Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/324c8af7-6d33-3a6e-b84f-3ccec4dafd77.roa
File:                     324c8af7-6d33-3a6e-b84f-3ccec4dafd77.roa (raw, json)
Hash identifier:          m3Twdha4uO19xBzNZjz6s5R1CxyIqJhmTohpG1EbqSg=
Subject key identifier:   82:14:C5:A2:63:BD:BA:E0:51:35:33:48:21:E5:DE:3A:2D:35:B1:C0
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584ACCA668A61097C695FE1992D4
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/324c8af7-6d33-3a6e-b84f-3ccec4dafd77.roa
Signing time:             Sat 09 Aug 2025 13:00:41 +0000
ROA not before:           Sat 09 Aug 2025 13:00:41 +0000
ROA not after:            Fri 07 Nov 2025 14:00:41 +0000
asID:                     396551
IP address blocks:        199.7.71.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:cc:a6:68:a6:10:97:c6:95:fe:19:92:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug  9 13:00:41 2025 GMT
            Not After : Nov  7 14:00:41 2025 GMT
        Subject: CN=80fc0408-338c-4cb3-b97e-fb21c4d13ad0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:ee:04:d9:68:fa:c1:06:2f:d0:5e:3a:79:50:
                    40:51:0b:ff:b5:ae:7d:92:16:8d:4d:f8:bd:ad:e7:
                    ec:c2:ad:3c:82:fc:73:a8:3d:1a:28:7b:e0:44:75:
                    a8:94:f9:1b:90:89:24:0e:67:9c:4f:21:72:fe:6a:
                    fe:9b:3a:12:7a:5d:a6:ed:89:cd:8e:e3:e7:a9:91:
                    27:77:72:a8:95:95:46:0b:e1:80:d2:e8:5e:99:8f:
                    ac:78:31:1b:c2:d7:97:cf:8b:b1:52:b9:82:1e:da:
                    6d:42:45:a4:de:f4:3a:04:9d:be:83:03:06:11:db:
                    90:c7:23:d8:62:67:0e:3c:66:28:3f:18:60:44:66:
                    2c:10:8c:aa:57:10:2d:26:50:59:c4:d9:b6:e2:58:
                    6f:70:eb:29:09:c4:e2:c6:06:41:27:f3:c2:a7:be:
                    d0:a9:75:83:20:1b:b7:47:2a:dd:56:2a:90:28:3a:
                    31:79:87:30:1b:b6:82:99:6d:24:81:17:c6:17:e1:
                    27:5b:c3:3c:c6:2c:53:95:fa:9c:ef:c2:a8:1f:ad:
                    ad:c2:f8:7e:47:de:fb:ed:90:98:ad:e4:42:c1:e6:
                    a7:e2:0d:ba:a4:a7:a3:2f:dc:11:f0:82:90:d5:0f:
                    80:57:5b:3a:b3:db:77:80:77:88:b4:6a:37:b0:e5:
                    69:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:14:C5:A2:63:BD:BA:E0:51:35:33:48:21:E5:DE:3A:2D:35:B1:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/324c8af7-6d33-3a6e-b84f-3ccec4dafd77.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.71.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:a3:05:d1:da:f2:98:6e:c7:73:9f:31:eb:54:c9:70:e5:31:
         60:ee:81:81:c4:98:f0:11:c2:d7:06:f4:6f:b3:69:f4:de:75:
         66:c1:6e:5c:58:1f:93:ba:98:7f:19:16:73:ae:ba:02:fe:4f:
         ba:53:3e:a7:f7:a0:6b:40:12:8a:89:da:63:f7:7e:0d:7b:5b:
         dc:4c:ef:73:84:58:52:ad:83:5b:32:5a:d7:95:dc:87:5e:13:
         cb:81:1d:06:fc:3f:7b:5b:8e:aa:fa:a7:9e:ce:22:9c:ef:4a:
         f6:f6:ef:54:05:ae:4d:e3:c2:a4:fa:4b:d1:7a:77:3d:f0:cb:
         6a:dc:05:82:9c:37:58:c4:39:f8:39:af:d5:f1:05:07:23:e3:
         ac:a1:e7:be:c8:8a:2b:74:99:63:58:87:63:a6:8a:e6:0e:a9:
         7a:06:ee:9e:c0:55:87:99:6a:8e:14:05:9a:80:9c:de:f3:44:
         82:2e:f4:af:cc:0d:71:d1:54:8c:89:6a:fc:44:63:24:0e:cd:
         e5:42:8b:fa:1b:20:49:eb:15:fb:78:f7:2d:da:8a:cd:57:1a:
         34:b4:eb:1f:1e:3e:8d:36:fe:f8:6a:3a:f5:51:d7:35:da:5a:
         a0:eb:11:11:5d:2e:91:75:26:4d:d0:3e:f5:e2:b2:10:02:e5:
         3e:85:38:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:07:46 2025 by rpki-client