Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ab821372-3fb5-3954-a588-ce9415dd0203.roa
File:                     ab821372-3fb5-3954-a588-ce9415dd0203.roa (raw, json)
Hash identifier:          nUU43yfS/QC+k20qy2bQf5DEH+cltCEpKSDBMlAilFs=
Subject key identifier:   65:5F:09:64:58:03:2F:29:53:BB:E4:15:8F:D7:77:4C:DA:B8:6A:6C
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A6290D44F87B3C3F0063C3260
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ab821372-3fb5-3954-a588-ce9415dd0203.roa
Signing time:             Wed 02 Jul 2025 13:01:04 +0000
ROA not before:           Wed 02 Jul 2025 13:01:04 +0000
ROA not after:            Tue 30 Sep 2025 13:01:04 +0000
asID:                     397206
IP address blocks:        192.12.94.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:62:90:d4:4f:87:b3:c3:f0:06:3c:32:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  2 13:01:04 2025 GMT
            Not After : Sep 30 13:01:04 2025 GMT
        Subject: CN=b4d1e412-3b73-415f-87a5-5aecf5a782eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:65:dc:84:e7:51:c7:f3:0a:87:a5:0f:6a:f2:
                    58:08:4e:b6:36:b7:1f:fa:27:97:0c:b2:38:ae:80:
                    78:cf:6e:98:eb:38:42:ea:b0:1b:92:66:a2:72:19:
                    5c:38:a7:71:80:d5:09:2c:5c:5d:0e:a4:d3:89:41:
                    c8:23:af:af:31:2e:f9:7f:65:89:20:e9:58:0c:48:
                    f2:89:e7:30:5b:c1:81:ea:b6:04:e1:dc:28:6d:5e:
                    a9:5c:0d:90:84:be:1c:ea:1a:d8:fd:59:9e:53:d5:
                    5d:c5:de:c1:c6:4e:3f:d8:35:54:3c:48:19:56:01:
                    d1:26:07:8d:24:9c:1f:f4:83:a6:e5:e4:1b:32:92:
                    be:33:26:cb:8f:b3:00:af:0f:9b:29:b3:e0:47:f1:
                    56:8f:6f:aa:c7:c7:cb:59:e1:7b:92:13:62:bb:8d:
                    f8:cf:62:72:3a:38:a0:d3:b4:d1:d1:b5:8b:78:65:
                    62:7b:21:2f:45:1e:db:e5:1b:57:4b:3d:3d:da:8d:
                    ff:43:56:be:bc:8b:b8:f2:31:35:88:4d:44:7f:12:
                    49:63:7a:97:8c:a1:e4:c1:2c:64:38:18:c0:e2:e9:
                    db:ac:63:83:ff:c0:a0:86:c1:eb:52:7c:02:e7:91:
                    f5:03:3c:5a:85:b5:8a:80:f8:8e:ad:ec:9f:23:c7:
                    c4:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:5F:09:64:58:03:2F:29:53:BB:E4:15:8F:D7:77:4C:DA:B8:6A:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ab821372-3fb5-3954-a588-ce9415dd0203.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.12.94.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:40:aa:a1:01:48:e9:d8:da:1d:89:aa:76:3f:47:3c:e3:09:
         88:f3:bb:85:f5:13:92:0c:85:ac:1e:5f:d6:61:ed:bf:af:6b:
         94:d6:18:74:9c:3a:5d:1c:79:0c:d7:2e:16:cd:9a:50:b5:90:
         13:e5:94:c1:0f:10:29:5a:18:ee:48:0b:2d:d8:ad:6b:e0:60:
         fb:ba:fe:bf:4f:07:26:7c:a1:98:58:11:cc:a8:00:c2:f6:28:
         ab:fd:10:8f:2d:fc:74:f2:f7:92:33:65:59:1d:16:4c:26:47:
         26:e9:b7:e9:4c:24:46:a1:3b:e4:a2:c8:ed:a5:2b:b7:84:fa:
         f1:28:8e:c1:11:ba:e7:3c:6b:42:3a:6d:76:e5:d5:d1:cd:94:
         70:fb:ea:c6:70:1e:27:70:fd:5c:e5:32:fb:91:b4:15:56:58:
         63:2a:8d:5b:78:31:c4:dc:af:d0:15:0e:50:df:59:79:79:47:
         85:7f:77:64:44:c4:08:cf:26:b2:ea:21:21:3d:83:ff:f5:00:
         15:5f:c9:c3:20:9d:25:87:02:b9:7f:5d:22:2e:5f:34:e0:1e:
         62:b1:91:c6:37:e1:a6:4a:0d:90:2c:7a:27:3d:a2:c4:9e:f6:
         1a:68:ec:76:94:24:40:f9:98:7d:68:20:bf:e6:83:04:6b:bf:
         cc:9e:93:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 19:35:03 2025 by rpki-client