Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/49181f68-05b3-3ec9-92b2-2ae39c37f882.roa
File:                     49181f68-05b3-3ec9-92b2-2ae39c37f882.roa (raw, json)
Hash identifier:          0Z5Hlo7zYxm2Z/zNacSLI+lqY48yAezXIuTmnOB/bE0=
Subject key identifier:   C8:65:79:BB:75:96:1C:55:CD:4B:92:9F:DD:6C:F2:F9:05:1B:D1:20
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584ACCA6782DDE3DA411A0705E00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/49181f68-05b3-3ec9-92b2-2ae39c37f882.roa
Signing time:             Sat 09 Aug 2025 13:00:41 +0000
ROA not before:           Sat 09 Aug 2025 13:00:41 +0000
ROA not after:            Fri 07 Nov 2025 14:00:41 +0000
asID:                     397207
IP address blocks:        199.7.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:cc:a6:78:2d:de:3d:a4:11:a0:70:5e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug  9 13:00:41 2025 GMT
            Not After : Nov  7 14:00:41 2025 GMT
        Subject: CN=1b0e5258-8a26-4dc4-95fa-a55666abd4c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ba:72:78:8a:10:0b:2c:2d:2f:c4:f6:48:7f:
                    5f:5e:9e:00:89:f5:59:b5:4a:36:61:c7:7c:c7:6d:
                    fa:2f:59:16:17:7a:83:bc:d6:0d:cb:0b:2d:54:f6:
                    48:6e:09:24:bc:bf:b6:7b:1e:d5:23:72:09:c6:c8:
                    43:29:86:23:0a:c7:1e:24:7e:78:be:99:8f:35:70:
                    ec:da:d6:cb:1c:c5:24:e4:4c:8a:45:85:d3:de:6f:
                    0f:12:4c:f5:82:ef:86:b0:b7:d8:40:15:02:51:14:
                    c9:a9:11:dc:f4:dd:2d:00:e5:e2:e7:65:5f:02:5e:
                    5e:d2:55:2b:45:42:6b:4d:e8:8d:f9:2b:50:3b:df:
                    18:d7:82:e4:0d:4a:cb:cb:51:3b:0a:66:59:d2:26:
                    28:1e:28:47:3b:f1:ca:dd:a8:94:0a:49:7c:d3:63:
                    61:ff:22:48:2e:b6:69:2e:9f:43:3f:85:01:da:51:
                    b4:03:23:5c:01:d2:4f:18:db:ab:c8:e5:09:a3:63:
                    ed:f5:7c:61:d9:22:10:03:8d:96:7e:84:fb:bc:3a:
                    f8:32:c9:13:81:5a:e1:1c:5c:98:c6:bf:98:7f:c1:
                    c5:6c:4e:36:bf:f5:96:5e:33:b8:c7:63:e9:2e:ad:
                    dd:18:42:6a:95:51:70:84:de:32:e8:27:f5:f1:83:
                    2f:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:65:79:BB:75:96:1C:55:CD:4B:92:9F:DD:6C:F2:F9:05:1B:D1:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/49181f68-05b3-3ec9-92b2-2ae39c37f882.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:e6:40:48:04:18:24:99:19:1c:8b:a2:f8:5f:59:52:2c:46:
         52:79:0d:e1:8b:fd:76:82:38:83:d0:f3:95:c1:5d:dc:ef:c2:
         6d:dd:ad:81:73:02:d4:a2:02:eb:68:31:cd:2b:67:65:91:0d:
         4d:60:bd:d1:ee:31:37:d4:13:c7:03:f5:c6:1a:94:7b:a8:cb:
         88:22:4d:42:e7:e2:11:56:ed:fc:6e:da:be:2f:5e:3b:ea:60:
         df:07:9b:74:d3:dd:69:e6:83:50:b7:a4:9f:1a:20:24:04:ad:
         7c:df:ff:78:a8:44:7a:d3:aa:d1:17:75:f8:4b:14:ff:4a:d1:
         59:45:fe:46:f8:7b:4b:88:5d:f9:57:b1:3d:ab:c3:bf:f3:21:
         ad:e6:93:aa:59:0a:b9:26:22:e7:27:6e:36:60:38:e8:4c:2d:
         1e:7f:28:2c:e9:25:38:cd:22:85:19:83:b1:29:f8:db:08:da:
         b8:ba:0c:ec:69:ec:32:a7:2b:5c:ad:31:1d:0f:3a:fc:7b:f6:
         d9:22:1e:af:16:1b:3b:65:f5:a4:0f:2c:9a:2e:6c:44:ad:ef:
         52:1f:e1:78:66:65:c1:3c:0f:4f:b8:b3:b6:5b:14:fa:50:16:
         b4:ea:8b:a2:29:ea:e2:6c:d2:9d:d1:67:dc:98:f7:14:11:64:
         65:a0:a4:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:42:02 2025 by rpki-client