Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/15f7ad2d-aaa5-346a-bf9a-95ce5abb4a12.roa
File:                     15f7ad2d-aaa5-346a-bf9a-95ce5abb4a12.roa (raw, json)
Hash identifier:          QxMfjp/dkyEwKS7yaXrTER4Tmh91FyUL5/aWHWUnvPA=
Subject key identifier:   0F:EC:02:E6:91:76:09:92:1D:3B:D4:88:BF:C8:CA:02:56:33:DD:42
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584ACCA670E2DDC0F8362C9D3E40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/15f7ad2d-aaa5-346a-bf9a-95ce5abb4a12.roa
Signing time:             Sat 09 Aug 2025 13:00:41 +0000
ROA not before:           Sat 09 Aug 2025 13:00:41 +0000
ROA not after:            Fri 07 Nov 2025 14:00:41 +0000
asID:                     36622
IP address blocks:        199.7.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:cc:a6:70:e2:dd:c0:f8:36:2c:9d:3e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug  9 13:00:41 2025 GMT
            Not After : Nov  7 14:00:41 2025 GMT
        Subject: CN=1a6e9271-ddd7-42a8-bf88-c31562f451fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:a8:71:6c:b0:e7:46:a6:78:9b:9f:4a:83:56:
                    b6:f4:31:3a:c7:b5:cb:99:70:b2:24:ee:83:9c:c9:
                    93:ae:fb:5f:4f:6e:71:ed:fe:39:22:0b:b3:ba:da:
                    42:b5:40:83:8e:90:81:86:c7:8f:bd:bd:92:0a:51:
                    9a:04:04:57:3c:be:11:91:be:f6:5c:38:bf:0f:93:
                    0d:6e:de:44:67:b4:b5:d8:9e:f0:d2:b6:da:b4:be:
                    42:a3:f1:c4:01:4a:c4:2e:c6:ed:23:77:ed:c6:f5:
                    7e:05:a1:a9:58:66:88:2c:0e:2f:a1:91:04:18:91:
                    ed:98:10:b7:00:09:d8:a2:1e:5b:1e:5b:67:7a:49:
                    26:1b:ab:5f:cb:2e:95:bd:7f:1c:39:8c:7c:73:9a:
                    9b:93:be:8f:53:c7:05:45:10:76:eb:6c:fe:a4:78:
                    e0:40:f8:dd:46:c8:3d:0e:07:cf:48:50:ab:46:ee:
                    a6:2f:21:72:27:1a:23:22:65:f1:b4:83:c2:1b:a3:
                    a6:b4:30:91:82:1c:b1:24:d1:79:c5:e3:54:be:ce:
                    39:2f:be:53:cc:17:50:c6:b2:e8:18:2f:ef:9e:5a:
                    99:9e:04:5a:f6:ef:50:9c:67:6a:5d:33:37:6e:48:
                    d0:6c:fd:bb:05:af:fc:c5:f2:28:73:09:94:8a:28:
                    6b:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:EC:02:E6:91:76:09:92:1D:3B:D4:88:BF:C8:CA:02:56:33:DD:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/15f7ad2d-aaa5-346a-bf9a-95ce5abb4a12.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:4e:28:8e:59:0a:83:9a:5e:c5:24:7a:21:dc:03:05:dd:28:
         18:dd:a8:c3:ec:5a:5d:22:30:37:08:10:f8:51:f1:30:34:ab:
         36:4c:ec:57:7b:f4:d1:0f:4c:5d:d3:b0:98:89:7c:03:79:d0:
         76:85:c7:1e:2d:84:fa:05:84:d2:8b:0b:c3:d5:8d:ef:15:4d:
         32:8f:07:75:ba:e2:88:4f:4d:9d:e9:ef:ec:69:c3:e0:9b:a6:
         49:be:55:1a:18:2d:26:34:99:56:6d:78:12:72:ea:ad:3d:d1:
         32:a9:6f:21:e1:b1:aa:1e:a6:4d:bf:0a:bb:7d:56:f6:e9:71:
         1a:dd:05:68:c4:52:9f:dd:11:66:d7:de:cd:4a:86:8c:48:e4:
         28:18:b7:72:69:6d:85:40:ed:f8:31:8f:62:13:f8:4f:83:66:
         ba:b6:5a:5b:b7:83:7c:44:f1:33:eb:bf:32:93:a1:e6:d0:7a:
         24:d1:13:4a:c2:43:93:49:79:aa:a3:1c:81:37:98:59:73:3a:
         f6:e9:ea:cc:e6:40:6c:77:f2:9e:dc:77:75:ef:6e:a8:49:76:
         71:ef:fa:db:c8:1d:aa:33:f9:32:b9:7e:e3:45:06:f9:0c:aa:
         b8:3e:ba:0b:71:e4:4a:dd:33:0a:ad:4e:d7:bb:5b:ff:61:0a:
         b2:95:5a:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:12:51 2025 by rpki-client