Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f4f1b991-865a-3b8a-a404-76d86b0e6dcc.roa
File:                     f4f1b991-865a-3b8a-a404-76d86b0e6dcc.roa (raw, json)
Hash identifier:          3+TtoPX66ZbYbqaWQCPLkWCSvW3JRZqYVSo5901oguk=
Subject key identifier:   58:F0:29:71:A0:8B:7A:2A:DA:36:3B:5D:18:64:7D:F0:B3:F6:E9:6B
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A4C2D524287CA7613C85F2E00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f4f1b991-865a-3b8a-a404-76d86b0e6dcc.roa
Signing time:             Tue 24 Jun 2025 12:33:31 +0000
ROA not before:           Tue 24 Jun 2025 12:33:31 +0000
ROA not after:            Mon 22 Sep 2025 12:33:31 +0000
asID:                     397209
IP address blocks:        192.12.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4c:2d:52:42:87:ca:76:13:c8:5f:2e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 24 12:33:31 2025 GMT
            Not After : Sep 22 12:33:31 2025 GMT
        Subject: CN=756bd0f1-b24b-4aef-9ab8-415e52deac1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:41:b2:c5:26:4e:72:1c:b8:8d:a2:dd:58:8c:
                    ca:99:6e:2e:21:c5:56:dc:5c:7c:9c:45:a1:20:16:
                    77:7c:b2:24:a4:d2:4d:03:ea:72:48:ac:da:f3:48:
                    e5:18:74:33:de:c4:6b:eb:65:cb:3f:5e:51:ad:96:
                    82:9e:d2:3b:16:72:bc:2c:95:ca:29:0c:de:de:9f:
                    a5:27:a5:c0:8b:dc:93:81:e2:b7:a8:d8:c6:21:c4:
                    16:92:05:ef:47:e9:2c:c6:fc:3b:ff:8a:28:17:f1:
                    71:9f:07:e0:b1:d8:91:51:82:da:47:01:2c:f9:4f:
                    71:87:5e:cf:e4:87:20:ff:79:0c:f8:e7:88:3e:0d:
                    8f:ef:f3:b3:6c:a9:f7:37:c2:0d:03:38:91:0d:24:
                    86:44:99:76:64:44:6c:49:f3:b7:f7:cc:99:f0:e7:
                    64:2c:d8:36:17:64:63:63:c1:5b:c5:1d:32:70:91:
                    df:e0:c3:43:af:1b:ca:6c:01:a9:8c:df:42:02:e7:
                    75:4a:9e:24:45:f2:1e:f6:ca:01:5f:40:f4:81:87:
                    39:a8:c7:9a:10:2f:a0:76:f2:69:e2:23:b1:2d:26:
                    94:8e:93:6d:9f:4c:b5:20:0e:c0:e4:37:27:ff:22:
                    9d:6d:eb:b1:9b:0b:d7:32:22:31:ab:69:9a:68:fc:
                    57:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:F0:29:71:A0:8B:7A:2A:DA:36:3B:5D:18:64:7D:F0:B3:F6:E9:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f4f1b991-865a-3b8a-a404-76d86b0e6dcc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.12.94.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:46:c6:e4:25:8d:b6:5b:3b:d8:ca:0b:2b:6e:dd:66:b4:77:
         72:f7:96:9f:c6:c0:c7:d0:33:17:54:0e:db:7e:b8:45:90:01:
         c1:d9:79:32:24:6c:e7:e5:74:b0:b4:87:95:5f:33:ff:da:b0:
         ef:9e:b0:06:4c:25:16:e4:c7:3e:c2:94:7c:4a:1a:64:58:a7:
         36:4a:f4:79:39:4a:df:b2:8c:b5:8c:f2:8e:5b:6a:c7:39:ba:
         5c:09:fc:36:69:02:b3:a9:ef:2a:43:2f:cc:e0:20:3e:c2:09:
         bf:1d:49:9d:fb:9d:26:2c:fb:33:b4:ab:15:24:de:38:7e:56:
         3c:1d:0d:6e:63:d1:ff:3b:2b:ee:db:7c:f4:5b:76:52:35:de:
         b2:ca:7a:4c:51:13:17:47:81:4d:b9:e4:70:0c:8b:17:44:d5:
         a0:99:68:c8:a0:ec:2e:37:f6:c0:41:8f:70:5c:0a:a7:f6:8f:
         3c:f2:65:fc:ac:21:a9:1c:1a:aa:56:66:c8:fe:18:7a:ca:12:
         25:69:8b:49:d2:c9:33:1e:d6:c4:88:01:17:c0:c1:66:cf:d6:
         71:c2:ee:fb:c1:3f:0f:65:50:c6:0e:c7:5f:69:47:e5:fe:01:
         77:52:09:5c:a5:49:49:3b:1a:db:85:63:ce:aa:e2:f6:a2:5b:
         26:9b:4d:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 16:53:13 2025 by rpki-client