Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f1e94df4-4dff-369b-92e9-2c22cf360104.roa
File:                     f1e94df4-4dff-369b-92e9-2c22cf360104.roa (raw, json)
Hash identifier:          s+6V0g8wlOWqZfoKLQ1721XFuD5uVyqpbjg+joDD0EE=
Subject key identifier:   89:F1:5E:45:EB:22:89:E2:E7:DA:72:CA:A5:97:F9:F7:12:92:97:29
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B2B91A0152FD9C2F183E46280
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f1e94df4-4dff-369b-92e9-2c22cf360104.roa
Signing time:             Fri 12 Sep 2025 13:00:42 +0000
ROA not before:           Fri 12 Sep 2025 13:00:42 +0000
ROA not after:            Thu 11 Dec 2025 14:00:42 +0000
asID:                     396560
IP address blocks:        192.12.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2b:91:a0:15:2f:d9:c2:f1:83:e4:62:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 12 13:00:42 2025 GMT
            Not After : Dec 11 14:00:42 2025 GMT
        Subject: CN=2a54b7e3-156c-47a6-97b9-59f800b3d9bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:e7:b7:4e:8a:a0:bf:63:cd:40:dd:15:a2:71:
                    d3:4a:3f:3e:2a:d0:99:77:46:0e:92:6d:76:0b:cf:
                    bf:e2:de:cc:d8:f4:2e:8c:d7:3c:18:5c:9f:1e:10:
                    ff:4b:e8:4b:37:0e:9d:cc:c9:dc:ad:43:ae:94:33:
                    b0:70:76:84:1a:c4:96:8f:45:c9:5a:9a:18:7f:9d:
                    f2:8d:b7:7e:ef:d1:e7:20:53:5b:ec:55:bd:df:3c:
                    d7:f1:7b:5b:dd:a3:2c:34:f8:54:b7:37:67:c2:0e:
                    ff:30:38:9a:6c:d3:f1:0d:31:99:89:0e:8b:71:05:
                    22:2e:c9:42:82:d4:ef:bb:cf:3c:03:da:42:24:53:
                    28:5c:6e:0d:f6:70:7d:e1:d8:73:5e:94:5d:0b:0a:
                    1a:57:81:da:ad:b9:64:28:3f:bc:15:3d:54:a5:df:
                    c6:52:89:89:6e:27:8b:53:19:39:51:97:d5:03:1f:
                    3a:ae:59:c3:22:87:29:ef:e1:cb:43:c1:1a:45:d5:
                    30:0a:6d:3a:3f:8d:13:48:eb:39:40:b0:8c:f5:28:
                    22:42:06:3c:3f:ac:7e:8a:df:4c:9e:e3:79:28:75:
                    95:5d:de:f6:1a:75:87:49:72:0e:8e:e9:78:62:45:
                    fc:47:75:0c:9b:c9:41:69:41:6c:36:12:19:89:ff:
                    21:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:F1:5E:45:EB:22:89:E2:E7:DA:72:CA:A5:97:F9:F7:12:92:97:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f1e94df4-4dff-369b-92e9-2c22cf360104.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.12.94.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:6b:ab:bb:16:06:fb:7e:0d:57:3e:88:4d:8e:63:43:c4:4c:
         8c:49:57:a8:64:84:a6:04:d7:db:00:2f:2c:54:df:d6:71:d4:
         95:3f:76:86:55:33:46:16:36:51:78:85:4c:23:4d:14:e6:f9:
         d2:3b:27:31:cc:45:7b:e8:ff:50:62:13:b0:6c:ba:09:e6:c4:
         6e:2b:75:98:c9:25:31:ff:ab:e3:2d:23:21:c1:d6:b6:0c:d7:
         94:b7:a7:54:e4:cb:38:ca:22:51:78:d7:5f:5f:9d:8d:9d:49:
         79:b2:76:1a:f0:f0:ea:70:48:46:d8:e6:76:3c:1c:b8:9c:ac:
         f5:9b:9f:f6:0a:9d:8b:51:5d:cf:5e:00:29:59:4a:61:5d:9b:
         7c:bb:d2:59:4a:f2:68:68:20:1a:c7:ac:77:8c:9c:d5:a5:9c:
         90:d4:99:f0:e0:3a:f7:a7:2d:c9:45:5c:2c:7b:ee:8a:77:3b:
         8a:4f:8e:e7:12:da:fc:5b:95:8a:f1:0f:3e:97:2b:de:e4:b0:
         23:00:a3:44:72:16:b5:3c:38:3d:0c:6c:4b:1b:99:40:59:38:
         ec:6e:95:2f:9a:54:c8:94:79:18:cb:df:6a:b9:6a:99:d7:c6:
         b5:19:c5:01:6c:0b:8d:54:c1:14:25:6a:ba:8c:64:9f:d9:64:
         5a:c9:a1:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:40:27 2025 by rpki-client