Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b196ca95-84f4-3327-bcdb-b7ca7e3a14b4.roa
File:                     b196ca95-84f4-3327-bcdb-b7ca7e3a14b4.roa (raw, json)
Hash identifier:          g1+TyZEx2aY5F2MpZmweGmF87QEFOo0AyJKrNb49u9Y=
Subject key identifier:   C3:ED:B2:88:CA:E0:6C:3B:31:71:7C:0A:99:59:1D:8D:ED:46:F3:7A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A4C2D530E5ED80A221C69CF00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b196ca95-84f4-3327-bcdb-b7ca7e3a14b4.roa
Signing time:             Tue 24 Jun 2025 12:33:31 +0000
ROA not before:           Tue 24 Jun 2025 12:33:31 +0000
ROA not after:            Mon 22 Sep 2025 12:33:31 +0000
asID:                     396593
IP address blocks:        192.12.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4c:2d:53:0e:5e:d8:0a:22:1c:69:cf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 24 12:33:31 2025 GMT
            Not After : Sep 22 12:33:31 2025 GMT
        Subject: CN=dbb1da53-b993-4db9-9df0-7e8d43f45b5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ff:ad:c8:0c:7b:ee:7c:7d:0b:89:1f:ac:cc:
                    ba:98:7e:fe:c6:2e:f3:20:af:22:8f:76:50:a7:73:
                    db:c0:09:ff:61:81:77:3e:a7:a3:f2:fe:f9:c8:2e:
                    84:3b:66:3f:f7:44:4e:01:c5:22:a0:bb:40:4a:a7:
                    12:2e:c6:76:6e:60:f3:c1:ca:e5:ec:d1:03:fb:af:
                    0c:3a:ed:7f:6a:78:7a:2c:16:f8:8c:b9:07:9e:88:
                    57:52:64:96:34:e1:de:cb:4d:76:28:e6:01:10:e2:
                    89:fd:69:dd:72:b7:12:56:be:85:54:20:88:d3:fa:
                    86:ab:fc:22:9a:86:73:5e:69:c9:d2:9a:58:f5:e9:
                    66:a0:74:cd:74:68:c9:d7:47:b9:da:a7:45:16:50:
                    34:ac:b9:cc:58:f6:d3:85:09:38:8e:46:4e:91:88:
                    8a:0f:03:da:26:b3:3c:14:41:48:74:37:8a:aa:0d:
                    8d:69:9f:3d:ea:46:ee:60:1f:b1:56:1f:16:5f:71:
                    f4:c3:23:77:40:68:3f:fe:f6:e0:66:84:0c:e2:f0:
                    23:83:00:da:ca:71:1f:43:78:49:24:ed:f7:dd:bd:
                    e8:e2:00:b4:d6:00:df:e6:e7:3d:70:21:f3:70:ec:
                    1a:86:22:3b:95:2a:10:54:cd:61:a8:75:2a:c0:0f:
                    df:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:ED:B2:88:CA:E0:6C:3B:31:71:7C:0A:99:59:1D:8D:ED:46:F3:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b196ca95-84f4-3327-bcdb-b7ca7e3a14b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.12.94.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:0b:72:7c:a0:7c:db:16:2b:a4:01:24:31:80:04:07:44:2f:
         52:3b:83:57:c7:cf:7f:16:88:f3:1a:2a:c8:00:5e:26:b9:fa:
         22:09:95:20:f5:4d:f4:8f:1e:8a:28:c7:de:5f:e5:d6:d7:58:
         d4:4d:4d:cd:c6:1f:50:69:b3:2a:01:27:99:ce:c2:5c:a3:b7:
         4b:85:d0:59:71:4d:f8:fc:5d:f2:a8:1f:69:ab:ad:03:cf:96:
         31:ad:ca:66:39:f5:5e:98:1a:c8:71:80:c4:fb:f5:86:2b:64:
         d7:4e:3a:ad:80:1c:94:2c:58:9d:c1:1b:cc:f0:f9:02:cc:ce:
         ac:9a:bd:13:60:d6:4c:6f:e1:40:cb:89:61:54:98:45:9b:1f:
         49:78:46:ec:18:68:ec:ba:6a:eb:63:1d:4c:f5:9f:47:2f:5b:
         8b:b2:88:04:4f:0c:90:b5:d1:d4:76:f9:0d:0b:19:33:e7:1e:
         03:8d:7e:6a:c6:a1:72:de:60:4f:5e:0c:ee:5a:7c:97:a5:79:
         e2:e8:42:d9:72:45:c2:65:0e:05:16:32:ad:b9:d9:02:d4:66:
         b3:06:6b:16:37:05:19:47:e1:e7:5d:ce:e1:0f:74:59:e1:48:
         98:49:d7:33:ab:d4:35:ed:02:a6:8b:9c:2a:02:13:1a:0b:07:
         4b:ff:9d:4a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpMLVMOXtgKIhxpzwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDYyNDEyMzMzMVoXDTI1MDkyMjEyMzMzMVowLzEtMCsGA1UEAxMk
ZGJiMWRhNTMtYjk5My00ZGI5LTlkZjAtN2U4ZDQzZjQ1YjVkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx/+tyAx77nx9C4kfrMy6mH7+xi7zIK8ij3ZQ
p3PbwAn/YYF3Pqej8v75yC6EO2Y/90ROAcUioLtASqcSLsZ2bmDzwcrl7NED+68M
Ou1/anh6LBb4jLkHnohXUmSWNOHey012KOYBEOKJ/WndcrcSVr6FVCCI0/qGq/wi
moZzXmnJ0ppY9elmoHTNdGjJ10e52qdFFlA0rLnMWPbThQk4jkZOkYiKDwPaJrM8
FEFIdDeKqg2NaZ896kbuYB+xVh8WX3H0wyN3QGg//vbgZoQM4vAjgwDaynEfQ3hJ
JO333b3o4gC01gDf5uc9cCHzcOwahiI7lSoQVM1hqHUqwA/fHQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMPtsojK4Gw7MXF8CplZHY3tRvN6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYjE5NmNhOTUtODRmNC0z
MzI3LWJjZGItYjdjYTdlM2ExNGI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwAxeMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFcLcnygfNsWK6QBJDGABAdEL1I7g1fHz38WiPMaKsgAXia5+iIJlSD1
TfSPHooox95f5dbXWNRNTc3GH1BpsyoBJ5nOwlyjt0uF0FlxTfj8XfKoH2mrrQPP
ljGtymY59V6YGshxgMT79YYrZNdOOq2AHJQsWJ3BG8zw+QLMzqyavRNg1kxv4UDL
iWFUmEWbH0l4RuwYaOy6autjHUz1n0cvW4uyiARPDJC10dR2+Q0LGTPnHgONfmrG
oXLeYE9eDO5afJeleeLoQtlyRcJlDgUWMq252QLUZrMGaxY3BRlH4eddzuEPdFnh
SJhJ1zOr1DXtAqaLnCoCExoLB0v/nUo=
-----END CERTIFICATE-----
Generated at Mon Jun 30 10:40:08 2025 by rpki-client