Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3075df5c-bf33-354f-b377-d2ebe3a06ca8.roa
File:                     3075df5c-bf33-354f-b377-d2ebe3a06ca8.roa (raw, json)
Hash identifier:          B4FiDU4/yVhmjEu/1THZdO+KzkzutToRCC7DxUonnmY=
Subject key identifier:   E2:64:7F:A9:18:74:A9:D6:E2:D2:A9:82:CF:99:D0:B0:D9:3D:4C:AF
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285849EBEA65E95C646E310F750E60
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3075df5c-bf33-354f-b377-d2ebe3a06ca8.roa
Signing time:             Wed 21 May 2025 01:00:49 +0000
ROA not before:           Wed 21 May 2025 01:00:49 +0000
ROA not after:            Tue 19 Aug 2025 01:00:49 +0000
asID:                     396546
IP address blocks:        199.7.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:eb:ea:65:e9:5c:64:6e:31:0f:75:0e:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 21 01:00:49 2025 GMT
            Not After : Aug 19 01:00:49 2025 GMT
        Subject: CN=9e5991e8-3625-4a50-9b48-cad80a614443
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:4c:a1:2c:9b:42:f0:67:d4:f6:36:7b:6d:95:
                    96:65:8a:a2:d8:0f:46:0e:4e:f6:dd:c3:72:98:90:
                    44:a3:74:41:0d:ab:b5:d2:76:d9:be:ea:fe:75:b1:
                    b3:17:36:d0:fc:86:3b:38:b6:53:fd:9e:b6:18:1b:
                    ac:9f:9e:ac:f4:5c:15:37:bb:fe:1f:ad:92:c3:0d:
                    73:26:d3:d4:64:46:af:47:bc:1e:c9:6b:7d:a6:6c:
                    ac:5c:13:35:7f:d5:7f:6f:53:39:a7:7b:49:5c:6a:
                    3e:0f:2d:51:ed:0d:7e:22:f1:c2:00:8a:04:ca:57:
                    06:eb:5b:5c:1f:1d:09:0d:43:2b:78:3b:42:24:5a:
                    c4:67:27:3a:9f:51:71:01:fe:f1:af:16:8a:eb:ac:
                    0e:94:00:af:0e:5d:73:61:54:fa:0d:f7:b4:97:ca:
                    73:d1:f1:ed:32:09:9c:3c:ff:12:03:e5:d3:f0:93:
                    e5:82:8e:51:8b:9b:99:5e:82:b3:f3:5a:59:00:2d:
                    34:de:f0:db:56:a5:a8:b3:d5:ce:50:65:fd:44:6a:
                    46:f5:34:7d:ac:ad:a1:b2:e9:06:e3:bf:1c:e5:27:
                    dd:31:9e:2a:71:8a:f1:71:e5:3b:a5:94:7c:3d:d7:
                    7a:cd:bd:ac:c2:bf:28:d1:90:19:71:61:01:68:3d:
                    98:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:64:7F:A9:18:74:A9:D6:E2:D2:A9:82:CF:99:D0:B0:D9:3D:4C:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3075df5c-bf33-354f-b377-d2ebe3a06ca8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:69:33:20:25:78:fc:c9:8f:40:4f:49:81:f3:db:51:f7:eb:
         7c:20:3f:99:a9:8a:3a:36:7d:9e:ba:e0:9c:b7:5a:fc:fc:0e:
         b2:73:ae:ca:8c:6a:a8:1f:9a:c6:f8:9d:57:14:5c:7e:01:78:
         41:7f:d1:87:bb:f4:95:fe:81:15:94:26:b1:93:7d:da:97:40:
         33:8d:b1:97:6d:e8:4b:e8:66:39:40:32:03:47:7e:dc:80:58:
         52:5a:ea:dc:49:4e:6d:43:9a:09:ce:3a:6f:3d:59:5e:01:93:
         d5:a1:ff:c8:6b:f3:95:a7:2c:b2:d9:e7:9c:09:ab:64:b3:d6:
         15:3a:35:d3:4a:80:bd:c5:c9:21:dc:ca:cc:ce:9b:95:da:79:
         90:37:50:dc:a1:28:38:1f:45:f6:c5:f2:fb:13:d0:96:88:5e:
         e9:42:23:19:b6:df:e5:d9:c0:20:49:c4:02:cf:e5:ba:9a:24:
         ed:d0:5a:dc:15:9b:27:b7:92:9b:73:16:ae:13:11:a4:fe:a2:
         06:65:e9:fe:0f:28:8c:a0:e7:bb:0c:13:f0:04:7f:49:4c:f9:
         3f:4e:c9:fa:fd:68:b9:6a:8b:97:4c:dd:ed:da:e3:ec:58:41:
         87:a7:30:4d:24:43:5d:5a:f6:97:0f:66:88:c7:a2:9b:35:73:
         0d:8b:f0:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 04:02:50 2025 by rpki-client