Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ced4276c-5045-30cd-a5d5-9455a40e5a51.roa
File:                     ced4276c-5045-30cd-a5d5-9455a40e5a51.roa (raw, json)
Hash identifier:          oU3LoqK0dDViso0EoQZTpL/Y6w7doN0J5X0mGfHH6Uw=
Subject key identifier:   C8:A3:92:8C:3A:5A:E6:13:CA:C8:0B:11:A8:F6:E8:0D:A1:14:3E:C4
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A4C2D5455421358FA1469DA80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ced4276c-5045-30cd-a5d5-9455a40e5a51.roa
Signing time:             Tue 24 Jun 2025 12:33:32 +0000
ROA not before:           Tue 24 Jun 2025 12:33:32 +0000
ROA not after:            Mon 22 Sep 2025 12:33:32 +0000
asID:                     397211
IP address blocks:        192.12.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4c:2d:54:55:42:13:58:fa:14:69:da:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 24 12:33:32 2025 GMT
            Not After : Sep 22 12:33:32 2025 GMT
        Subject: CN=9a77ab7c-d140-4ac0-84ac-695df3b05cfa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:70:3d:05:6c:4f:50:a9:f1:28:b1:9d:81:b2:
                    fd:2d:cb:b0:4e:2d:46:10:d0:4d:9b:8e:28:d3:8f:
                    58:ba:4f:2b:3d:30:7f:89:86:b3:51:7c:2a:2d:30:
                    2e:01:0d:f5:17:1b:c6:1f:b6:74:9e:53:89:6d:ee:
                    6d:3c:e5:2e:ba:7c:e0:4f:ea:ca:41:b7:9c:b9:97:
                    c9:51:72:f5:bf:f2:c3:2d:43:1f:ee:5e:fb:a0:08:
                    b7:d4:ea:9d:82:85:77:11:77:44:5c:4c:69:df:51:
                    cf:eb:0c:3f:4a:f6:5e:09:37:e7:ab:ba:f5:73:33:
                    5d:d4:ab:1c:13:34:48:81:98:e6:39:e0:9d:a5:02:
                    62:5c:62:4e:27:3a:d2:90:54:3d:77:0b:6e:51:85:
                    0d:74:12:0b:21:4c:de:4f:d0:0e:f9:a3:0b:87:99:
                    26:d8:24:53:7e:42:08:54:33:27:e8:d4:45:b9:d6:
                    92:da:ff:a3:7f:27:7e:82:6d:34:a1:a8:bb:6c:88:
                    cd:b9:7e:09:07:37:0f:6f:36:ff:89:fb:3c:94:f0:
                    25:39:1a:c0:dd:5b:32:40:5b:cd:ff:49:4f:7d:76:
                    72:7f:f7:af:2e:e9:20:ef:68:db:a8:38:30:98:2b:
                    11:0a:ca:8a:10:a8:63:19:4f:7a:82:8b:a7:54:52:
                    50:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:A3:92:8C:3A:5A:E6:13:CA:C8:0B:11:A8:F6:E8:0D:A1:14:3E:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ced4276c-5045-30cd-a5d5-9455a40e5a51.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.12.94.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:2c:ef:58:5e:2c:ad:39:e4:72:22:16:59:24:d4:4d:70:c7:
         e9:40:4c:65:53:28:18:b1:19:99:db:b3:7b:d5:6a:df:a8:51:
         da:f8:33:53:29:12:ad:a8:f0:7a:fc:27:2c:11:f6:82:53:5d:
         03:ab:66:7d:87:84:81:25:16:2c:e6:95:7f:6e:f5:e5:e5:cd:
         8a:c0:65:04:6f:5e:f2:a8:5d:c2:7e:05:a4:f1:2c:dd:9a:19:
         ea:4a:13:a8:a4:46:e4:42:ad:86:45:ad:4b:ef:50:38:ae:44:
         2e:e3:b8:b0:db:4a:cd:24:0d:56:36:2c:67:91:09:9c:09:cd:
         d2:d9:b2:2a:b0:a8:80:cf:97:ce:49:dc:66:39:53:97:6b:b2:
         36:37:18:e0:0a:36:73:4d:9d:a4:51:0c:60:66:8a:5e:c8:cb:
         bd:8e:fd:50:54:e8:95:68:89:db:c9:fd:9c:8a:96:a1:39:4a:
         7e:c6:8f:83:a4:03:4b:38:17:b4:b9:4e:b4:08:44:23:fb:44:
         3c:f6:55:52:4a:bd:1a:56:ad:e9:6d:39:bd:0d:47:7c:15:51:
         a8:a3:9e:b0:0a:2f:b2:3c:83:e6:ec:cb:3e:ea:d5:1d:e4:be:
         1e:fa:72:1d:6f:a9:cd:c2:a0:e6:9e:5f:f4:f7:72:03:fa:a1:
         f9:aa:57:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 16:48:14 2025 by rpki-client