Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/19c06e26-011e-3736-9d0e-1ad1d9f752b0.roa
File:                     19c06e26-011e-3736-9d0e-1ad1d9f752b0.roa (raw, json)
Hash identifier:          wOQj+1i0ybfpk16gTiDJ7SAM4C7c7SiWKe8JoU+8P2I=
Subject key identifier:   13:F6:E4:E7:C6:FA:3D:2C:56:79:8C:03:65:53:1F:40:79:DB:A0:52
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584ACCA67D8D25FD51EA2674AA50
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/19c06e26-011e-3736-9d0e-1ad1d9f752b0.roa
Signing time:             Sat 09 Aug 2025 13:00:41 +0000
ROA not before:           Sat 09 Aug 2025 13:00:41 +0000
ROA not after:            Fri 07 Nov 2025 14:00:41 +0000
asID:                     396573
IP address blocks:        199.7.71.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:cc:a6:7d:8d:25:fd:51:ea:26:74:aa:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug  9 13:00:41 2025 GMT
            Not After : Nov  7 14:00:41 2025 GMT
        Subject: CN=240283d9-007c-4ffa-8785-b4e1b0e3aff6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:be:73:0f:92:97:3a:4b:b1:ee:c0:48:c5:69:
                    9c:c3:c9:8f:c9:6f:da:df:ac:98:e0:e9:0a:a1:6c:
                    d7:24:aa:24:19:b7:d4:f9:1a:b3:ea:54:0a:49:2a:
                    0a:42:00:6c:08:96:79:15:5f:c5:72:1d:de:41:e0:
                    cb:2b:7c:50:20:c6:03:cd:52:37:2b:d3:47:46:73:
                    a8:75:38:46:67:78:f3:1d:67:da:65:e8:71:6d:b6:
                    ff:c7:a7:0f:86:5e:16:32:26:70:e3:56:0b:3a:12:
                    9c:d2:c6:9a:3f:0c:5e:17:a6:ba:ce:bc:29:55:59:
                    4c:21:04:fe:e6:9c:22:8a:19:b7:a8:b3:59:d6:2a:
                    51:eb:ac:b4:2c:d4:7b:2c:bd:a8:6f:18:27:eb:4f:
                    44:66:65:22:c2:65:80:26:17:b6:df:d6:09:5d:5b:
                    63:3b:69:0a:5f:e0:e2:26:9d:2a:98:c9:22:2a:ed:
                    d2:de:c5:83:40:3f:33:50:38:3f:da:65:83:b3:fb:
                    eb:97:e8:07:bf:60:be:71:4a:77:e9:13:34:1a:97:
                    64:81:00:19:bb:11:ab:bf:26:22:63:4c:5b:31:2d:
                    cb:07:1b:9f:a6:22:0d:df:09:07:f1:ab:06:91:60:
                    98:b3:17:6b:d5:91:a4:1d:b1:94:b3:fd:b5:22:9a:
                    b1:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:F6:E4:E7:C6:FA:3D:2C:56:79:8C:03:65:53:1F:40:79:DB:A0:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/19c06e26-011e-3736-9d0e-1ad1d9f752b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.71.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:ff:d1:9d:6f:29:f7:b5:44:43:14:0d:f6:10:91:4f:60:25:
         e9:5a:1c:05:1f:6e:7b:07:1c:68:f1:a5:4a:13:c2:38:4a:b9:
         51:eb:23:4d:bc:dd:87:24:84:80:05:78:12:55:87:ae:af:cf:
         0c:a7:d6:62:71:b8:4e:5b:36:97:fc:92:1d:cf:37:41:7e:4d:
         ac:76:03:6f:7d:36:6d:4b:1a:f6:20:7c:af:be:2c:ec:c8:de:
         0a:e7:4b:a0:ce:d4:34:8d:56:83:ad:89:9b:36:a1:3f:8d:ca:
         79:88:b8:d4:ca:e1:35:21:3e:50:68:c5:37:ab:00:3c:cf:08:
         ec:5a:74:71:5c:aa:cb:75:ef:43:fd:41:a3:e3:18:53:26:87:
         7c:03:60:6d:02:55:04:86:cd:a3:f4:64:01:b0:ba:1a:c9:ba:
         d2:05:16:a0:ea:ef:74:74:b5:3b:bb:ce:88:92:43:e9:fb:8b:
         0d:c9:78:fc:ac:83:c8:44:67:31:04:c1:08:ba:8a:75:1a:63:
         e7:d4:07:88:1f:bd:4f:a5:f9:e2:8a:56:8a:77:f1:e4:46:a3:
         7a:8b:d2:9b:d6:33:03:de:89:55:d4:9a:5d:4b:07:2e:19:e1:
         15:45:10:94:b9:34:b6:6e:f0:46:37:2d:97:b4:aa:51:e0:b5:
         00:2e:df:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:10:29 2025 by rpki-client