Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/19b55f21-ab91-3046-8822-b5f6ac643fab.roa
File:                     19b55f21-ab91-3046-8822-b5f6ac643fab.roa (raw, json)
Hash identifier:          QsjWrCkhWTvU2UT59P9AIiuNjzF163eIpb336j167P0=
Subject key identifier:   65:BA:97:79:AB:02:CF:78:D4:49:E1:00:02:F9:35:DC:A3:FE:5C:AF
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285849EBEA6D3D97039CA30FB9CA00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/19b55f21-ab91-3046-8822-b5f6ac643fab.roa
Signing time:             Wed 21 May 2025 01:00:49 +0000
ROA not before:           Wed 21 May 2025 01:00:49 +0000
ROA not after:            Tue 19 Aug 2025 01:00:49 +0000
asID:                     396568
IP address blocks:        199.7.71.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:eb:ea:6d:3d:97:03:9c:a3:0f:b9:ca:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 21 01:00:49 2025 GMT
            Not After : Aug 19 01:00:49 2025 GMT
        Subject: CN=d9bb5b5d-b6ea-4d55-afa9-95835cd9f3c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:09:c6:be:8a:1b:35:f2:b1:18:a7:09:47:e0:
                    04:3d:4b:19:e1:ef:db:6b:da:04:aa:66:cd:62:79:
                    a6:be:8f:8c:e4:c6:1c:41:c2:19:bd:fc:76:64:1d:
                    41:23:d0:1c:9e:07:1d:e0:3e:20:03:1d:ab:9b:1b:
                    ed:9d:6b:9e:60:1f:b5:bb:a1:b1:03:0a:42:b7:48:
                    79:79:7f:2f:ed:39:74:72:df:0a:1f:a7:a8:da:bd:
                    6e:08:9e:f1:c5:69:78:d8:9e:67:36:b4:fd:f9:70:
                    60:f0:82:46:53:43:8a:bc:0f:14:5a:f1:fe:1e:22:
                    36:35:26:1a:7f:0a:6a:36:2e:8e:be:dc:c1:e5:90:
                    fd:9f:08:63:6a:93:a1:f3:89:d7:8a:3c:89:59:19:
                    62:0e:14:2a:12:6b:f8:85:27:85:17:af:db:1b:39:
                    97:38:cf:10:7a:65:19:f5:e3:81:e0:98:99:f9:bc:
                    77:eb:55:7f:2d:ea:64:c2:f2:1b:d8:74:6e:58:93:
                    51:ae:0e:4e:b6:58:c6:e5:58:8a:f8:dc:10:3a:57:
                    91:63:3e:14:86:a2:e7:6b:8a:c2:b7:6a:10:83:b7:
                    ab:8e:fd:48:b1:6b:48:e3:78:1a:01:91:ab:66:93:
                    7b:62:6b:4c:27:1f:7c:01:0e:fa:aa:7d:75:00:c8:
                    6f:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:BA:97:79:AB:02:CF:78:D4:49:E1:00:02:F9:35:DC:A3:FE:5C:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/19b55f21-ab91-3046-8822-b5f6ac643fab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.71.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:39:d2:58:ee:cc:df:93:1a:63:5b:84:be:c1:1e:25:7d:3e:
         51:94:f2:e9:31:58:bc:82:6f:9d:23:16:ef:3c:85:53:02:09:
         c7:07:15:9d:a5:ff:8d:11:51:e9:3e:e8:20:91:c8:10:91:f8:
         b8:22:30:4e:14:9d:3d:d0:0b:a9:0e:be:a6:d3:52:7f:6b:45:
         aa:4a:66:08:bd:e1:4d:dd:e1:1e:23:12:ec:b4:07:4b:62:21:
         99:d2:4a:a7:66:8e:df:59:79:55:3d:09:7e:fd:64:2d:6b:e7:
         24:8b:b0:0e:12:d8:cf:f1:f8:ea:1d:a5:9c:75:71:8e:f6:b1:
         16:c4:45:4e:35:50:e2:e9:06:15:4a:79:37:d5:79:fa:b7:a9:
         82:95:61:24:0b:e8:84:26:3b:38:89:d0:31:bf:8a:7b:88:c8:
         40:cb:a0:ed:f3:0b:80:e5:95:d2:9a:3c:f7:48:b2:19:f7:1b:
         92:2f:f1:7e:82:28:f0:bb:64:f4:33:3a:60:2b:6b:f3:99:3f:
         db:52:b4:d9:b0:f9:68:9b:5f:47:2d:a8:03:02:c2:15:08:e4:
         a2:34:05:94:53:c4:0c:87:42:8b:29:37:36:e0:d0:02:03:4d:
         70:bf:f2:22:d9:30:90:fa:68:c1:13:dd:c5:09:80:59:c7:93:
         d8:99:1f:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 03:57:12 2025 by rpki-client