Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/db6dca08-d239-35b4-8648-08ef97435011.roa
File:                     db6dca08-d239-35b4-8648-08ef97435011.roa (raw, json)
Hash identifier:          4k4/N+6QseXdOZhFPkhuBflqnFnTlR4/GqATbARuQ4c=
Subject key identifier:   7E:F1:1B:48:61:20:B0:9C:45:93:B9:98:E9:6D:EB:E0:8F:24:4B:67
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B2B919F8693946813418D45E0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/db6dca08-d239-35b4-8648-08ef97435011.roa
Signing time:             Fri 12 Sep 2025 13:00:42 +0000
ROA not before:           Fri 12 Sep 2025 13:00:42 +0000
ROA not after:            Thu 11 Dec 2025 14:00:42 +0000
asID:                     20172
IP address blocks:        192.12.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2b:91:9f:86:93:94:68:13:41:8d:45:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 12 13:00:42 2025 GMT
            Not After : Dec 11 14:00:42 2025 GMT
        Subject: CN=46d12e31-e6c4-4a1d-beb2-287a8fd0e306
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:58:d0:53:42:77:da:d3:f9:4c:8d:75:44:ca:
                    73:b0:02:77:58:a0:8f:35:ea:a8:00:55:e1:32:f3:
                    c0:c0:da:e1:22:b0:e3:a6:3d:69:1e:25:8b:18:19:
                    7a:f0:b7:80:aa:c7:2d:91:04:64:0e:19:fa:88:a1:
                    56:fd:79:7d:c8:7a:ba:41:ca:73:5f:09:77:34:e1:
                    31:be:66:4c:1d:24:90:e1:4d:1a:5f:50:a8:c9:b3:
                    ff:a3:e2:d2:c1:3c:7a:f3:3b:8d:f6:53:e6:47:49:
                    8a:d6:03:86:54:5c:34:ed:cc:1c:81:b8:3f:aa:25:
                    4e:d4:5d:ab:e7:79:1e:84:8b:f5:0f:9d:12:f3:78:
                    e3:ac:a4:76:7b:09:0f:de:29:57:4c:47:46:b2:cd:
                    f3:14:be:0f:f5:36:8c:ea:cc:6f:b5:a2:05:2e:a8:
                    5d:87:26:80:12:16:4e:fd:47:ad:79:0d:a9:d3:34:
                    5a:bc:01:d6:9d:ef:b7:5e:e9:dc:23:23:af:4e:9c:
                    40:e4:4a:2c:d4:d3:2b:7c:26:4a:88:5c:e6:a2:27:
                    2e:d9:24:5d:55:16:4c:20:3e:7f:7b:43:b9:56:cf:
                    85:71:db:9a:db:78:61:7b:a0:2e:10:fb:27:57:20:
                    77:71:fe:d6:6d:4d:8d:2f:f2:d6:ff:a3:80:fa:51:
                    be:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:F1:1B:48:61:20:B0:9C:45:93:B9:98:E9:6D:EB:E0:8F:24:4B:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/db6dca08-d239-35b4-8648-08ef97435011.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.12.94.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:18:a3:8e:1b:d3:18:3c:2b:fc:e3:d6:40:ef:f2:3d:39:c4:
         5a:0a:68:ba:07:d9:a7:c8:64:99:68:cf:8e:a0:5f:88:9f:0b:
         ca:84:72:69:90:b2:00:3d:d4:7b:46:25:51:6b:a0:44:4d:ef:
         78:28:b4:52:fa:be:6a:a5:07:34:ac:cf:84:8c:79:2d:1f:75:
         81:46:a3:e2:36:12:cd:fb:2e:8d:81:af:55:aa:9d:8e:4b:7f:
         c2:6b:01:b6:60:81:eb:1c:51:5a:d1:6a:d6:6d:6f:bf:b4:46:
         d5:a2:43:d0:e0:18:3c:25:12:d1:05:79:8b:3c:1c:aa:f0:16:
         aa:23:9d:7f:1c:89:c1:7d:49:a3:ba:18:ec:21:d5:83:ba:9a:
         47:9f:16:8c:c5:d1:b3:c0:9a:b5:44:90:8a:a7:52:7a:05:0e:
         4b:67:67:3f:9a:bd:2c:9d:3d:f5:ef:7f:65:14:d0:77:5e:e7:
         30:f6:7d:7a:29:67:b9:f5:d5:18:a5:36:86:58:b0:af:f3:b6:
         0a:6b:d3:4a:24:8e:95:80:1e:53:25:09:1c:2d:3a:f5:7d:aa:
         11:98:3f:c1:8e:53:c1:93:9a:bd:de:17:c0:48:f9:ad:f3:e9:
         5a:9a:b5:a1:09:3a:0e:1d:ba:10:c4:f3:d3:fd:c1:dd:53:e2:
         06:f0:ee:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:07:42 2025 by rpki-client