Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5601347b-9529-3996-8a0b-84e74f65897c.roa
File:                     5601347b-9529-3996-8a0b-84e74f65897c.roa (raw, json)
Hash identifier:          sZPeOTJZdeJJaU1zHi46slp0nz46/9m0KifMYj+aHBo=
Subject key identifier:   3A:1A:0B:22:F7:91:AF:03:4B:0A:CC:9C:45:DE:AD:E5:6F:BE:92:13
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EF18212F3C39D9C688B6C8E00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5601347b-9529-3996-8a0b-84e74f65897c.roa
Signing time:             Mon 24 Aug 2026 13:00:12 +0000
ROA not before:           Mon 24 Aug 2026 13:00:12 +0000
ROA not after:            Sun 22 Nov 2026 14:00:12 +0000
asID:                     396612
IP address blocks:        199.7.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f1:82:12:f3:c3:9d:9c:68:8b:6c:8e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 24 13:00:12 2026 GMT
            Not After : Nov 22 14:00:12 2026 GMT
        Subject: CN=c51c2fcc-2f4f-4ecb-bbcc-e9f5de94b786
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:61:2d:4b:9c:01:51:f6:35:70:14:f9:0c:22:
                    8f:65:7d:a0:34:10:da:00:6e:38:01:57:a2:c3:3e:
                    25:39:86:d6:87:c6:37:86:7c:ab:d7:9a:14:bf:f9:
                    3a:a3:7a:6d:06:b5:e9:89:57:cd:d6:b3:22:8d:ae:
                    61:ff:9b:3e:ec:20:a0:f6:2f:67:9a:dd:93:15:03:
                    ac:e0:9b:83:9a:27:83:4f:a5:04:a7:9a:63:f7:59:
                    81:71:3c:85:30:70:c7:6f:c3:93:80:15:9c:88:fb:
                    1b:f5:f0:4f:30:a9:af:81:1b:24:34:c8:14:8e:87:
                    02:41:b1:fc:8b:d7:1b:b6:ed:d4:4b:55:bb:c9:9b:
                    31:4c:ba:cb:b4:73:d4:8c:9a:05:f9:ba:7e:58:fa:
                    d4:08:32:8c:44:45:bb:fa:6c:5f:ff:ad:df:e1:b1:
                    dd:91:ec:13:32:e5:72:56:07:e9:3d:42:95:e1:b6:
                    e3:89:22:e4:b9:7e:5a:4d:b0:30:cc:43:57:7e:08:
                    55:39:59:3b:cd:5a:c4:c3:3c:77:34:6d:2f:39:4d:
                    4f:01:2e:3b:7d:6a:0f:41:39:00:d2:0b:1b:03:ba:
                    0d:89:fb:2a:71:66:31:95:0f:ab:cc:ec:bd:e3:09:
                    20:ad:4d:87:12:aa:5f:3d:5b:bb:9d:ad:3a:0c:a3:
                    7f:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:1A:0B:22:F7:91:AF:03:4B:0A:CC:9C:45:DE:AD:E5:6F:BE:92:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5601347b-9529-3996-8a0b-84e74f65897c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:1e:b9:59:f4:2d:85:cb:99:a4:81:7a:e3:3b:ff:31:ca:18:
         6e:1a:58:8c:16:37:2c:c3:e1:b5:ff:96:34:80:3e:ed:52:f5:
         32:a5:2f:f4:14:48:a9:22:c1:d3:7f:c5:96:ff:03:2c:38:f5:
         86:1a:9c:db:15:b9:8a:14:0a:9a:45:97:78:66:dd:7b:e0:ab:
         45:43:62:70:48:d9:b8:6e:7f:30:94:e9:11:02:6f:ba:24:4e:
         e8:c9:0a:a9:61:66:98:b9:87:2a:f9:96:3f:11:1c:c7:71:99:
         e9:ba:1c:9f:fe:20:18:28:ba:39:cf:36:b8:3a:e5:6d:b6:f7:
         97:ca:16:23:e8:7a:75:ad:63:4b:96:ba:62:dc:74:a2:24:35:
         b8:04:32:88:0f:08:ba:48:61:5a:d2:5e:2c:f6:fb:93:f8:fd:
         45:6e:a2:41:f1:69:f4:6d:76:b9:21:66:b8:f0:c3:f3:23:d5:
         72:b2:20:46:ac:5f:79:41:db:a5:18:54:b5:69:87:9d:16:ad:
         f8:ea:71:0a:39:63:ee:10:1e:f9:55:0b:60:1a:ab:2b:49:29:
         7a:d9:8d:42:d9:4d:de:7d:6c:b6:35:86:b8:1e:ff:70:59:00:
         5b:7a:26:90:75:00:04:0e:32:41:97:e4:eb:f2:3b:99:80:9f:
         ac:0a:98:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 00:52:29 2026 by rpki-client