Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/58e0f1d9-ebff-3aba-bbdf-156b3d24c973.roa
File:                     58e0f1d9-ebff-3aba-bbdf-156b3d24c973.roa (raw, json)
Hash identifier:          Y6Ojv/zbaq0iM/xks545qvWLhV0vEOZKNknSRuvzlJ8=
Subject key identifier:   D0:8D:D1:83:F7:E5:46:A8:0E:82:FC:B2:42:B4:46:6C:09:C9:EF:AF
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D6EDA74D39B80A6F04B5AA000
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/58e0f1d9-ebff-3aba-bbdf-156b3d24c973.roa
Signing time:             Wed 08 Apr 2026 01:00:24 +0000
ROA not before:           Wed 08 Apr 2026 01:00:24 +0000
ROA not after:            Tue 07 Jul 2026 01:00:24 +0000
asID:                     396710
IP address blocks:        199.7.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6e:da:74:d3:9b:80:a6:f0:4b:5a:a0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr  8 01:00:24 2026 GMT
            Not After : Jul  7 01:00:24 2026 GMT
        Subject: CN=2d09ad80-4e59-40cc-abfc-245a8ea8fce8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:ef:26:72:cb:fb:25:3b:9a:69:53:0e:58:af:
                    6c:5b:e9:a5:1a:ce:f3:94:cb:4d:08:a7:ea:f9:58:
                    97:5b:e9:b7:99:7f:89:39:bb:c5:5a:9a:d1:2d:8b:
                    95:a2:0b:97:80:f9:70:68:7e:4f:e8:b6:44:f4:d1:
                    aa:a8:3e:27:1b:59:b1:7e:67:91:6c:cd:1b:38:f5:
                    7b:ce:97:77:32:b2:36:9e:1a:f9:2a:a0:0b:7c:fe:
                    db:38:b2:7c:39:df:c9:60:8f:47:54:b7:13:3a:90:
                    64:0a:d5:99:c7:81:1a:cb:da:a4:ac:62:53:96:0e:
                    44:2b:77:20:a3:21:5b:12:92:8d:39:88:83:00:32:
                    f8:ea:ab:53:1c:bf:e7:9e:52:8e:8a:b7:53:ed:0f:
                    0e:67:1a:c2:07:85:94:37:fb:4f:b4:cc:f2:0d:b2:
                    74:54:f4:7f:54:b3:a4:0d:2b:4d:25:1e:19:e7:0e:
                    a0:9a:62:83:1a:c4:08:4a:bf:92:c0:f3:7c:b7:40:
                    9f:7e:16:25:04:05:01:27:88:fe:d2:15:b3:5c:fe:
                    89:bf:10:9b:4d:ad:c1:9c:10:9f:f5:31:d0:e2:43:
                    50:aa:90:c1:41:9b:9a:9c:f5:e0:0f:bf:a8:e8:91:
                    c7:48:06:d1:53:50:68:ae:7b:b8:90:fb:02:97:23:
                    5c:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:8D:D1:83:F7:E5:46:A8:0E:82:FC:B2:42:B4:46:6C:09:C9:EF:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/58e0f1d9-ebff-3aba-bbdf-156b3d24c973.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:71:f3:6d:de:9c:35:b1:52:35:50:4c:21:0e:f7:0c:80:37:
         f1:f4:f8:c8:e2:05:18:db:6a:3c:69:9d:54:80:f7:b3:cb:a2:
         5f:59:f8:79:9c:19:3d:d9:2d:fe:f1:96:45:94:cb:a6:29:7a:
         be:e2:90:c7:e0:c3:83:a9:db:ff:09:da:80:38:d1:b5:fc:b0:
         7b:44:be:cf:78:25:dc:33:0e:9e:56:e2:ec:be:1f:c9:0d:93:
         22:96:d8:0f:c2:ea:9e:75:45:72:22:3b:e9:f6:ee:5a:47:bf:
         6c:1d:03:90:70:ac:48:23:79:d7:47:9c:6d:90:0d:b5:c3:f3:
         9e:08:ad:80:a7:f1:eb:42:0e:25:67:52:74:5c:70:73:90:a5:
         06:ef:88:89:e9:da:4a:72:6f:00:df:5d:de:32:ed:85:e8:39:
         ba:6f:af:cd:26:e0:ec:20:b8:3d:67:67:dd:49:6c:d0:9b:9f:
         c6:37:78:ff:5b:3f:b9:c1:e0:67:3d:a6:95:a9:d7:9c:11:18:
         e6:18:5d:f6:4b:6c:dc:75:78:77:11:cd:2b:ea:65:eb:d2:d6:
         e7:f1:dc:de:c2:45:f2:d9:40:ba:9d:e3:54:34:03:1a:18:76:
         7b:eb:f3:3e:82:80:59:c8:9c:1d:21:d4:02:67:26:88:72:71:
         5a:a9:fa:8e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1u2nTTm4Cm8EtaoAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDQwODAxMDAyNFoXDTI2MDcwNzAxMDAyNFowLzEtMCsGA1UEAxMk
MmQwOWFkODAtNGU1OS00MGNjLWFiZmMtMjQ1YThlYThmY2U4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgu8mcsv7JTuaaVMOWK9sW+mlGs7zlMtNCKfq
+ViXW+m3mX+JObvFWprRLYuVoguXgPlwaH5P6LZE9NGqqD4nG1mxfmeRbM0bOPV7
zpd3MrI2nhr5KqALfP7bOLJ8Od/JYI9HVLcTOpBkCtWZx4Eay9qkrGJTlg5EK3cg
oyFbEpKNOYiDADL46qtTHL/nnlKOirdT7Q8OZxrCB4WUN/tPtMzyDbJ0VPR/VLOk
DStNJR4Z5w6gmmKDGsQISr+SwPN8t0CffhYlBAUBJ4j+0hWzXP6JvxCbTa3BnBCf
9THQ4kNQqpDBQZuanPXgD7+o6JHHSAbRU1Bornu4kPsClyNcYQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNCN0YP35UaoDoL8skK0RmwJye+vMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNThlMGYxZDktZWJmZi0z
YWJhLWJiZGYtMTU2YjNkMjRjOTczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwdHMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAK9x823enDWxUjVQTCEO9wyAN/H0+MjiBRjbajxpnVSA97PLol9Z+Hmc
GT3ZLf7xlkWUy6Yper7ikMfgw4Op2/8J2oA40bX8sHtEvs94JdwzDp5W4uy+H8kN
kyKW2A/C6p51RXIiO+n27lpHv2wdA5BwrEgjeddHnG2QDbXD854IrYCn8etCDiVn
UnRccHOQpQbviInp2kpybwDfXd4y7YXoObpvr80m4OwguD1nZ91JbNCbn8Y3eP9b
P7nB4Gc9ppWp15wRGOYYXfZLbNx1eHcRzSvqZevS1ufx3N7CRfLZQLqd41Q0AxoY
dnvr8z6CgFnInB0h1AJnJohycVqp+o4=
-----END CERTIFICATE-----
Generated at Fri Apr 17 05:07:28 2026 by rpki-client