Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5d256b58-e945-31af-a662-e8c77f324fdf.roa
File:                     5d256b58-e945-31af-a662-e8c77f324fdf.roa (raw, json)
Hash identifier:          iuNMf7XzP8GNagHEeN7Fo68LhKhDmGKUIHT1OUswkzM=
Subject key identifier:   23:81:90:F9:FD:C2:29:C3:0C:FA:2D:AB:08:FE:69:A9:EF:F0:8A:12
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858490CB160032F723C7D75D53100
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5d256b58-e945-31af-a662-e8c77f324fdf.roa
Signing time:             Sun 02 Mar 2025 02:00:40 +0000
ROA not before:           Sun 02 Mar 2025 02:00:40 +0000
ROA not after:            Sat 31 May 2025 01:00:40 +0000
asID:                     397193
IP address blocks:        199.7.71.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:0c:b1:60:03:2f:72:3c:7d:75:d5:31:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar  2 02:00:40 2025 GMT
            Not After : May 31 01:00:40 2025 GMT
        Subject: CN=168ab4c6-6e71-4808-8041-d284c0ee0480
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:1e:a1:99:ef:a5:cd:ae:13:7f:1f:27:63:75:
                    6f:e9:90:fb:13:eb:3e:af:25:6c:86:63:81:f3:c1:
                    04:da:c6:76:a9:bd:29:8a:26:12:6f:0f:ca:34:8d:
                    68:f3:a0:89:38:cd:af:d1:d9:7e:e5:16:7f:ac:24:
                    43:ae:5e:50:60:2c:05:0c:48:31:0f:84:47:2e:79:
                    ed:42:0f:c2:ed:4a:28:eb:6b:fd:7a:63:30:d5:db:
                    8d:7f:93:8b:7c:54:03:e4:be:e5:7a:de:52:23:65:
                    df:49:d6:94:0a:0f:8b:26:27:df:ae:84:69:af:e8:
                    66:27:4e:18:bd:c0:6f:bd:1e:5c:78:ad:e4:14:74:
                    86:7a:3a:94:01:c1:ad:eb:92:ae:85:2c:cb:32:2a:
                    87:3c:24:8a:4f:b7:fc:0c:ef:c8:e1:ca:ba:d6:9c:
                    04:a6:b0:21:aa:01:a9:8d:e8:a9:8d:e9:82:9a:7d:
                    ff:a2:f5:2c:39:b8:d9:c1:15:b6:52:5a:56:59:7c:
                    4c:cb:3f:8a:28:80:4d:87:f6:da:90:f8:6f:11:fb:
                    a1:41:98:24:55:7e:ed:d3:1c:92:f3:6b:da:07:00:
                    2c:b6:c2:0e:a9:3f:2a:da:a0:8d:57:fd:40:ba:98:
                    40:f1:83:8d:fb:b7:aa:9f:73:7b:c8:cc:38:5a:cf:
                    d7:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:81:90:F9:FD:C2:29:C3:0C:FA:2D:AB:08:FE:69:A9:EF:F0:8A:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5d256b58-e945-31af-a662-e8c77f324fdf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.71.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:3b:7d:ce:2d:72:d8:90:72:77:3c:a4:d3:cd:0c:dd:70:ac:
         6d:26:82:f1:a1:af:6d:3e:2d:9b:6e:91:23:7e:4b:fc:43:fd:
         c2:b3:ef:e1:1b:60:b1:64:8d:12:f9:a9:67:99:7d:fd:70:6e:
         2b:87:19:ff:3b:a0:8c:d5:71:b5:9e:ad:e6:69:ea:a7:bd:e8:
         54:f3:dc:1c:6a:d9:68:4f:27:de:f7:f1:0d:8e:3f:cf:08:b2:
         8a:d5:27:26:d2:fd:77:45:37:6b:33:d0:a9:80:d3:a1:22:9c:
         f6:df:75:d1:f9:b5:d4:9a:b7:f8:de:51:50:87:58:5b:ef:c9:
         83:6d:2c:e4:1d:db:7c:bf:58:34:a6:e0:68:4d:c3:82:bf:af:
         bd:a4:11:9b:56:c2:b6:55:26:8f:d6:4d:4a:44:0d:86:b4:bb:
         b1:b5:d1:98:9e:7b:82:c2:35:a6:eb:ad:49:f9:e4:7c:ee:f3:
         b6:a8:a4:2f:08:ce:c7:d2:61:a0:13:3c:f7:45:71:da:ed:cf:
         24:27:f8:9d:f1:a1:2e:00:8c:5a:81:e0:01:62:55:cd:ae:62:
         a8:80:b2:98:54:71:f1:0d:88:b2:a5:0d:f2:a8:35:a9:4c:c5:
         6a:c1:ee:97:44:f9:0d:2d:e9:3b:db:74:33:4b:cb:a8:88:c3:
         1d:19:51:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 03:46:52 2025 by rpki-client