Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c4eb463d-9f44-3516-8c18-4e679ff6f77d.roa
File:                     c4eb463d-9f44-3516-8c18-4e679ff6f77d.roa (raw, json)
Hash identifier:          mWLg02LdnNtGSJnWnAgqjxr87zvKmQZpqGDU1v8g1FU=
Subject key identifier:   75:B4:60:92:A3:D0:9C:05:A1:1B:27:6A:DE:C7:48:FF:35:11:CE:20
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285849EBEA6828070D2C88F6AA9E00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c4eb463d-9f44-3516-8c18-4e679ff6f77d.roa
Signing time:             Wed 21 May 2025 01:00:49 +0000
ROA not before:           Wed 21 May 2025 01:00:49 +0000
ROA not after:            Tue 19 Aug 2025 01:00:49 +0000
asID:                     25485
IP address blocks:        199.7.71.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:eb:ea:68:28:07:0d:2c:88:f6:aa:9e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 21 01:00:49 2025 GMT
            Not After : Aug 19 01:00:49 2025 GMT
        Subject: CN=7b8cd9b6-90f9-4fff-988a-d094204ccd5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:b5:4d:47:2c:26:dd:62:43:94:3c:8b:67:f3:
                    14:3c:b6:8a:fc:dc:6b:f1:de:c9:35:7d:f0:ee:99:
                    f3:fa:12:f5:28:61:ea:73:f6:b2:06:3e:60:0b:34:
                    4c:dc:5b:c9:12:71:af:8f:df:17:db:f7:53:2f:94:
                    a4:1b:05:b5:53:4e:c2:96:6d:75:84:4f:2e:76:d3:
                    ef:96:0a:7c:29:fc:f3:f8:26:d1:9b:92:77:34:c8:
                    34:c7:01:c0:ea:a4:1c:b8:16:39:63:0c:2d:f3:8c:
                    92:fd:35:6c:1a:d8:ec:8b:5e:97:05:c4:66:19:d1:
                    c0:56:76:be:8d:31:5d:25:ae:53:38:e0:92:d7:64:
                    4c:c6:e3:ea:74:e6:f5:61:79:9e:24:dd:d5:a5:5f:
                    24:9c:89:25:bf:7d:34:5d:7c:0b:5f:69:5f:33:2d:
                    8b:1f:73:39:ab:c2:ff:aa:da:8a:f3:60:2d:e2:b7:
                    fa:d3:e8:5e:d2:41:06:ec:99:17:0c:c5:14:c0:1e:
                    10:91:87:3f:cd:0f:a9:50:ce:37:e6:d9:22:a2:ab:
                    e6:de:b2:19:bc:01:24:c5:cf:2d:50:a6:d7:9d:2c:
                    6c:ed:b5:8d:99:5c:b2:09:eb:3f:01:99:54:ce:49:
                    d5:6f:52:b9:b4:83:43:8d:d8:35:2a:b6:df:6f:b4:
                    50:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:B4:60:92:A3:D0:9C:05:A1:1B:27:6A:DE:C7:48:FF:35:11:CE:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c4eb463d-9f44-3516-8c18-4e679ff6f77d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.71.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:d6:c1:97:8b:a5:bb:e9:4e:12:6d:8c:8f:8e:dd:94:51:a3:
         6c:c1:4e:0e:ec:a6:75:38:b8:10:1b:95:9d:66:f5:24:86:63:
         bc:fc:2c:f3:b1:ae:0e:74:88:e1:5f:ba:78:09:bc:ec:04:61:
         74:9a:78:1b:c7:01:86:0a:11:ff:59:3a:df:ae:e8:16:07:02:
         94:68:d4:76:a9:9a:33:71:c3:65:3e:0b:3d:aa:73:f2:af:cd:
         d7:2d:1e:6b:1a:32:80:c5:1c:4f:54:d2:c3:7f:fc:dd:e5:e4:
         1a:83:02:67:03:89:47:46:e8:0e:3a:d6:60:b5:e4:ff:c4:80:
         0e:82:99:8d:24:e7:1e:46:68:28:3b:cc:54:0f:74:df:ee:2b:
         9a:9d:df:42:2d:f7:ce:fc:3d:fb:52:c5:b9:ac:25:ab:83:d1:
         a7:58:2f:31:55:91:f7:4b:2a:83:ed:ae:00:ff:63:62:d7:93:
         d0:75:17:46:e7:c2:9e:ce:73:2c:99:bf:63:14:68:d3:70:76:
         0a:78:93:29:d4:c0:a5:c8:69:28:9c:cc:9f:e5:b0:35:f4:9b:
         21:64:44:88:fe:5f:a4:a4:24:a1:4b:79:f8:ad:76:e4:90:3a:
         20:cc:c6:8c:75:da:da:11:49:70:12:c0:24:6f:76:1b:8d:bd:
         fa:5e:8f:80
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEnr6mgoBw0siPaqngAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDUyMTAxMDA0OVoXDTI1MDgxOTAxMDA0OVowLzEtMCsGA1UEAxMk
N2I4Y2Q5YjYtOTBmOS00ZmZmLTk4OGEtZDA5NDIwNGNjZDVkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkLVNRywm3WJDlDyLZ/MUPLaK/Nxr8d7JNX3w
7pnz+hL1KGHqc/ayBj5gCzRM3FvJEnGvj98X2/dTL5SkGwW1U07Clm11hE8udtPv
lgp8Kfzz+CbRm5J3NMg0xwHA6qQcuBY5Ywwt84yS/TVsGtjsi16XBcRmGdHAVna+
jTFdJa5TOOCS12RMxuPqdOb1YXmeJN3VpV8knIklv300XXwLX2lfMy2LH3M5q8L/
qtqK82At4rf60+he0kEG7JkXDMUUwB4QkYc/zQ+pUM435tkioqvm3rIZvAEkxc8t
UKbXnSxs7bWNmVyyCes/AZlUzknVb1K5tINDjdg1Krbfb7RQTwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFHW0YJKj0JwFoRsnat7HSP81Ec4gMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYzRlYjQ2M2QtOWY0NC0z
NTE2LThjMTgtNGU2NzlmZjZmNzdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxwdHHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCL1sGXi6W76U4SbYyPjt2UUaNswU4O7KZ1OLgQG5WdZvUkhmO8/Czz
sa4OdIjhX7p4CbzsBGF0mngbxwGGChH/WTrfrugWBwKUaNR2qZozccNlPgs9qnPy
r83XLR5rGjKAxRxPVNLDf/zd5eQagwJnA4lHRugOOtZgteT/xIAOgpmNJOceRmgo
O8xUD3Tf7iuand9CLffO/D37UsW5rCWrg9GnWC8xVZH3SyqD7a4A/2Ni15PQdRdG
58KeznMsmb9jFGjTcHYKeJMp1MClyGkonMyf5bA19JshZESI/l+kpCShS3n4rXbk
kDogzMaMddraEUlwEsAkb3Ybjb36Xo+A
-----END CERTIFICATE-----
Generated at Mon Jun 16 13:10:52 2025 by rpki-client