Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bbb03f0c-f415-31cd-a0bd-396cedb84fd9.roa
File:                     bbb03f0c-f415-31cd-a0bd-396cedb84fd9.roa (raw, json)
Hash identifier:          o5Uv5OSR3qWg/fsGifp1hclExsz8bfvgDBIelLZB+38=
Subject key identifier:   21:DE:0F:59:A4:08:1A:D6:C7:67:10:7F:DA:46:E6:C3:37:BB:FF:95
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A4C2D520C55B515F04FF74300
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bbb03f0c-f415-31cd-a0bd-396cedb84fd9.roa
Signing time:             Tue 24 Jun 2025 12:33:31 +0000
ROA not before:           Tue 24 Jun 2025 12:33:31 +0000
ROA not after:            Mon 22 Sep 2025 12:33:31 +0000
asID:                     36622
IP address blocks:        192.12.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4c:2d:52:0c:55:b5:15:f0:4f:f7:43:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 24 12:33:31 2025 GMT
            Not After : Sep 22 12:33:31 2025 GMT
        Subject: CN=68a67867-62b0-48cc-aa9c-1d8a386cbcfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:1e:e6:41:5f:9f:9c:12:d5:33:b8:d3:d7:6f:
                    fa:5d:ba:f3:25:15:e7:df:d4:eb:30:24:4f:b1:b0:
                    e7:e4:0a:65:4d:fa:55:b5:1b:7c:3b:4b:2a:f7:c9:
                    b2:4f:20:8b:0e:c6:5f:53:59:12:c6:5c:1c:c9:a8:
                    86:67:e3:2d:f8:88:96:af:5c:89:8b:8e:d1:20:a3:
                    c6:93:1e:14:2a:6f:96:e3:03:b5:72:6e:9e:31:cc:
                    54:ce:85:14:a1:dd:39:5e:98:69:de:89:57:82:5b:
                    2d:1f:7c:d1:30:e2:3e:a8:03:b9:23:fe:56:75:1d:
                    33:80:0d:4f:b4:68:60:a6:bc:b0:ce:c0:51:8f:52:
                    f9:9f:c7:93:5d:95:6e:f6:69:18:12:06:de:56:73:
                    02:f8:be:14:da:a2:45:d4:04:f5:03:40:a4:40:b8:
                    aa:c9:54:7b:ee:15:67:8a:4f:92:70:55:df:a2:7e:
                    c6:29:fe:b0:21:6f:2f:3d:34:2f:e9:60:bb:21:1e:
                    a1:b5:09:33:f6:f6:34:9c:9c:74:24:4f:2e:9a:85:
                    37:d4:55:61:3c:ec:b5:50:84:3c:d8:52:1f:8e:6a:
                    7b:f2:9f:0f:5a:9a:12:88:93:e6:9c:6c:b1:13:8d:
                    a6:f6:77:16:66:0f:fb:9a:97:bd:57:a9:3c:48:6f:
                    cf:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:DE:0F:59:A4:08:1A:D6:C7:67:10:7F:DA:46:E6:C3:37:BB:FF:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bbb03f0c-f415-31cd-a0bd-396cedb84fd9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.12.94.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:83:7e:16:1b:83:dc:ee:66:13:10:8e:1e:6d:3f:ae:0f:3e:
         6d:dc:b8:f0:44:d3:4b:d4:1a:ed:b8:d1:55:24:f2:40:b6:ef:
         61:6a:e0:71:50:fe:79:2d:67:ae:12:75:0e:70:46:a4:dc:b1:
         1d:57:7f:ec:41:4e:67:2a:c7:72:fd:9e:1f:e5:aa:ae:c7:f8:
         0a:8d:bb:c3:f0:2f:5e:5e:0e:23:2f:c6:1f:da:9d:45:71:cc:
         1f:b8:66:06:5c:03:ae:24:e1:5e:ce:56:1a:92:06:54:f2:c3:
         6b:b8:14:77:2d:96:cd:c7:7a:e7:2f:e4:03:14:96:b5:3e:12:
         b5:53:1f:82:af:b4:35:be:c4:77:c5:69:6a:6c:73:34:64:3b:
         56:c2:54:11:36:bb:6f:52:9a:33:9e:ab:57:ba:07:6a:ef:34:
         81:56:dc:18:12:ae:b0:56:e5:cf:8f:e7:27:aa:5f:b4:4c:da:
         18:80:05:bf:37:b2:70:2a:fb:82:a4:af:38:dc:7d:f9:aa:f7:
         49:98:a1:c8:60:75:81:c2:18:7e:93:9b:c1:9a:93:cf:eb:ce:
         4f:9c:c6:3a:99:b5:55:38:a5:a3:6d:d9:d5:41:51:49:07:56:
         0c:4a:14:a3:a1:92:69:09:db:ac:c1:d2:3c:33:01:24:62:d1:
         6e:c3:03:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 17:35:05 2025 by rpki-client