Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/477bc1ad-9947-3796-ad6e-fc31f7e914d1.roa
File:                     477bc1ad-9947-3796-ad6e-fc31f7e914d1.roa (raw, json)
Hash identifier:          GWWQK/+lovKwW8vOOYAeF+Zj8GFgN7j1o6ZbM0QP+3w=
Subject key identifier:   07:93:89:6F:3C:0A:BB:D8:A1:35:D0:F1:F2:E3:19:FB:34:01:F9:96
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584ACCA67DE4F8F0661F6AB3D360
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/477bc1ad-9947-3796-ad6e-fc31f7e914d1.roa
Signing time:             Sat 09 Aug 2025 13:00:41 +0000
ROA not before:           Sat 09 Aug 2025 13:00:41 +0000
ROA not after:            Fri 07 Nov 2025 14:00:41 +0000
asID:                     396567
IP address blocks:        199.7.71.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:cc:a6:7d:e4:f8:f0:66:1f:6a:b3:d3:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug  9 13:00:41 2025 GMT
            Not After : Nov  7 14:00:41 2025 GMT
        Subject: CN=5f80decd-9fec-4baf-a761-9dbdab6b75f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:1d:aa:0a:18:44:39:82:bf:fd:72:e9:f5:cb:
                    a8:72:86:d7:ef:87:e4:98:a8:ac:78:dd:1b:11:92:
                    a0:77:3f:d9:f6:c3:a1:18:44:c8:18:9b:83:65:fd:
                    36:b5:01:b4:cc:3b:25:f0:90:08:57:95:d1:eb:a8:
                    ee:0d:b1:7a:59:85:f5:6b:c8:6a:fe:6b:10:86:9a:
                    dc:d7:8a:b1:cd:f2:d5:5b:7a:27:80:e9:2f:aa:76:
                    ab:8c:95:2a:76:ae:a2:bc:40:1e:50:ba:f3:7c:92:
                    97:f2:4d:c3:d5:e6:49:2c:05:d9:ac:a3:24:55:45:
                    bd:a5:47:eb:5f:4d:a8:1f:c1:46:05:c8:e0:c4:fb:
                    04:9b:b5:31:11:5e:b9:5e:1f:c7:58:16:4d:33:a5:
                    f3:42:04:bb:ed:6d:60:35:00:58:f6:5e:3c:11:96:
                    e5:13:54:5b:a6:bd:28:cb:a4:95:95:3c:8c:09:c4:
                    05:72:3f:b1:80:a7:64:ee:88:9b:0b:43:b4:ad:8c:
                    9e:18:c7:12:38:d3:0e:5f:fe:bb:c0:c7:0a:c9:cb:
                    5a:92:10:bc:02:de:2a:58:d5:33:8e:15:ba:d7:10:
                    1a:64:84:3c:4e:c5:86:54:8d:29:f2:fc:0a:4b:d8:
                    67:b3:e6:e0:75:99:b5:54:aa:8b:0a:6c:63:1b:08:
                    0f:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:93:89:6F:3C:0A:BB:D8:A1:35:D0:F1:F2:E3:19:FB:34:01:F9:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/477bc1ad-9947-3796-ad6e-fc31f7e914d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.71.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:5c:63:4e:6c:9e:cf:7d:15:10:1d:17:bb:12:c5:8b:a8:23:
         c7:18:6c:37:d6:3c:9b:3f:0a:4d:dc:24:b8:35:98:5d:dd:1e:
         1e:00:a5:e8:82:79:eb:ce:59:a5:05:9e:f1:d4:27:38:ce:51:
         91:09:bd:74:d8:43:91:5d:c4:e2:99:90:11:6c:43:96:89:30:
         2a:de:bc:08:4c:ae:4c:cf:99:c6:63:d0:d6:5a:30:db:2e:18:
         00:66:1c:18:16:c0:0e:79:94:d1:09:9b:71:c2:4b:31:2f:74:
         0b:48:03:04:55:b1:ee:e7:bc:d4:3a:f1:61:19:6e:f8:2f:eb:
         98:e8:e7:2f:82:da:6e:ef:49:7f:f8:7f:09:36:d9:b0:d3:b4:
         42:55:b6:16:8b:16:2f:64:a7:0d:de:e2:3d:c6:cc:33:53:e5:
         ea:db:47:bb:b3:41:e3:fa:ea:eb:41:54:28:f4:43:15:11:41:
         82:7a:1c:db:22:87:9d:89:a3:41:cb:62:5c:fc:1f:1e:d1:bb:
         8b:84:04:92:0c:48:2e:93:f7:79:72:5f:57:d4:66:1a:df:20:
         da:18:29:a1:e7:a8:4d:41:58:d7:f7:f0:4b:eb:ec:91:82:a4:
         d4:fd:1b:ed:83:a7:ab:c7:47:17:d6:f1:ad:58:e2:bd:0d:7b:
         77:ca:a4:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:16:49 2025 by rpki-client