Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f6410c5d-8c14-3dd4-aee3-923e4a805231.roa
File:                     f6410c5d-8c14-3dd4-aee3-923e4a805231.roa (raw, json)
Hash identifier:          NaB52AbrGOJ+AgDcuKpvnpvB3fA1iHgjZyoRgOGdwZU=
Subject key identifier:   6E:ED:34:FA:01:6A:AE:E4:00:12:0A:5B:2D:4E:3F:AC:F3:51:C1:3A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A629083CDEB45316C642B6C40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f6410c5d-8c14-3dd4-aee3-923e4a805231.roa
Signing time:             Wed 02 Jul 2025 13:01:04 +0000
ROA not before:           Wed 02 Jul 2025 13:01:04 +0000
ROA not after:            Tue 30 Sep 2025 13:01:04 +0000
asID:                     396597
IP address blocks:        192.12.94.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:62:90:83:cd:eb:45:31:6c:64:2b:6c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  2 13:01:04 2025 GMT
            Not After : Sep 30 13:01:04 2025 GMT
        Subject: CN=f844271e-f6d7-40a2-bc4a-bef1a5db029a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:db:ae:31:43:a0:cd:9a:8b:16:87:f9:cd:06:
                    11:11:36:34:53:5c:be:9e:d4:cc:67:b2:f2:38:08:
                    fd:2d:07:d4:51:3c:47:63:d1:11:69:63:bf:82:14:
                    30:ab:b2:46:60:ba:c8:a6:b2:1e:e5:bb:d3:87:46:
                    0b:95:0e:8e:c5:ca:c9:f8:6e:a7:7c:f8:2d:4c:c7:
                    92:d8:0e:a5:38:3f:d1:68:33:25:ca:d0:13:0d:36:
                    41:c8:87:ef:ca:37:71:17:b3:ce:e8:d1:ab:f4:9b:
                    a4:fd:36:2c:36:d7:52:6e:90:99:ea:5d:52:50:3a:
                    ea:f9:83:50:b9:10:9e:8c:7c:2e:39:d4:ae:cd:c6:
                    04:e4:26:2e:a8:7f:f3:6e:9b:16:71:14:1e:ea:0d:
                    7f:10:bd:46:11:cd:f8:17:86:f9:d8:bf:c9:78:95:
                    eb:48:e0:a6:02:3b:b6:38:a7:43:87:18:96:0b:5f:
                    a4:42:dd:de:5f:0d:b2:d2:6b:8b:02:75:d9:a4:e7:
                    15:5c:46:a7:56:33:44:32:77:4d:eb:c6:d3:07:a2:
                    72:69:7c:e1:a2:8b:e5:02:c3:80:ba:dc:4d:7b:b5:
                    8f:3e:1f:0c:26:bb:20:90:2c:38:f7:e4:4e:b2:3f:
                    40:f0:c5:83:64:b3:ea:13:cf:5e:f1:a9:05:e2:c4:
                    6b:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:ED:34:FA:01:6A:AE:E4:00:12:0A:5B:2D:4E:3F:AC:F3:51:C1:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f6410c5d-8c14-3dd4-aee3-923e4a805231.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.12.94.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:8c:22:54:fb:24:45:42:a5:b4:af:65:dd:3a:c6:3e:2e:76:
         13:88:ce:e6:a3:cf:38:b3:8d:4a:db:9a:42:fa:d0:28:e2:e9:
         6f:c2:a8:93:c5:76:57:a2:99:5c:ac:30:14:e7:b3:7d:57:43:
         94:be:3a:44:a1:d7:81:8d:2d:a9:08:f2:ae:38:1d:ce:b1:03:
         98:40:16:69:10:65:da:ae:58:77:ce:53:88:0e:9c:1d:05:12:
         d7:04:1d:5f:7a:b2:35:9c:ed:9a:86:8c:7a:1c:d0:db:a7:f9:
         7f:b4:0c:32:f8:3b:12:c9:df:fd:9f:99:5a:fc:50:22:de:b8:
         4d:8c:28:b3:73:ee:7c:e6:ce:4d:37:43:8f:9f:94:06:01:ac:
         ff:f7:33:5d:06:30:3e:dd:e7:85:ad:03:8c:70:47:83:88:cd:
         bd:b9:0b:5a:a4:2e:80:05:58:6b:ed:93:b0:ed:06:d2:e5:39:
         35:7a:6d:94:a0:e9:3e:28:0c:81:13:62:72:c9:c6:2b:f9:44:
         b7:f7:96:16:f2:8b:3e:0f:dc:cd:4e:49:0f:62:34:22:aa:23:
         ce:8b:a1:bc:e7:60:b2:2d:75:a0:0a:d5:a0:cc:70:b2:c9:36:
         f4:90:b1:5a:38:67:c7:a6:26:50:10:0a:e2:a9:91:c7:50:ea:
         53:fb:63:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 10:56:48 2025 by rpki-client