Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2ffe19ac-3ffa-3563-bdbd-5c41f1d99444.roa
File:                     2ffe19ac-3ffa-3563-bdbd-5c41f1d99444.roa (raw, json)
Hash identifier:          gPL7oVzAROKhzz0/GHAltUUJXC7HQNRF8SSsmcojwFk=
Subject key identifier:   93:79:90:49:AC:31:F2:80:B0:1C:C2:B5:AF:D0:C2:08:F2:69:18:19
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285849EBEA797D12AE1D76A84E7CF4
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2ffe19ac-3ffa-3563-bdbd-5c41f1d99444.roa
Signing time:             Wed 21 May 2025 01:00:49 +0000
ROA not before:           Wed 21 May 2025 01:00:49 +0000
ROA not after:            Tue 19 Aug 2025 01:00:49 +0000
asID:                     397202
IP address blocks:        199.7.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:eb:ea:79:7d:12:ae:1d:76:a8:4e:7c:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 21 01:00:49 2025 GMT
            Not After : Aug 19 01:00:49 2025 GMT
        Subject: CN=9f3b55f4-560c-446c-b08f-ca5b0932abe0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b1:5c:19:8f:2e:61:ae:35:c7:90:13:f0:68:
                    86:0b:ae:c7:91:ef:7c:a2:5a:d4:68:42:a3:51:6e:
                    e8:e6:a2:cb:08:34:bb:09:2e:1c:51:fb:33:16:12:
                    dc:ee:c1:2d:b8:11:ed:1d:bf:17:e3:5a:5e:01:ec:
                    af:94:43:79:9d:14:30:19:51:26:13:a7:e7:5b:94:
                    02:dd:9b:de:f2:c3:27:33:c6:e1:f8:84:50:46:56:
                    bb:ad:c4:10:53:b3:d3:30:a8:b2:92:56:2b:07:8e:
                    89:72:0b:05:34:fc:2d:14:c2:b1:13:8d:9e:e0:c5:
                    ce:db:57:db:c6:21:b5:cc:6c:19:2b:38:87:73:3c:
                    ed:fc:77:a8:72:e3:26:73:ec:f3:56:42:a3:02:2e:
                    62:60:79:d5:42:a6:83:45:cb:74:e9:d9:01:a7:30:
                    76:73:3d:57:72:e6:5e:e5:a0:cb:ab:a8:6d:4a:b4:
                    d5:f3:d1:a6:4a:3b:b9:91:8f:7f:25:34:25:49:c2:
                    66:08:10:4d:63:a6:65:7e:28:a6:f7:98:40:50:f0:
                    a3:06:61:05:e3:a1:d9:56:f3:1c:e7:11:68:5f:3b:
                    04:23:0c:88:22:b0:a9:98:a8:93:40:13:c3:b8:b9:
                    76:a2:f8:09:44:f6:ca:8b:39:ea:02:40:06:7a:52:
                    af:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:79:90:49:AC:31:F2:80:B0:1C:C2:B5:AF:D0:C2:08:F2:69:18:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2ffe19ac-3ffa-3563-bdbd-5c41f1d99444.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:24:63:d5:8f:fa:16:5f:f7:55:c4:41:16:3d:31:06:ae:82:
         1d:32:13:cf:f9:02:32:4b:03:70:bb:fc:2d:b9:2e:13:68:ea:
         58:23:62:fc:a1:ae:ea:a2:b7:55:06:88:58:63:13:b6:e6:f3:
         dc:fa:26:2e:af:84:6e:c8:71:66:25:03:8f:9a:3b:69:1e:f5:
         35:3c:6a:95:81:93:19:58:31:8b:e5:a8:96:c3:de:35:1e:c2:
         66:12:eb:a7:46:d0:6c:3e:09:47:6b:88:5b:19:2e:ee:91:73:
         fd:e2:2f:6c:7b:8b:fe:c5:51:cc:cd:5e:fb:02:56:ad:d8:15:
         44:77:bc:64:a3:01:64:df:4a:43:f9:42:5c:9f:d5:83:e9:e2:
         43:b2:6d:32:cd:0f:e2:38:e4:0d:46:b3:85:1b:a0:5c:e6:38:
         59:67:0d:b4:91:10:d5:32:40:78:20:4a:b2:67:83:5d:97:b9:
         c2:52:c5:ac:dd:63:74:76:03:86:81:cd:63:98:b0:a1:ee:07:
         5e:7f:23:e6:91:88:75:31:d9:bb:72:94:13:ab:eb:20:0d:db:
         bf:05:3d:b8:7e:79:3d:67:d9:87:b1:20:1b:67:93:55:f2:d4:
         20:97:6c:a8:fe:b3:40:cc:40:11:bc:8f:1e:88:9c:17:da:4d:
         df:04:88:9d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnr6nl9Eq4ddqhOfPQwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDUyMTAxMDA0OVoXDTI1MDgxOTAxMDA0OVowLzEtMCsGA1UEAxMk
OWYzYjU1ZjQtNTYwYy00NDZjLWIwOGYtY2E1YjA5MzJhYmUwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsLFcGY8uYa41x5AT8GiGC67Hke98olrUaEKj
UW7o5qLLCDS7CS4cUfszFhLc7sEtuBHtHb8X41peAeyvlEN5nRQwGVEmE6fnW5QC
3Zve8sMnM8bh+IRQRla7rcQQU7PTMKiyklYrB46JcgsFNPwtFMKxE42e4MXO21fb
xiG1zGwZKziHczzt/HeocuMmc+zzVkKjAi5iYHnVQqaDRct06dkBpzB2cz1XcuZe
5aDLq6htSrTV89GmSju5kY9/JTQlScJmCBBNY6Zlfiim95hAUPCjBmEF46HZVvMc
5xFoXzsEIwyIIrCpmKiTQBPDuLl2ovgJRPbKiznqAkAGelKvcwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJN5kEmsMfKAsBzCta/QwgjyaRgZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMmZmZTE5YWMtM2ZmYS0z
NTYzLWJkYmQtNWM0MWYxZDk5NDQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwdHMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHQkY9WP+hZf91XEQRY9MQaugh0yE8/5AjJLA3C7/C25LhNo6lgjYvyh
ruqit1UGiFhjE7bm89z6Ji6vhG7IcWYlA4+aO2ke9TU8apWBkxlYMYvlqJbD3jUe
wmYS66dG0Gw+CUdriFsZLu6Rc/3iL2x7i/7FUczNXvsCVq3YFUR3vGSjAWTfSkP5
Qlyf1YPp4kOybTLND+I45A1Gs4UboFzmOFlnDbSRENUyQHggSrJng12XucJSxazd
Y3R2A4aBzWOYsKHuB15/I+aRiHUx2btylBOr6yAN278FPbh+eT1n2YexIBtnk1Xy
1CCXbKj+s0DMQBG8jx6InBfaTd8EiJ0=
-----END CERTIFICATE-----
Generated at Tue Jun 17 01:23:59 2025 by rpki-client