Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e4a1272d-7129-3604-884e-4449e4d0d8b1.roa
File:                     e4a1272d-7129-3604-884e-4449e4d0d8b1.roa (raw, json)
Hash identifier:          hzPjGdyF2a13yXUQDIQjPo0MuMAMyeIuZGrxkbEEXCU=
Subject key identifier:   B3:C2:59:EF:B8:8F:3F:43:0E:29:FB:E5:F0:F5:99:34:1F:F7:39:28
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EF182158A2FB37AB4B2D97E80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e4a1272d-7129-3604-884e-4449e4d0d8b1.roa
Signing time:             Mon 24 Aug 2026 13:00:12 +0000
ROA not before:           Mon 24 Aug 2026 13:00:12 +0000
ROA not after:            Sun 22 Nov 2026 14:00:12 +0000
asID:                     36632
IP address blocks:        199.7.71.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f1:82:15:8a:2f:b3:7a:b4:b2:d9:7e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 24 13:00:12 2026 GMT
            Not After : Nov 22 14:00:12 2026 GMT
        Subject: CN=aadf9e58-94ae-4275-b44a-2abc5a5c6bab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:b9:cb:e5:20:05:30:bf:0b:1e:fd:04:13:09:
                    eb:50:6b:53:e7:f4:61:79:8d:7a:52:56:00:7b:a1:
                    42:88:11:c4:55:f6:5a:88:c1:f2:50:56:ee:95:37:
                    61:9b:b1:cd:4f:7a:03:ae:3e:36:3d:fd:ad:52:de:
                    f1:8c:54:af:0b:d6:12:17:92:7c:49:1b:b5:9f:ab:
                    10:a4:60:c0:50:78:5f:6e:57:a8:dc:45:09:34:f3:
                    8d:d5:48:ee:32:fd:a4:bc:35:af:d6:59:6b:67:53:
                    73:06:c1:db:da:2f:5b:56:1d:df:99:c9:30:f3:ec:
                    97:26:74:6c:64:64:cc:64:04:4d:a4:a8:ef:4d:df:
                    b7:84:25:f3:6c:e3:09:ea:f1:6b:96:8e:8a:08:f1:
                    23:b2:3d:cc:94:04:1b:53:f0:41:14:bf:01:cd:12:
                    da:64:62:9e:f8:97:3c:36:ad:47:3a:09:d1:18:b6:
                    28:ec:f4:94:db:5f:c0:0c:64:53:9a:54:b3:86:79:
                    3c:a7:f3:98:a0:4b:9d:8b:d2:22:10:b5:9a:6a:84:
                    65:75:71:c8:ae:cf:fc:e4:01:94:5a:10:3f:ff:ca:
                    20:e7:d4:61:92:84:0a:dd:48:86:8d:d8:b3:bd:12:
                    57:f6:5c:43:1c:13:ac:20:94:cd:34:67:00:d1:d4:
                    1a:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:C2:59:EF:B8:8F:3F:43:0E:29:FB:E5:F0:F5:99:34:1F:F7:39:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e4a1272d-7129-3604-884e-4449e4d0d8b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.71.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:bd:b8:ef:95:d9:99:91:dd:b7:24:2e:4b:bc:55:e6:06:94:
         91:ef:8b:56:59:ef:68:9e:56:90:ec:60:40:d6:29:ce:05:6c:
         d0:69:2e:23:32:1f:51:d9:bc:04:51:9a:91:3d:d3:eb:89:c8:
         56:a8:24:50:19:53:d9:59:87:d7:ca:46:f3:4e:30:86:d0:93:
         e5:ae:dc:fa:8d:ce:3b:aa:26:81:ce:21:b7:12:fd:e7:62:f4:
         79:61:27:51:b4:8b:48:64:6e:18:30:a3:54:e3:87:63:1b:21:
         db:41:85:91:1d:81:80:ea:1f:45:b7:81:1a:9e:48:98:3c:40:
         77:df:6b:11:8b:51:55:df:d3:86:8a:0b:b6:ec:b3:d8:52:b6:
         89:7f:9e:3e:bb:6d:33:fa:7d:e6:76:9f:ee:36:3c:3b:b2:38:
         d7:46:39:b4:a4:4f:2f:b9:d9:66:0e:61:ee:a6:a1:0d:68:67:
         36:35:e5:59:4c:6a:f2:d9:36:44:3c:31:60:07:d1:36:1b:34:
         46:84:c7:4e:c5:a6:ca:49:a8:43:60:37:7f:2e:90:40:3e:65:
         eb:e8:1f:29:a2:99:23:13:02:cd:17:3c:c1:45:85:80:99:0d:
         e6:9e:81:a2:ab:b7:66:de:d9:82:88:07:3e:14:66:15:90:0b:
         ff:1a:6b:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 22:58:43 2026 by rpki-client