Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/67695a91-fa96-36eb-bb4d-73e4778580d6.roa
File:                     67695a91-fa96-36eb-bb4d-73e4778580d6.roa (raw, json)
Hash identifier:          tgpTUc7xLvaM40ieOKvPvJ6x+4QskxBRwAZhw9nIrig=
Subject key identifier:   AB:3A:3E:40:8A:F0:73:DB:76:98:7A:CA:CD:98:0D:A6:73:A8:70:A5
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285849EBEA799721C5BC849ED12F00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/67695a91-fa96-36eb-bb4d-73e4778580d6.roa
Signing time:             Wed 21 May 2025 01:00:49 +0000
ROA not before:           Wed 21 May 2025 01:00:49 +0000
ROA not after:            Tue 19 Aug 2025 01:00:49 +0000
asID:                     36629
IP address blocks:        199.7.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:eb:ea:79:97:21:c5:bc:84:9e:d1:2f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 21 01:00:49 2025 GMT
            Not After : Aug 19 01:00:49 2025 GMT
        Subject: CN=5502d09d-c4e1-4f84-bd43-bcb1d52ee512
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:f7:95:44:45:06:2c:ff:3f:26:15:3d:72:13:
                    ba:2d:3b:f4:b6:04:df:18:7c:f3:9e:84:fc:03:8e:
                    ee:9e:39:d4:a8:bc:22:2f:fc:c8:1f:f8:29:9a:bb:
                    59:dd:3c:29:1f:c6:09:55:ee:21:4d:06:61:17:98:
                    b7:8d:ba:b9:0b:99:98:42:ee:d8:1f:08:16:00:bc:
                    a8:43:b1:04:9f:c6:b8:31:68:a7:8b:c1:8b:f4:a2:
                    5e:18:51:12:53:c3:d8:da:82:f0:6e:98:45:a1:c3:
                    27:e6:ac:92:37:89:b6:12:64:7f:70:c7:15:b5:17:
                    c8:87:8d:75:11:ce:13:5e:3a:59:e7:18:4b:a3:7d:
                    ca:6d:47:26:47:18:10:55:a1:47:db:80:16:57:b1:
                    2e:07:0b:e4:9d:e0:82:e9:2d:76:9c:d5:9c:17:b4:
                    79:4f:6e:20:36:34:d0:ac:e0:81:ee:4d:ff:6c:d6:
                    b7:d0:e4:db:c8:db:d1:a1:4b:93:d3:96:b7:32:4e:
                    8a:d7:47:9f:66:8d:76:db:02:80:0c:f6:02:0e:a3:
                    23:5d:19:bd:08:d8:62:da:7b:c5:1b:ef:52:a6:40:
                    e9:4a:2c:f4:9d:77:e4:b3:66:c2:17:7a:78:cf:69:
                    71:92:18:bf:c0:1f:87:bf:7e:36:93:dd:e4:ab:37:
                    00:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:3A:3E:40:8A:F0:73:DB:76:98:7A:CA:CD:98:0D:A6:73:A8:70:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/67695a91-fa96-36eb-bb4d-73e4778580d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:8a:ff:0a:69:f2:73:45:9e:55:e8:f1:c5:f7:b2:6b:83:82:
         d1:8f:e1:f2:4c:d9:0c:bd:17:7e:99:04:88:6f:de:0e:3b:89:
         14:df:87:72:bd:ee:1b:9c:3c:87:6f:fe:a6:0c:ea:9e:9c:46:
         9e:4a:d1:85:2e:ff:a6:ce:13:29:fc:b9:be:e1:31:91:b7:bb:
         db:eb:b9:fa:30:fe:92:bc:0f:9d:ce:7f:12:a9:06:8e:9e:84:
         27:b2:a1:4f:59:90:12:96:7f:fe:f6:39:2e:bb:50:d6:e0:db:
         a1:11:ae:7f:e8:16:e7:14:b3:39:31:5b:d1:51:58:81:e7:fe:
         1b:5a:90:95:dc:f8:c2:92:1c:bc:47:9a:1a:a7:a2:da:b8:fa:
         0e:d2:de:ec:6f:64:d6:a2:a8:b0:94:05:ad:ba:34:81:bf:11:
         08:7d:92:92:c9:64:f8:bd:ec:91:60:ef:71:56:56:c0:07:1a:
         3e:20:db:3d:da:93:c2:17:ff:93:45:58:2e:e2:c8:4a:a2:19:
         a3:f3:dd:69:b6:e2:e9:2c:6e:ff:08:1a:d2:de:38:31:a3:89:
         38:00:52:8e:e4:e2:f2:10:f8:63:87:15:34:df:5c:01:d3:52:
         70:0f:64:5b:0f:0f:62:3b:0b:3d:bb:4c:65:3e:f2:22:e9:55:
         08:c4:c6:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 22:04:05 2025 by rpki-client