Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2f9f311c-cab0-3a12-ac17-ce48fdfb0d49.roa
File:                     2f9f311c-cab0-3a12-ac17-ce48fdfb0d49.roa (raw, json)
Hash identifier:          zSuDsAFmUSxVVMSTp1ATQNsKBkH/PCXjm6GOolpHUUo=
Subject key identifier:   8B:09:B8:EA:BC:B6:40:15:96:69:9C:C4:A1:89:6C:A8:32:ED:32:A1
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E9D4A7684DA9A1AE3C8D4DA80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2f9f311c-cab0-3a12-ac17-ce48fdfb0d49.roa
Signing time:             Sat 25 Jul 2026 09:00:11 +0000
ROA not before:           Sat 25 Jul 2026 09:00:11 +0000
ROA not after:            Fri 23 Oct 2026 09:00:11 +0000
asID:                     397196
IP address blocks:        199.7.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9d:4a:76:84:da:9a:1a:e3:c8:d4:da:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 25 09:00:11 2026 GMT
            Not After : Oct 23 09:00:11 2026 GMT
        Subject: CN=312e79d0-5671-4816-94c9-e47d980e4741
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:00:2a:f7:04:9b:94:6a:dd:ca:68:94:5d:82:
                    b8:3a:49:c1:9d:1b:46:95:20:e6:10:05:80:96:d1:
                    7d:80:8f:2a:16:b1:a3:50:13:92:2d:96:e0:4b:b8:
                    c6:f5:aa:18:f1:c8:01:a5:9e:39:68:48:b0:9c:4a:
                    b1:d4:0e:8c:db:08:e8:75:e7:45:65:c9:a4:bd:4c:
                    61:b3:06:ce:b8:b7:54:0b:3f:1d:3f:61:55:db:47:
                    db:fe:8d:06:72:59:88:33:6d:40:21:da:15:a8:cf:
                    a0:95:b1:b7:e1:c2:57:29:7b:8e:b1:39:4a:9c:fc:
                    c8:7a:26:9a:1e:f5:ad:99:e6:b1:8e:41:ee:b7:0c:
                    3c:b6:42:42:87:56:9e:6b:9d:c8:06:f4:b5:72:20:
                    eb:2b:7d:57:53:b1:cf:81:85:c7:d1:7d:e2:c0:9d:
                    dd:b9:d2:cb:49:86:f5:ae:1b:72:04:e4:60:d4:a0:
                    ee:c3:9a:af:7c:a9:37:44:23:28:31:65:57:7e:46:
                    95:50:20:ca:a9:e6:9e:32:cd:8a:38:85:41:92:2e:
                    df:d1:c4:6c:38:85:cb:c5:bd:bf:6d:1a:2c:a7:e8:
                    ae:21:83:58:91:c2:d1:15:d2:1f:09:e9:69:82:3e:
                    48:d2:55:af:fc:fc:43:b7:65:1d:5a:ca:14:e6:aa:
                    36:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:09:B8:EA:BC:B6:40:15:96:69:9C:C4:A1:89:6C:A8:32:ED:32:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2f9f311c-cab0-3a12-ac17-ce48fdfb0d49.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:0c:b2:f5:f7:ad:1f:51:5d:d3:e0:f6:50:9a:33:73:1f:53:
         aa:b6:1a:69:97:92:54:d6:af:93:2a:18:dd:14:da:4a:96:59:
         f2:59:5a:c3:e4:50:26:07:28:47:4a:6b:63:4b:8f:a0:75:ec:
         75:e6:53:01:df:19:f2:21:1d:d5:81:fa:a4:66:5f:68:b4:f7:
         0f:24:eb:85:4c:a7:cd:83:cc:b4:77:df:c0:4b:0a:32:bb:84:
         a6:9b:4f:22:09:31:45:3a:68:dd:c1:cd:5e:05:da:9c:a1:35:
         3d:e9:e1:89:ea:fa:62:a3:72:cc:62:a1:39:cd:1a:5b:8e:5a:
         bd:88:79:be:4f:89:c8:82:9d:15:56:4e:ac:69:f5:cf:77:6f:
         4d:86:55:c1:bc:da:7e:b4:0c:f1:73:60:ac:11:2a:65:3a:11:
         33:ea:ce:6d:45:8f:0e:ca:90:cf:bb:c8:5d:03:d8:9a:4e:c2:
         8a:d2:80:ed:dc:0c:9e:ae:17:3f:3c:cd:21:e0:d2:6b:ce:04:
         7e:cc:c3:b3:5a:ab:65:22:91:5e:ac:74:85:24:bd:4a:da:00:
         9c:8c:4b:53:ec:b6:09:24:4d:49:41:80:1e:8b:04:bd:26:78:
         7b:aa:5d:cb:c7:ab:da:e9:ac:09:4d:f0:83:29:dc:94:f9:ae:
         5a:a8:0b:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:16:28 2026 by rpki-client