Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9f33621e-73e9-3282-a9d1-3c035184cde7.roa
File:                     9f33621e-73e9-3282-a9d1-3c035184cde7.roa (raw, json)
Hash identifier:          GncZW07unQFMtvUG1Oli1W8m0NBW4dM5vDr5U6+6sCU=
Subject key identifier:   B5:3A:BC:E7:66:0F:D9:3A:34:D9:F4:D3:31:37:BA:8C:4E:23:FD:46
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A629098BE401207A86E427B80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9f33621e-73e9-3282-a9d1-3c035184cde7.roa
Signing time:             Wed 02 Jul 2025 13:01:04 +0000
ROA not before:           Wed 02 Jul 2025 13:01:04 +0000
ROA not after:            Tue 30 Sep 2025 13:01:04 +0000
asID:                     396589
IP address blocks:        192.12.94.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:62:90:98:be:40:12:07:a8:6e:42:7b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  2 13:01:04 2025 GMT
            Not After : Sep 30 13:01:04 2025 GMT
        Subject: CN=c9fb93e0-13d0-45c9-81cb-f4876db025e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:27:25:75:d5:2c:54:23:09:39:84:31:9c:ae:
                    de:4d:12:d8:22:7f:ff:da:8f:16:b2:04:62:08:87:
                    f6:c7:a8:83:04:b8:b6:c8:18:09:c7:b1:7a:fd:41:
                    c3:7c:fc:b4:2f:cd:25:92:f4:47:d5:7a:a3:c4:fb:
                    17:d9:79:94:ef:c6:e2:70:31:59:eb:2e:3d:5b:6d:
                    02:47:b9:77:dc:10:9d:6e:21:3a:ad:ce:a1:9f:d5:
                    47:e8:84:ea:80:6c:71:e0:14:a4:33:f5:28:64:ce:
                    42:22:68:2a:8d:ef:2f:d4:4b:8a:c5:20:e8:c4:dd:
                    1b:90:28:ef:03:c0:e3:f0:2c:68:db:de:15:63:ac:
                    e6:df:6d:46:41:4c:b1:32:ce:2a:c2:73:0c:9b:f6:
                    ae:50:c4:50:2c:9e:3a:69:16:1a:24:71:a5:98:5b:
                    da:75:51:23:70:7a:d4:35:e6:b1:19:86:40:e7:e9:
                    6b:a1:8c:35:6b:a0:59:67:62:d3:a6:85:46:04:05:
                    22:cd:90:81:5d:04:87:2f:f0:c0:cf:94:6a:04:db:
                    f1:bc:74:8c:b4:a5:c3:68:cd:7a:d1:bd:ae:ac:41:
                    61:c7:59:cf:7f:2b:39:e5:a4:a6:6e:12:82:76:84:
                    aa:98:b4:e5:86:c8:a5:43:ee:10:63:53:b4:47:cc:
                    9a:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:3A:BC:E7:66:0F:D9:3A:34:D9:F4:D3:31:37:BA:8C:4E:23:FD:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9f33621e-73e9-3282-a9d1-3c035184cde7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.12.94.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:ff:88:29:a6:30:df:98:17:27:0f:e9:da:df:20:a7:e2:b3:
         c9:fe:1f:98:0d:3d:77:90:0e:6b:b5:3f:4e:b5:6a:ff:56:ed:
         d0:b1:6f:68:a6:48:8b:a8:e7:ff:05:e6:12:f7:dc:90:3b:db:
         8b:c0:c2:46:bf:1d:0f:ed:e9:9b:88:ac:23:3b:6e:c2:4b:95:
         b5:77:de:5f:9e:62:15:97:fc:04:e0:e2:4e:bf:76:ee:4a:f8:
         78:eb:f6:dc:31:20:b7:06:aa:10:6d:b7:92:0b:3b:10:8c:f0:
         a6:f5:44:33:7b:ec:90:74:d0:82:72:07:34:f9:7d:57:af:d5:
         f7:55:72:2c:d8:55:1b:59:9a:ec:bd:4f:3c:49:2a:c3:6b:4c:
         e5:4d:79:8c:3f:ff:4c:1b:27:e8:16:0f:51:6a:05:ae:b4:69:
         b1:78:ba:78:ac:b1:f6:a0:6b:80:a8:6f:46:e8:00:4e:04:81:
         67:f0:bc:22:24:7a:d3:14:46:b0:02:46:7d:06:0c:40:2b:b6:
         af:7c:71:75:ca:0b:d7:7f:e1:7e:d4:b9:65:8f:2d:a0:45:3f:
         33:50:94:9d:c4:ad:3b:2b:88:22:36:b3:51:77:b3:af:81:d4:
         4c:55:4b:12:31:c3:b6:0b:2b:39:1a:d4:27:90:c9:3d:fb:48:
         ed:5a:32:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 17:14:35 2025 by rpki-client