Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0ac46459-d639-39b0-a5e7-04a8c6314fde.roa
File:                     0ac46459-d639-39b0-a5e7-04a8c6314fde.roa (raw, json)
Hash identifier:          EeZWqdgl3qdvWbDRUwq6o6O4xwUsTruiBtdt8aolARU=
Subject key identifier:   8C:0F:F2:55:0B:55:2A:72:CE:A7:4D:FC:FE:14:65:20:2B:BF:29:BC
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D6EDA81E0037454535ECDC140
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0ac46459-d639-39b0-a5e7-04a8c6314fde.roa
Signing time:             Wed 08 Apr 2026 01:00:24 +0000
ROA not before:           Wed 08 Apr 2026 01:00:24 +0000
ROA not after:            Tue 07 Jul 2026 01:00:24 +0000
asID:                     36629
IP address blocks:        199.7.71.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6e:da:81:e0:03:74:54:53:5e:cd:c1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr  8 01:00:24 2026 GMT
            Not After : Jul  7 01:00:24 2026 GMT
        Subject: CN=a43b3a50-8d63-4d09-8a26-8bec04d2cad5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b7:3b:41:2d:fa:3f:e1:5b:fa:57:36:a3:b2:
                    99:0b:cd:0a:d0:c0:93:b7:02:7d:a7:81:b3:5f:18:
                    f9:92:ee:6d:63:89:9b:27:ea:36:44:af:a9:98:49:
                    2e:19:1f:fb:95:12:69:11:9e:fd:5c:47:66:3c:00:
                    b8:80:dc:7e:78:8d:6b:eb:62:f6:7c:f1:e5:c9:03:
                    9d:d1:6c:50:19:9d:f6:6c:06:ee:3e:df:67:1c:76:
                    14:3b:aa:15:29:68:c0:9e:0e:f6:a3:f5:67:ea:9d:
                    01:16:02:f8:11:8e:b0:6f:76:9b:31:4f:ab:15:54:
                    43:bf:b8:56:80:f3:6a:66:fc:e7:b7:e2:dc:61:ac:
                    9a:ab:f7:81:08:9f:24:68:2d:96:34:b2:8c:6a:06:
                    90:0c:ac:d9:fc:09:83:8e:78:d2:5e:4b:9a:62:69:
                    a5:86:b5:87:07:53:75:26:e1:61:70:bc:b9:43:3f:
                    23:e9:76:c6:be:99:68:7e:4c:9e:a2:fc:d1:86:28:
                    29:54:de:54:f0:c9:e0:fb:77:ab:d5:ea:bc:2f:d9:
                    db:89:7e:1f:12:26:e2:85:56:0b:50:23:ec:ce:ef:
                    07:62:94:0c:54:5c:b4:eb:1f:c7:59:db:77:f4:1f:
                    bd:28:35:95:11:20:3c:b1:37:b3:52:69:52:59:09:
                    e0:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:0F:F2:55:0B:55:2A:72:CE:A7:4D:FC:FE:14:65:20:2B:BF:29:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0ac46459-d639-39b0-a5e7-04a8c6314fde.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.71.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:bc:32:77:fb:82:3e:3a:c5:57:b1:13:b8:c1:ce:79:75:5d:
         c3:10:b6:c5:d2:6d:28:01:99:b3:88:f3:78:ae:8d:a2:31:54:
         22:ca:31:a6:4a:4b:24:23:c4:29:9a:8e:03:e8:a0:4b:9f:3e:
         54:86:d6:7f:78:ed:97:75:97:42:e5:a6:5e:ac:10:79:3f:6f:
         53:17:c2:5c:98:80:f7:c1:25:bd:41:b0:7b:58:c1:32:6d:1e:
         4f:72:9d:85:f7:c0:67:3c:6c:bc:3c:ca:b6:69:75:6f:07:3b:
         a4:e7:70:1d:78:63:4d:b8:c0:a4:f0:31:5c:9e:0d:0e:b5:db:
         0e:0f:b8:3e:11:6d:f8:54:d2:14:fb:98:db:cd:28:37:48:8f:
         fd:ab:f2:a9:30:cd:3f:11:89:33:65:ea:40:f1:71:3a:e8:ef:
         ba:3b:e7:76:be:02:f2:c5:c6:31:1d:d4:3e:aa:8f:2a:ed:59:
         68:2d:e6:7a:28:06:5b:6c:00:de:f8:8f:6c:c2:3a:67:be:db:
         b3:c6:a2:28:bf:f0:0b:91:6e:9b:5b:33:9b:5b:61:eb:7e:69:
         94:ad:8c:42:77:95:63:f0:5e:87:a8:3e:64:a1:ce:16:e2:77:
         f5:b3:5c:34:ac:6c:80:fb:7d:50:c3:19:0c:d5:49:40:dc:be:
         39:8d:41:26
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE1u2oHgA3RUU17NwUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDQwODAxMDAyNFoXDTI2MDcwNzAxMDAyNFowLzEtMCsGA1UEAxMk
YTQzYjNhNTAtOGQ2My00ZDA5LThhMjYtOGJlYzA0ZDJjYWQ1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbc7QS36P+Fb+lc2o7KZC80K0MCTtwJ9p4Gz
Xxj5ku5tY4mbJ+o2RK+pmEkuGR/7lRJpEZ79XEdmPAC4gNx+eI1r62L2fPHlyQOd
0WxQGZ32bAbuPt9nHHYUO6oVKWjAng72o/Vn6p0BFgL4EY6wb3abMU+rFVRDv7hW
gPNqZvznt+LcYayaq/eBCJ8kaC2WNLKMagaQDKzZ/AmDjnjSXkuaYmmlhrWHB1N1
JuFhcLy5Qz8j6XbGvplofkyeovzRhigpVN5U8Mng+3er1eq8L9nbiX4fEibihVYL
UCPszu8HYpQMVFy06x/HWdt39B+9KDWVESA8sTezUmlSWQngdQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFIwP8lULVSpyzqdN/P4UZSArvym8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMGFjNDY0NTktZDYzOS0z
OWIwLWE1ZTctMDRhOGM2MzE0ZmRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxwdHHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCSvDJ3+4I+OsVXsRO4wc55dV3DELbF0m0oAZmziPN4ro2iMVQiyjGm
SkskI8Qpmo4D6KBLnz5UhtZ/eO2XdZdC5aZerBB5P29TF8JcmID3wSW9QbB7WMEy
bR5Pcp2F98BnPGy8PMq2aXVvBzuk53AdeGNNuMCk8DFcng0OtdsOD7g+EW34VNIU
+5jbzSg3SI/9q/KpMM0/EYkzZepA8XE66O+6O+d2vgLyxcYxHdQ+qo8q7VloLeZ6
KAZbbADe+I9swjpnvtuzxqIov/ALkW6bWzObW2HrfmmUrYxCd5Vj8F6HqD5koc4W
4nf1s1w0rGyA+31QwxkM1UlA3L45jUEm
-----END CERTIFICATE-----
Generated at Fri Apr 17 18:05:39 2026 by rpki-client