Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5a6e804c-5675-300e-bc7f-5a45f0627809.roa
File:                     5a6e804c-5675-300e-bc7f-5a45f0627809.roa (raw, json)
Hash identifier:          L9ug38gTy1ktluPH/aZdCSkEcXvkIO5DGuKNkSq0j2U=
Subject key identifier:   01:27:A9:0D:00:08:A3:C8:E1:CF:48:06:DD:3B:9C:F8:B5:66:FA:BA
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285849EBEA716CCA2A95D93D5ECC80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5a6e804c-5675-300e-bc7f-5a45f0627809.roa
Signing time:             Wed 21 May 2025 01:00:49 +0000
ROA not before:           Wed 21 May 2025 01:00:49 +0000
ROA not after:            Tue 19 Aug 2025 01:00:49 +0000
asID:                     396579
IP address blocks:        199.7.71.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:eb:ea:71:6c:ca:2a:95:d9:3d:5e:cc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 21 01:00:49 2025 GMT
            Not After : Aug 19 01:00:49 2025 GMT
        Subject: CN=9427561c-6628-417d-955e-1e720f236f80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:ca:bb:84:6a:8f:ea:96:17:f0:3a:72:18:86:
                    a9:4a:66:5e:33:49:1f:ae:a5:92:af:20:e1:ae:3b:
                    d8:d0:2b:29:02:ab:46:0b:00:a0:b3:18:9b:ca:4b:
                    61:3d:14:9c:c5:56:9f:2d:df:ec:ce:40:b7:8b:27:
                    9e:1c:bd:ea:6e:f3:c8:2d:d6:f1:11:f6:7a:4a:a0:
                    35:b6:7b:9e:58:c6:ff:1f:fb:2e:ca:ee:bc:f5:f0:
                    8c:1c:03:96:ce:22:c8:e8:50:dd:f2:aa:74:95:2f:
                    15:cb:e6:fc:88:68:af:63:63:7f:ac:dc:61:9d:dc:
                    1a:36:bd:57:54:b1:cc:47:d2:3e:79:b0:2f:ae:a5:
                    43:d5:d4:32:88:f3:6a:c8:41:7d:15:8f:2a:6c:76:
                    98:d5:b0:4a:ce:64:75:e8:42:b5:df:c3:12:fb:ca:
                    4f:c4:a9:92:db:34:a6:ec:b6:4d:b1:01:42:a5:6d:
                    1d:b2:d6:f7:d8:a9:bb:6c:d3:5f:a5:d2:92:a4:f5:
                    3d:0e:b6:8a:84:66:3e:70:c2:0e:0c:c1:ba:f5:a3:
                    d6:1b:c3:b4:8e:f1:b5:fa:85:c9:be:0c:51:cc:6e:
                    56:40:c7:00:c9:83:a5:a2:ff:b0:b0:5e:66:c6:d4:
                    68:e4:a5:3e:96:e1:0c:97:cf:86:12:06:83:b1:15:
                    2d:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:27:A9:0D:00:08:A3:C8:E1:CF:48:06:DD:3B:9C:F8:B5:66:FA:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5a6e804c-5675-300e-bc7f-5a45f0627809.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.71.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:0b:51:a3:be:8f:f0:36:16:97:e9:f8:9a:3b:87:15:38:5f:
         ee:60:50:ba:8f:54:1c:7c:09:b7:a7:8a:c7:16:ea:09:42:19:
         0a:1b:cc:a9:b0:90:02:a1:7d:e5:a3:5c:ea:56:92:91:a5:ec:
         72:81:68:7b:8c:d4:65:c7:85:8d:ab:8c:09:d8:b8:ce:10:aa:
         8b:94:11:08:e5:43:72:48:f9:70:74:d6:5c:bb:e2:6a:f6:a6:
         79:ba:74:93:2b:5e:3f:dc:3b:cc:c9:27:c6:8c:30:a7:8f:e8:
         e2:f5:cd:e6:87:7a:a8:00:e4:c3:7f:51:00:b2:cf:ff:5f:9f:
         21:f3:7f:23:37:2e:6a:aa:87:e0:08:01:8a:78:79:d5:08:bc:
         02:2c:c2:cb:d2:e1:e0:15:f5:1e:a6:37:15:af:e3:51:52:61:
         e4:a1:03:58:ab:23:93:9e:77:35:35:66:a5:a7:18:a6:33:63:
         33:5d:ca:88:31:ff:e9:cd:5b:1e:89:83:27:a7:7d:14:3a:ed:
         dc:96:ee:e4:f6:46:35:52:6f:b6:66:e9:33:ff:f9:a2:54:9e:
         d6:23:5c:94:42:2b:e2:43:b7:fd:54:03:44:ab:c7:b6:08:32:
         22:88:49:24:37:e6:f5:3e:9c:4b:45:9f:51:43:60:9c:8b:54:
         59:4f:7d:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 09:24:55 2025 by rpki-client