Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e4e17339-8a5f-39cd-bddc-934cac0a288d.roa
File:                     e4e17339-8a5f-39cd-bddc-934cac0a288d.roa (raw, json)
Hash identifier:          qle2X4ALqlJdXkfe4OqkcqouRGfHOHVdEmJk51trMv4=
Subject key identifier:   76:DA:87:33:84:53:CA:29:B2:99:EC:70:82:ED:EF:43:75:EC:95:EA
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285849EBEA6D2DDC13009F4A5E67C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e4e17339-8a5f-39cd-bddc-934cac0a288d.roa
Signing time:             Wed 21 May 2025 01:00:49 +0000
ROA not before:           Wed 21 May 2025 01:00:49 +0000
ROA not after:            Tue 19 Aug 2025 01:00:49 +0000
asID:                     396582
IP address blocks:        199.7.71.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:eb:ea:6d:2d:dc:13:00:9f:4a:5e:67:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 21 01:00:49 2025 GMT
            Not After : Aug 19 01:00:49 2025 GMT
        Subject: CN=266bb272-795f-4ff4-a40a-10a7670849d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:f8:2d:dd:19:40:6a:37:36:e2:62:48:88:35:
                    4d:b8:2e:b8:b7:a3:95:e8:33:57:7f:b4:4c:27:e7:
                    00:46:11:d6:a7:4e:19:d7:ce:2a:e5:cd:a2:c7:76:
                    ab:6e:e3:c0:e6:5e:d9:95:3b:11:7b:1c:d0:56:1e:
                    7b:18:68:e0:d5:72:b1:0b:4c:5b:45:ac:84:76:f7:
                    7e:30:ed:ce:60:06:92:75:a9:a4:39:5b:18:78:44:
                    81:b4:c2:74:48:25:b0:50:8a:9c:0b:d0:89:b8:fd:
                    0b:f5:11:3b:ef:8f:16:fa:4e:65:8c:b8:04:40:0c:
                    7e:f8:69:b6:62:6f:c0:ed:1b:72:71:98:f0:16:b2:
                    0a:e4:00:25:47:fe:ee:f7:cc:5c:f5:50:d0:8e:89:
                    f9:d6:28:fc:34:17:c9:24:36:94:d8:9f:1f:61:bc:
                    e4:c4:2f:f9:6d:9f:67:3c:15:6b:ed:cc:6c:8e:46:
                    8c:ab:e3:30:be:b4:c0:11:84:c0:f7:fd:1a:0b:fc:
                    44:b1:d4:86:5e:75:12:4c:30:47:5c:6e:ac:9c:9d:
                    2a:e7:2a:52:91:aa:c2:7e:9a:aa:dc:03:b0:83:2a:
                    b6:ac:8e:92:51:b1:56:87:f7:38:51:5e:89:b6:26:
                    43:a8:8e:19:a0:79:b6:b2:f7:fe:5b:08:2e:c9:02:
                    e7:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:DA:87:33:84:53:CA:29:B2:99:EC:70:82:ED:EF:43:75:EC:95:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e4e17339-8a5f-39cd-bddc-934cac0a288d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.71.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:a1:81:6f:bc:1f:dc:14:56:d3:30:28:eb:fe:54:ce:00:19:
         db:34:2d:a8:da:5c:e5:02:80:43:32:27:cf:6a:16:9b:57:a7:
         c1:74:64:68:a8:29:0b:14:40:85:30:d6:6a:d0:32:b6:b1:ba:
         c3:a2:e8:c0:20:18:de:c2:b4:6e:d0:d8:54:55:a2:37:f4:c8:
         e9:93:ca:fd:3c:8d:3e:a4:c4:65:82:a3:5e:9c:83:8d:60:08:
         94:a0:6f:4b:ff:e4:3f:1e:c3:5f:df:e4:80:2f:37:36:cc:bb:
         06:8c:b3:d0:43:c8:a7:06:97:65:7d:96:fd:cd:60:fa:e1:86:
         ba:6b:07:56:07:9e:44:34:d7:5e:e9:a6:a0:29:ed:0a:48:a7:
         43:1e:1e:17:56:aa:b7:5c:1e:1e:89:53:ea:1f:da:1c:9f:20:
         81:ff:20:e5:a4:36:2d:c3:f0:b5:74:6f:0e:45:de:26:2e:0b:
         e6:c9:bd:a5:94:c4:eb:a8:e6:68:dc:ad:3f:3f:1a:eb:29:88:
         e5:21:b9:b2:82:47:99:e7:90:be:84:3c:f5:8f:98:f4:4e:ad:
         8c:77:3b:de:9d:7f:8e:7b:63:54:62:22:cd:f4:08:7a:5c:f9:
         ec:0c:86:77:e9:53:5e:82:17:33:b1:f8:c6:59:d5:71:5c:2c:
         9c:a9:bd:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 13:12:20 2025 by rpki-client