Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bff602ba-7ed2-398d-96b9-40ab63dd0726.roa
File:                     bff602ba-7ed2-398d-96b9-40ab63dd0726.roa (raw, json)
Hash identifier:          uoa4OygUgqLZHTasDEADmc73WdpGxneyNrtjPqjLdjM=
Subject key identifier:   11:AD:F1:EF:20:2F:70:66:1B:E9:F1:F2:03:26:2A:B7:68:26:86:67
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A62909DE643D34BB4294CDB00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bff602ba-7ed2-398d-96b9-40ab63dd0726.roa
Signing time:             Wed 02 Jul 2025 13:01:04 +0000
ROA not before:           Wed 02 Jul 2025 13:01:04 +0000
ROA not after:            Tue 30 Sep 2025 13:01:04 +0000
asID:                     396591
IP address blocks:        192.12.94.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:62:90:9d:e6:43:d3:4b:b4:29:4c:db:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  2 13:01:04 2025 GMT
            Not After : Sep 30 13:01:04 2025 GMT
        Subject: CN=1b0d39b5-dd29-4545-8bf4-e2be0e43a936
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:79:58:4e:f3:1f:9c:7e:b5:05:c2:74:c0:d5:
                    65:fd:06:81:06:9c:cc:77:36:de:49:16:14:8d:78:
                    77:16:c6:ff:6c:de:73:c1:ad:62:fa:5f:50:d6:5c:
                    df:80:ad:c3:f0:3c:dd:40:03:7d:69:41:e3:f1:ee:
                    75:43:4f:2a:59:c5:61:fc:8a:a9:9c:bc:80:d7:b0:
                    23:e8:02:15:20:f7:26:be:37:1b:29:0f:1b:77:ec:
                    d3:d7:57:41:59:d5:76:fb:53:25:ad:5e:43:61:eb:
                    13:fc:76:20:07:db:17:6e:b1:d4:7d:8c:3f:89:dc:
                    0f:64:2c:85:ec:d8:68:5c:a2:d3:96:e6:b9:47:14:
                    42:b5:6f:4b:4b:cf:d2:69:85:9e:32:96:41:55:84:
                    b2:d7:88:73:23:ab:5b:48:71:e4:18:47:24:5d:19:
                    d2:eb:ec:8d:1d:33:30:86:23:fe:41:6c:c4:5c:ad:
                    3e:fb:dd:e2:07:5a:27:8a:62:e2:0d:2d:96:e9:63:
                    cb:a6:cd:7c:d2:41:24:28:62:b9:5f:9b:5d:37:8f:
                    cd:28:65:f7:6b:cb:1a:86:2d:6f:8f:c4:3b:87:78:
                    21:f8:34:ef:c8:3b:bb:ac:61:76:64:32:b9:33:51:
                    34:0b:0f:6e:1c:2f:0c:60:35:01:5c:9c:87:8f:38:
                    4f:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:AD:F1:EF:20:2F:70:66:1B:E9:F1:F2:03:26:2A:B7:68:26:86:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bff602ba-7ed2-398d-96b9-40ab63dd0726.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.12.94.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:ca:54:47:ad:c1:81:dd:e1:25:0d:00:39:28:b2:72:0a:11:
         c2:48:78:cc:1c:d0:50:93:b8:95:37:e0:1f:3d:73:14:7f:6f:
         33:97:fb:9a:45:3b:2e:57:b8:67:cc:a7:d5:92:16:b2:26:91:
         3c:3a:7c:c3:00:ff:77:93:98:a0:08:c3:7d:bf:f2:b2:a1:71:
         15:4d:30:21:bb:5f:8f:72:aa:ba:89:ea:d7:dd:9c:b1:2b:6f:
         45:6e:30:90:89:45:67:24:92:59:61:b6:3d:86:aa:ec:30:f8:
         49:21:50:9f:e3:0b:12:20:cc:ea:52:f9:f0:a5:f3:6b:61:ef:
         0a:90:73:8e:0b:55:3c:57:5e:67:07:66:43:e7:82:8d:93:47:
         a8:73:00:da:f9:7f:52:9e:34:82:da:d9:e6:4c:f6:33:36:9a:
         37:83:70:d8:33:f0:df:be:10:2d:d2:f4:45:da:f7:ab:2b:5f:
         73:7c:64:6d:bf:c6:84:c0:8c:1e:5a:3c:d1:4a:24:81:fe:9e:
         4d:e4:dd:38:f6:60:49:c4:8d:1c:58:0c:d3:1c:a7:1c:e8:33:
         10:9a:20:78:31:9d:d6:9c:e4:b9:28:9d:80:e4:9d:ca:90:f2:
         fd:50:82:c2:6f:b1:5b:70:ac:b0:8a:3b:99:3f:74:a8:89:70:
         da:76:8f:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 17:20:40 2025 by rpki-client