Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c3a7929a-cad9-3de8-a1d3-f9a07708d413.roa
File:                     c3a7929a-cad9-3de8-a1d3-f9a07708d413.roa (raw, json)
Hash identifier:          kt73Q3tbCDf8t1KTR/hsjAm1iEy8To6+DboxAQbg4Sw=
Subject key identifier:   7A:0E:B5:C5:9B:C4:62:D2:12:38:D3:23:F1:84:B4:51:EB:15:DE:D9
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A4C2D55B7C0FA74461D159970
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c3a7929a-cad9-3de8-a1d3-f9a07708d413.roa
Signing time:             Tue 24 Jun 2025 12:33:32 +0000
ROA not before:           Tue 24 Jun 2025 12:33:32 +0000
ROA not after:            Mon 22 Sep 2025 12:33:32 +0000
asID:                     396554
IP address blocks:        192.12.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4c:2d:55:b7:c0:fa:74:46:1d:15:99:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 24 12:33:32 2025 GMT
            Not After : Sep 22 12:33:32 2025 GMT
        Subject: CN=d271626d-7700-4449-b2f7-90e7ad7773ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:88:77:ca:bf:93:8d:92:fe:81:45:a0:63:a3:
                    e1:dc:0b:8b:fa:dc:d1:0b:91:5f:ec:2e:aa:25:f8:
                    bc:49:58:4e:9f:35:a7:e7:5a:28:47:87:1d:b5:70:
                    ca:79:f3:2c:fe:54:95:06:ca:2b:45:1d:68:13:55:
                    55:6d:54:4e:3f:0e:05:be:e6:2e:c1:0d:c1:81:8b:
                    59:78:1d:e8:0e:a3:c5:f2:0d:b3:64:8e:ce:ad:8d:
                    45:0d:09:6b:8e:90:ee:df:bf:c1:1f:51:34:0b:23:
                    28:73:7b:f6:44:7b:75:af:79:49:4b:c1:37:d1:d2:
                    33:e5:d9:3c:0b:bf:a5:cf:ed:69:97:9b:e9:a4:45:
                    be:72:2f:17:be:86:c4:53:0a:b3:0e:ff:08:ea:b1:
                    4f:52:7c:0b:48:b4:6b:91:a8:b5:b3:e9:51:18:5b:
                    22:ac:ff:3a:61:e2:05:a7:99:72:0b:63:2a:4c:75:
                    82:c0:ed:73:e5:bc:f0:77:40:08:6f:6f:53:f9:5a:
                    31:45:c6:e3:04:7a:4c:fb:0c:cb:3f:23:6f:a8:66:
                    8b:32:13:0b:a5:d6:26:26:1c:02:5e:78:76:e8:d6:
                    3f:2d:f4:d3:2d:96:a1:4c:cd:2f:52:46:f9:ec:42:
                    fb:19:ff:2f:f6:93:ff:35:80:d4:04:ab:2f:16:53:
                    11:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:0E:B5:C5:9B:C4:62:D2:12:38:D3:23:F1:84:B4:51:EB:15:DE:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c3a7929a-cad9-3de8-a1d3-f9a07708d413.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.12.94.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:63:04:85:54:4e:b9:60:ac:61:fe:44:14:ae:8e:60:d5:8d:
         b4:fa:48:62:f6:7a:5a:d9:24:8b:4c:d4:86:d3:0a:c4:81:54:
         76:53:62:65:c0:70:4b:b8:42:e9:a6:2d:e4:94:55:ef:08:91:
         5e:82:00:87:35:fa:48:ef:2f:79:a8:46:41:72:e0:43:29:f9:
         32:bc:43:2b:89:03:36:cb:92:37:19:c5:0c:3b:9d:ff:eb:e2:
         e4:54:e6:23:bd:66:a5:84:5a:e8:e9:c0:0a:d2:84:76:8b:15:
         de:39:f2:c7:4e:25:e4:d3:c7:60:16:9a:60:e2:12:e9:c5:4c:
         05:95:bd:58:e8:d6:75:56:69:32:76:37:ab:d3:76:51:24:a0:
         6d:de:2b:7e:21:05:66:60:70:7a:1b:c8:bb:d6:f5:cc:71:ca:
         ac:a6:cb:8c:49:b5:36:97:be:43:82:41:f9:1b:ed:00:68:8c:
         96:16:a6:0f:4b:83:0c:c8:80:b5:23:02:bb:bd:5e:2b:74:5e:
         7a:20:80:28:78:b5:19:f7:f9:e1:6e:11:95:68:a1:54:2f:c0:
         a9:f2:e6:11:f2:14:e3:90:0f:d2:65:80:1d:50:a0:b2:da:40:
         06:e3:c9:dc:a9:e8:84:54:e6:92:73:e0:f7:95:b3:e0:af:b3:
         7a:6e:94:87
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpMLVW3wPp0Rh0VmXAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDYyNDEyMzMzMloXDTI1MDkyMjEyMzMzMlowLzEtMCsGA1UEAxMk
ZDI3MTYyNmQtNzcwMC00NDQ5LWIyZjctOTBlN2FkNzc3M2FiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqIh3yr+TjZL+gUWgY6Ph3AuL+tzRC5Ff7C6q
Jfi8SVhOnzWn51ooR4cdtXDKefMs/lSVBsorRR1oE1VVbVROPw4FvuYuwQ3BgYtZ
eB3oDqPF8g2zZI7OrY1FDQlrjpDu37/BH1E0CyMoc3v2RHt1r3lJS8E30dIz5dk8
C7+lz+1pl5vppEW+ci8XvobEUwqzDv8I6rFPUnwLSLRrkai1s+lRGFsirP86YeIF
p5lyC2MqTHWCwO1z5bzwd0AIb29T+VoxRcbjBHpM+wzLPyNvqGaLMhMLpdYmJhwC
Xnh26NY/LfTTLZahTM0vUkb57EL7Gf8v9pP/NYDUBKsvFlMRyQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHoOtcWbxGLSEjjTI/GEtFHrFd7ZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYzNhNzkyOWEtY2FkOS0z
ZGU4LWExZDMtZjlhMDc3MDhkNDEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwAxeMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJhjBIVUTrlgrGH+RBSujmDVjbT6SGL2elrZJItM1IbTCsSBVHZTYmXA
cEu4QummLeSUVe8IkV6CAIc1+kjvL3moRkFy4EMp+TK8QyuJAzbLkjcZxQw7nf/r
4uRU5iO9ZqWEWujpwArShHaLFd458sdOJeTTx2AWmmDiEunFTAWVvVjo1nVWaTJ2
N6vTdlEkoG3eK34hBWZgcHobyLvW9cxxyqymy4xJtTaXvkOCQfkb7QBojJYWpg9L
gwzIgLUjAru9Xit0XnoggCh4tRn3+eFuEZVooVQvwKny5hHyFOOQD9JlgB1QoLLa
QAbjydyp6IRU5pJz4PeVs+Cvs3pulIc=
-----END CERTIFICATE-----
Generated at Sun Jun 29 22:48:23 2025 by rpki-client