Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7f079b23-835a-3c53-86f6-65ff1168007c.roa
File:                     7f079b23-835a-3c53-86f6-65ff1168007c.roa (raw, json)
Hash identifier:          xyie2aFHu1xNW3Qy5k0T3aPXqGl+ZjQDWzRUgR3vpCk=
Subject key identifier:   6B:1E:B7:A4:20:05:E7:13:FF:D1:4B:D4:85:9D:ED:A6:21:11:16:4C
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285849EBEA6994DA412CCEC78D6700
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7f079b23-835a-3c53-86f6-65ff1168007c.roa
Signing time:             Wed 21 May 2025 01:00:49 +0000
ROA not before:           Wed 21 May 2025 01:00:49 +0000
ROA not after:            Tue 19 Aug 2025 01:00:49 +0000
asID:                     396552
IP address blocks:        199.7.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:eb:ea:69:94:da:41:2c:ce:c7:8d:67:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 21 01:00:49 2025 GMT
            Not After : Aug 19 01:00:49 2025 GMT
        Subject: CN=243fd7a7-aaff-4f81-a8c1-84aebb84bd6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f1:b3:ec:ff:4a:bf:7a:47:38:90:b3:af:28:
                    7f:33:dd:fa:83:be:db:54:07:2f:ad:5f:cc:c5:35:
                    42:35:c2:62:84:d7:42:85:95:25:32:03:96:18:4e:
                    48:e3:dd:45:6d:2c:15:34:39:f7:e9:59:f5:de:2d:
                    01:9a:cd:74:0e:e8:70:96:58:5b:c7:d4:73:93:e1:
                    5c:db:b8:52:2f:74:9d:42:d1:5f:82:ed:49:40:05:
                    df:da:43:d8:ff:df:1c:0a:b7:78:ad:10:32:06:74:
                    c5:26:9a:c3:42:a4:7d:61:8b:fd:23:ff:0b:ff:66:
                    60:cb:1e:9d:a4:54:47:b4:56:b8:5c:f6:1c:93:0a:
                    bd:db:9e:5c:bf:4a:06:e3:ce:ed:21:6d:f3:db:60:
                    5f:28:7a:30:24:18:e0:78:3b:66:63:22:ab:80:df:
                    13:01:b3:ca:c5:94:72:31:1f:76:8b:20:a1:d5:ea:
                    40:d4:bb:8f:5a:a9:3d:ba:ab:6c:fd:62:7b:5e:0f:
                    ac:45:56:68:f2:70:40:41:94:8d:c4:09:a7:91:85:
                    aa:94:7f:0a:51:82:77:d9:34:ab:fa:33:61:ea:66:
                    1b:44:c6:d8:84:f9:70:6d:6f:1d:22:6b:47:f9:79:
                    aa:ba:c3:b5:76:d5:19:f3:b8:75:eb:6c:55:2a:7a:
                    a3:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:1E:B7:A4:20:05:E7:13:FF:D1:4B:D4:85:9D:ED:A6:21:11:16:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7f079b23-835a-3c53-86f6-65ff1168007c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:bf:7a:39:e4:af:82:3a:c1:bf:dd:1c:fb:b0:69:5a:1c:d3:
         d9:43:58:fd:69:20:c1:fb:4b:4a:fd:6b:fe:07:fa:68:7a:a0:
         6e:d9:04:ac:35:70:d1:a9:0d:84:91:c2:23:60:07:44:46:59:
         50:2f:e2:7e:69:8e:23:9e:a9:dc:e8:af:26:f9:b4:03:be:ef:
         29:29:2d:1a:c5:62:c0:2a:dd:e1:37:34:f8:1e:ce:ac:6e:6f:
         0a:96:68:fa:6f:d8:b8:92:45:71:cf:c3:11:f0:b1:89:dc:a7:
         f4:f5:89:19:51:0e:43:9a:f5:e2:1a:6d:84:47:2a:1c:9e:af:
         be:4e:c7:ad:6d:77:6a:02:01:8d:0b:51:4a:04:2a:33:a3:eb:
         e1:17:25:ed:ee:64:86:1f:04:56:9b:dd:e8:9b:71:b7:dd:7f:
         6c:ac:6b:f1:b4:78:70:17:80:ec:55:d6:c9:1e:62:37:80:36:
         f4:74:79:0f:0d:31:fd:fd:53:af:9f:d2:a8:ac:60:42:11:2d:
         15:b7:61:13:46:04:8c:2b:46:91:7b:6c:37:43:14:c1:47:f0:
         71:14:92:ab:c1:52:9f:ec:0f:11:ee:ed:79:17:11:d8:c4:cf:
         83:13:cd:b2:f7:a1:24:03:df:6a:15:8a:af:84:a4:01:a9:87:
         69:2d:a6:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 05:35:37 2025 by rpki-client