Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ffe3a47b-bf9f-3e25-97a5-ae7519a6254b.roa
File:                     ffe3a47b-bf9f-3e25-97a5-ae7519a6254b.roa (raw, json)
Hash identifier:          mvi3SrLeUrHvvoA8BiEYH9VpTV2h3xowtQSfY3b/1mU=
Subject key identifier:   C1:9D:30:09:00:BF:AA:F9:91:D4:B3:AE:2D:64:BE:FC:BD:FD:59:E5
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B2B91A33C589D0601FAAD6880
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ffe3a47b-bf9f-3e25-97a5-ae7519a6254b.roa
Signing time:             Fri 12 Sep 2025 13:00:42 +0000
ROA not before:           Fri 12 Sep 2025 13:00:42 +0000
ROA not after:            Thu 11 Dec 2025 14:00:42 +0000
asID:                     396565
IP address blocks:        192.12.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2b:91:a3:3c:58:9d:06:01:fa:ad:68:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 12 13:00:42 2025 GMT
            Not After : Dec 11 14:00:42 2025 GMT
        Subject: CN=6e82ad19-fe45-46de-bd24-4cd6d51325e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:54:b4:14:db:0c:ca:d5:90:9a:85:7b:96:c3:
                    ee:f7:d6:56:6e:9c:8d:1e:85:ae:7e:9e:5f:71:f9:
                    92:d0:ff:98:e6:59:3f:7a:67:cd:0a:63:4f:e7:17:
                    b0:c4:b2:66:36:b9:94:74:73:b7:53:78:3c:ba:d6:
                    f7:72:a4:85:89:ab:78:b9:52:7c:3a:d0:fd:87:e5:
                    45:6d:f1:48:41:36:7c:37:62:55:53:28:31:a2:30:
                    90:7b:d6:76:2c:c2:30:f3:a1:e3:30:04:13:1b:1d:
                    ab:72:c4:74:8f:d1:8f:ad:59:ad:e7:03:62:fc:99:
                    7b:9e:30:34:23:bc:64:0e:03:25:a2:61:95:f8:4b:
                    b3:27:3d:e4:21:5c:38:87:a8:89:3e:19:bb:99:36:
                    36:bf:1e:63:a2:c8:5d:9e:61:e1:7a:4d:98:13:09:
                    29:9c:84:2c:53:48:3c:b8:68:63:91:84:05:75:5b:
                    8a:28:dc:20:a3:71:35:4c:47:4f:94:3a:bc:7a:72:
                    a7:b7:e1:91:fa:32:32:cf:21:2b:1c:21:41:8f:98:
                    05:73:ef:6e:7f:fb:b4:d8:68:95:98:c5:d3:3c:82:
                    c8:48:60:e2:d4:b1:32:4d:70:32:5e:27:ac:c4:d0:
                    20:3f:22:81:cd:3d:d9:92:3b:ad:1b:f2:ee:68:a4:
                    bd:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:9D:30:09:00:BF:AA:F9:91:D4:B3:AE:2D:64:BE:FC:BD:FD:59:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ffe3a47b-bf9f-3e25-97a5-ae7519a6254b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.12.94.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:80:4e:5c:4f:2b:77:57:98:bc:b7:97:4b:6f:7e:bc:f1:24:
         08:8c:9b:12:e3:3b:0a:46:bc:33:6d:dd:da:05:89:e7:e5:fc:
         b7:e0:28:c1:18:9a:43:5b:0f:c5:0e:56:cf:0f:6f:47:80:57:
         12:71:f8:08:cd:a7:24:07:f0:ac:e0:2d:8b:64:ad:bd:58:7d:
         36:fb:57:7b:f6:a9:d1:ba:b1:2a:93:43:55:a3:2c:dc:3b:29:
         ac:be:ae:60:49:13:ff:b9:40:b8:42:ed:c9:b6:76:68:34:97:
         76:48:c8:b0:f1:5d:da:3b:c9:44:c9:77:2b:d6:4e:ed:d5:8a:
         a1:cf:c1:bc:4f:55:a0:38:01:15:8b:10:51:7e:4e:a7:c3:83:
         a0:55:e0:63:c3:2f:fa:2f:ab:50:f7:a5:bf:fa:a2:26:b9:73:
         68:66:e8:33:0b:13:76:b9:4f:11:01:03:d2:75:09:b0:5d:7a:
         6f:d6:0c:a9:bf:27:13:80:04:03:c2:8d:8b:e0:15:2b:83:67:
         a0:20:6b:0c:45:ea:7b:82:47:90:d1:15:59:7d:0d:34:eb:bc:
         0c:92:5b:c0:e4:70:02:70:56:13:9d:3b:70:b9:a7:b8:a0:00:
         05:a4:7b:6e:ea:6d:60:f4:b5:74:ce:4b:df:38:d0:db:ec:ae:
         db:f9:ba:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:22:54 2025 by rpki-client