Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3f1ea7ac-6a47-38b5-80a0-7b4419bf86ae.roa
File:                     3f1ea7ac-6a47-38b5-80a0-7b4419bf86ae.roa (raw, json)
Hash identifier:          U9xXlO45n3pNZVCwOwWpQNi+hXliLs3hj8C+yNkjQBI=
Subject key identifier:   25:05:BE:0B:91:64:67:B6:33:E0:36:B8:52:F5:4B:9A:00:7B:49:4E
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584ACCA6699C2F61CA16C057CE00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3f1ea7ac-6a47-38b5-80a0-7b4419bf86ae.roa
Signing time:             Sat 09 Aug 2025 13:00:41 +0000
ROA not before:           Sat 09 Aug 2025 13:00:41 +0000
ROA not after:            Fri 07 Nov 2025 14:00:41 +0000
asID:                     397201
IP address blocks:        199.7.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:cc:a6:69:9c:2f:61:ca:16:c0:57:ce:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug  9 13:00:41 2025 GMT
            Not After : Nov  7 14:00:41 2025 GMT
        Subject: CN=974466ae-e366-4c45-b17e-7091edde7b90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:fc:3a:8a:b0:68:ce:0a:4c:07:d8:07:89:f6:
                    72:96:15:29:08:60:4e:49:7c:18:0c:0b:e9:11:70:
                    9e:28:af:ed:9c:ee:dc:d6:18:1f:d6:3d:0e:03:f8:
                    b9:ea:f0:06:5b:9e:2e:08:98:ef:8b:27:53:74:47:
                    61:47:fa:1c:45:07:8f:dd:b7:91:0d:25:cb:4d:92:
                    6b:5b:36:1b:77:25:ab:09:eb:63:72:87:d4:75:74:
                    f9:44:73:8a:2f:14:37:5f:43:64:68:cb:57:31:cb:
                    bf:fd:44:96:e5:57:c9:6b:e1:2b:e1:de:de:f5:4c:
                    1f:53:1a:4b:c7:9d:90:bb:fa:0b:4a:6b:0b:c8:c6:
                    88:05:ba:dc:c3:f3:ca:3d:7d:6b:0d:30:ef:f1:ad:
                    91:72:a9:33:b4:11:eb:93:2a:0d:c3:d0:64:15:4c:
                    0b:77:b7:e4:e2:a7:eb:51:de:0b:7e:03:0a:90:72:
                    8c:4c:11:31:76:f1:11:cc:30:d3:20:bb:b5:b9:9d:
                    ac:1f:d9:3d:8f:a6:a8:29:21:58:38:9f:20:67:fe:
                    ad:7d:eb:de:b7:fc:5b:a5:55:7a:45:a3:a4:91:08:
                    be:e6:a9:f4:aa:b4:f2:3d:ae:ac:5b:ff:0d:41:f1:
                    d2:7b:d7:2a:d3:05:bc:6a:82:7e:45:7e:b3:6b:d4:
                    78:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:05:BE:0B:91:64:67:B6:33:E0:36:B8:52:F5:4B:9A:00:7B:49:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3f1ea7ac-6a47-38b5-80a0-7b4419bf86ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:a5:24:d5:44:af:f6:5e:ba:14:e9:87:76:5d:e4:0e:f7:06:
         c0:f7:e8:f1:70:38:d5:32:2f:93:c1:74:47:d3:db:25:04:56:
         1e:b4:ca:ed:99:09:d1:0e:97:84:62:21:4d:56:29:3d:36:e4:
         3a:0a:5e:c9:da:0e:11:b1:b7:e1:71:4d:a9:26:9e:1c:cb:6d:
         2a:4a:e0:80:41:8e:91:60:b5:d3:45:45:5b:19:8d:1b:e7:89:
         41:e7:e7:b0:90:67:65:3d:66:90:b5:ac:85:a9:04:ef:6b:ab:
         fe:0f:ce:8d:0d:b0:f5:21:90:66:a9:35:b6:f8:be:ee:d5:c8:
         50:47:d7:ad:cf:3c:24:04:bf:50:b5:c0:7e:e4:16:92:5a:57:
         2a:2d:6e:94:c6:cc:b5:d3:b8:5b:ae:24:d0:f4:cb:9a:0e:9c:
         b8:fc:b7:a1:3d:1d:dd:e8:d7:4c:80:ba:7e:67:a8:b6:cc:f5:
         95:33:eb:1a:bf:3f:ef:e1:2d:33:de:77:e6:a1:6c:c6:8f:b3:
         4e:b6:ff:00:c3:7a:02:bd:cd:94:91:df:2e:90:de:13:60:26:
         1b:bc:a8:4d:43:b3:93:6c:56:2e:29:d2:03:fa:aa:27:d6:fa:
         0e:ec:f4:e7:ad:a8:55:e5:5a:f1:99:75:51:fd:b3:01:51:27:
         cd:e4:36:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:32:21 2025 by rpki-client