67:
         34:3c:f1:be:65:5f:2e:2d:cf:59:00:15:bb:16:35:56:ad:1d:
         e1:fe:ca:0b:a2:49:36:3a:1a:be:d7:cb:8f:6b:8a:3e:bb:ac:
         ed:95:68:21:ff:99:c5:e7:2e:2e:b8:f4:49:6f:78:10:ed:d7:
         6d:71:fb:38:e4:2b:51:1a:47:cb:2a:f5:95:da:74:ec:3d:ac:
         10:30:a3:ad:8b:ee:08:98:75:b1:ba:4c:3a:bc:e9:54:60:38:
         62:28:76:db:f5:83:34:d1:6b:74:f7:81:13:ea:91:e2:c1:a8:
         21:b8:03:51:a0:88:7d:39:e3:2a:bd:c6:f9:06:39:34:92:24:
         ad:78:b2:ce:ef:10:99:1b:88:37:d4:5b:32:61:33:30:37:80:
         70:19:c4:5a:a3:90:43:5d:00:76:80:1e:d2:c6:41:4b:57:7f:
         ff:ee:df:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:14:14 2025 by rpki-client