Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0c242c5c-efec-31a8-b1db-76933254f40b.roa
File:                     0c242c5c-efec-31a8-b1db-76933254f40b.roa (raw, json)
Hash identifier:          gHcGtswI2WzIItDEuSPQoPOcefPmkxI+Lqe+G0ykuzU=
Subject key identifier:   5B:55:39:40:2B:E9:D8:9B:E8:57:BA:B1:78:B8:84:86:D1:78:CC:F1
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D6EDA7A1260B72816DF192B00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0c242c5c-efec-31a8-b1db-76933254f40b.roa
Signing time:             Wed 08 Apr 2026 01:00:24 +0000
ROA not before:           Wed 08 Apr 2026 01:00:24 +0000
ROA not after:            Tue 07 Jul 2026 01:00:24 +0000
asID:                     36630
IP address blocks:        199.7.71.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6e:da:7a:12:60:b7:28:16:df:19:2b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr  8 01:00:24 2026 GMT
            Not After : Jul  7 01:00:24 2026 GMT
        Subject: CN=6ebcf3f3-fd0a-4db5-9e60-887852b27b36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:5d:e8:7c:ba:cc:1b:80:e7:44:e1:36:2c:36:
                    b5:61:59:74:f7:42:05:aa:b3:72:b5:9d:5e:f5:6e:
                    3b:fc:d2:bf:a0:23:46:8f:8f:73:18:81:2f:01:eb:
                    b5:c8:8a:2f:ef:36:66:24:e0:48:ab:c8:91:61:25:
                    f5:19:b1:f5:0c:fb:8d:64:08:cc:5c:42:37:25:be:
                    d0:7d:1a:2a:54:82:11:69:bd:45:44:6e:db:da:1e:
                    53:bc:0a:1f:c9:e2:81:fd:d5:20:7d:a8:44:3d:e5:
                    2a:33:5c:6d:f6:b6:13:10:46:b5:64:80:36:75:d9:
                    36:6f:01:2e:f4:f5:d1:3a:e1:43:a1:bb:f0:49:ff:
                    8f:ef:14:7d:b9:f7:ca:43:58:2e:28:3a:11:ff:d3:
                    04:d2:d5:c4:8d:c2:9a:dd:54:24:0e:21:16:65:2e:
                    9b:78:d7:85:f5:a1:c6:28:b5:5c:90:2e:79:cc:a6:
                    17:96:41:d6:2a:cd:f6:21:0e:1e:b0:bb:23:83:60:
                    c6:96:08:5c:10:78:29:ba:3f:11:9a:f4:85:ae:5d:
                    0c:55:d3:5b:56:84:2d:38:ed:63:bd:ce:a2:8e:c3:
                    e4:6a:47:8a:60:9a:02:76:86:8e:5d:67:05:14:ee:
                    7f:0b:21:7e:21:a6:ed:3b:c9:61:1d:48:a7:ff:75:
                    8d:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:55:39:40:2B:E9:D8:9B:E8:57:BA:B1:78:B8:84:86:D1:78:CC:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0c242c5c-efec-31a8-b1db-76933254f40b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.71.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:e3:9e:99:51:a2:5b:12:1b:91:ec:6f:57:10:cc:44:5b:87:
         91:ab:9d:a3:c7:31:11:da:eb:d5:0d:df:d2:a0:a8:4b:ae:26:
         2a:51:44:cf:12:ad:1a:96:5a:50:dd:68:c2:d5:8d:d5:fe:f8:
         a0:db:32:11:ca:50:7a:0c:15:5e:4f:2f:c0:01:de:ab:18:bb:
         21:27:8f:95:bf:27:2d:6b:8c:71:f3:8e:d0:a2:0b:58:98:78:
         74:2c:fa:6a:e0:dd:ec:9c:31:0c:9e:49:52:67:4e:5b:94:76:
         f6:4e:33:0b:02:9d:3f:9a:53:d4:f3:5e:f2:fd:3f:80:5d:44:
         19:cc:23:c7:a6:34:f2:a6:99:4e:77:ee:57:e8:d7:53:a4:94:
         56:41:48:64:91:3e:ae:0e:45:8d:51:47:cb:49:0f:01:7a:d2:
         6b:0f:7a:73:ff:85:a4:4f:a0:63:6d:8a:1b:65:ff:25:57:25:
         da:46:6f:70:d8:f5:b9:3f:84:02:81:cd:d8:2f:bc:97:f2:e9:
         d3:97:72:c8:b3:34:66:f2:49:ef:1e:bd:17:f5:1c:7b:f1:5b:
         28:4a:f9:df:9a:58:1f:1e:8f:62:e9:59:ec:60:98:cd:85:7c:
         ec:db:d1:69:7a:01:75:cd:af:23:ff:5d:c3:7d:73:9b:72:3f:
         a6:11:01:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:50:03 2026 by rpki-client