Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/db9250b4-4ec8-3dfb-8d9b-0528986bdde6.roa
File:                     db9250b4-4ec8-3dfb-8d9b-0528986bdde6.roa (raw, json)
Hash identifier:          pJjplqCtl82awrt+fL4aFMK67Wh7wiYHOmxCovY/j7E=
Subject key identifier:   D1:8F:8E:D2:26:96:44:0B:75:0F:15:C5:30:BD:66:AB:8D:C2:82:7E
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D6EDA775FB81B92D55CE1B190
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/db9250b4-4ec8-3dfb-8d9b-0528986bdde6.roa
Signing time:             Wed 08 Apr 2026 01:00:24 +0000
ROA not before:           Wed 08 Apr 2026 01:00:24 +0000
ROA not after:            Tue 07 Jul 2026 01:00:24 +0000
asID:                     36622
IP address blocks:        199.7.71.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6e:da:77:5f:b8:1b:92:d5:5c:e1:b1:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr  8 01:00:24 2026 GMT
            Not After : Jul  7 01:00:24 2026 GMT
        Subject: CN=eeffa559-2aef-42bf-807c-865d3967e2a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:14:24:ec:68:92:2a:63:97:94:9e:53:0a:23:
                    ce:f1:3d:9a:58:ab:2e:b9:bd:84:ac:78:a0:70:17:
                    47:47:f0:08:fb:51:58:97:3f:7e:09:da:be:94:b5:
                    2f:23:87:6f:59:b9:28:e2:a5:f3:af:5f:fd:9c:a1:
                    37:a5:bb:3b:24:86:cc:73:89:5b:b8:97:71:71:41:
                    61:16:4c:aa:a6:8f:fd:d4:9f:92:10:3c:64:dc:d5:
                    2b:e8:2b:3e:eb:fd:fb:9c:36:7d:ba:c4:0d:fa:ac:
                    e5:79:bf:41:c2:dc:62:17:d5:4f:94:07:55:38:f5:
                    04:b0:0b:d3:5d:51:c4:d7:43:6c:63:9b:17:9b:eb:
                    79:02:9b:74:b8:d7:dd:7c:0a:0c:70:6d:11:fc:ad:
                    98:48:61:10:37:b5:f7:dc:f8:3e:04:6f:f8:2d:9c:
                    86:de:4f:34:3c:e5:73:b1:b6:90:e3:32:43:85:81:
                    7c:12:11:87:c3:14:06:96:34:50:72:20:16:f7:42:
                    e4:45:5f:ac:9d:9e:54:a7:fc:a3:43:f5:e0:44:b4:
                    d1:84:1e:48:c7:0f:c2:67:bb:96:19:22:8e:43:34:
                    b4:e2:c1:2c:a3:89:2b:b2:ee:b3:21:f6:12:2c:c8:
                    d4:72:d3:2f:91:5a:98:df:49:98:42:a9:64:db:17:
                    8e:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:8F:8E:D2:26:96:44:0B:75:0F:15:C5:30:BD:66:AB:8D:C2:82:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/db9250b4-4ec8-3dfb-8d9b-0528986bdde6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.71.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:ba:c8:09:72:e2:3b:a5:be:33:62:c9:c7:32:36:1d:96:fa:
         c2:13:86:26:32:ad:b0:0b:8f:0a:69:2b:89:91:7e:0f:62:02:
         7c:39:9f:52:2d:ce:e5:dc:36:67:c6:a7:eb:2d:06:2e:62:e1:
         9a:99:7c:1f:bd:d9:4b:76:39:d8:45:30:0c:7c:4c:13:83:a6:
         f7:c0:e0:5c:11:06:6c:a4:b2:d6:4c:b4:17:21:ed:99:c0:63:
         f7:83:35:5e:10:0d:50:cd:8d:26:0c:d0:ba:42:de:90:18:8f:
         25:42:98:20:a3:77:11:6b:17:11:9f:69:d8:0f:ea:c2:72:9f:
         a6:b4:6c:04:11:8c:1d:53:32:31:63:88:35:45:aa:09:ec:72:
         19:2b:a5:95:c2:0f:fe:8d:ef:25:19:01:0f:2e:90:a4:ef:2e:
         e2:38:ab:29:c2:4f:62:66:6c:42:b9:e0:25:eb:6a:29:84:40:
         98:41:fa:63:2c:f7:66:0e:48:01:7d:9c:87:2a:bf:d5:db:04:
         c2:80:9f:b3:bd:9b:80:db:b0:a9:fb:cd:d9:b3:80:2e:82:e9:
         e7:f7:44:d6:46:a3:71:f9:02:63:a7:17:94:84:d5:9d:62:ab:
         34:66:70:36:66:99:dc:5f:13:c4:c0:0d:14:08:c1:f9:a5:08:
         0b:5a:28:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:14:39 2026 by rpki-client