Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/df325760-d930-3585-a8f8-fbbb1dd4a732.roa
File:                     df325760-d930-3585-a8f8-fbbb1dd4a732.roa (raw, json)
Hash identifier:          zhsocHNwMfO8hgNSO+6yDjJZyB+nQ3QO1by/YFLsB8A=
Subject key identifier:   E3:FF:4E:59:45:E2:F1:43:0C:F7:FF:F8:39:89:27:A2:D8:7D:96:E2
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A4C2D5057EA1D7EC81EE44B40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/df325760-d930-3585-a8f8-fbbb1dd4a732.roa
Signing time:             Tue 24 Jun 2025 12:33:30 +0000
ROA not before:           Tue 24 Jun 2025 12:33:30 +0000
ROA not after:            Mon 22 Sep 2025 12:33:30 +0000
asID:                     10515
IP address blocks:        192.12.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4c:2d:50:57:ea:1d:7e:c8:1e:e4:4b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 24 12:33:30 2025 GMT
            Not After : Sep 22 12:33:30 2025 GMT
        Subject: CN=af87c15d-0e50-4e7c-a366-0a931a08c69f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:5a:d2:a2:be:2e:60:cf:09:4e:2f:c2:25:41:
                    86:d7:45:bb:78:de:6d:ef:09:4e:54:8e:be:b2:aa:
                    79:7e:62:21:03:26:6e:38:7b:34:73:15:9c:40:73:
                    52:4a:b5:9a:b1:ba:2c:9f:48:b4:6d:3a:e7:02:fa:
                    6d:b1:43:61:d5:3e:30:ef:21:0c:93:e5:ec:be:0e:
                    8e:97:33:f9:e8:71:54:ef:5a:34:82:70:07:49:06:
                    56:cb:80:04:2d:4b:54:a4:fd:0e:08:e0:55:42:fc:
                    9f:57:74:8a:3e:5b:cc:39:ac:30:38:24:c4:d0:54:
                    6f:ba:cb:23:cb:03:b2:fa:74:d3:1f:ba:93:ee:da:
                    df:d9:ca:d3:f5:5b:b5:9f:4b:a7:ad:a8:d4:64:f9:
                    25:2a:a6:37:93:77:e4:a5:73:1d:2b:da:cc:6f:94:
                    71:1d:b8:b1:08:ac:6a:3e:ed:14:b0:60:7d:72:ad:
                    c7:6a:f8:12:b4:46:0a:ab:11:c2:f3:ec:fc:09:70:
                    dc:48:a5:f1:ea:ba:5a:41:5c:b3:17:74:65:d8:cd:
                    9f:43:93:6e:03:c0:08:6a:05:ef:f7:97:8e:8e:76:
                    25:89:04:48:e8:55:69:19:16:fc:46:10:2e:ee:37:
                    43:b1:a2:4a:04:57:3c:7a:03:bf:56:41:61:0f:60:
                    4d:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:FF:4E:59:45:E2:F1:43:0C:F7:FF:F8:39:89:27:A2:D8:7D:96:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/df325760-d930-3585-a8f8-fbbb1dd4a732.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.12.94.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:83:f1:40:2b:6a:e9:15:5b:c4:b3:ef:9e:fc:77:51:d1:e0:
         65:ca:43:8e:6c:b4:2c:c1:9b:38:ef:e5:00:cd:63:2d:df:b6:
         e3:00:ca:00:ed:5f:3b:8e:6d:0b:50:5b:df:35:b8:cc:c5:76:
         3f:11:10:d0:e5:9c:65:73:79:9b:75:a8:e1:ae:3c:e5:7b:7c:
         88:af:fa:46:8a:39:4e:40:36:b3:68:0c:d4:01:bd:e3:15:54:
         d5:6e:26:a4:f9:63:79:62:23:26:a7:cd:02:6e:4f:65:82:8c:
         70:16:78:c6:43:5c:59:f4:b0:23:38:70:f2:11:da:d3:6f:04:
         73:b0:fe:ce:ff:b5:45:e4:84:0c:cd:2c:ee:f2:d9:93:6e:de:
         44:f7:8b:4c:d3:ed:49:ac:bf:eb:1d:27:89:e8:48:3e:95:f7:
         a4:77:6f:dd:df:4a:29:73:98:2e:22:2d:49:63:1f:01:5e:18:
         9e:0f:77:1f:a1:03:de:97:e6:67:c3:a1:b6:56:21:7e:7a:c8:
         ba:f8:31:64:22:df:f1:73:2d:4c:f1:12:b4:bc:2a:d1:0e:0e:
         2c:8c:16:e2:5c:69:b4:44:6f:69:be:70:54:64:6f:79:2f:72:
         fe:55:1d:ac:59:32:d2:11:0c:31:0c:03:00:7b:21:3a:d9:d5:
         ed:b4:95:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 11:10:14 2025 by rpki-client