Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5601347b-9529-3996-8a0b-84e74f65897c.roa
File:                     5601347b-9529-3996-8a0b-84e74f65897c.roa (raw, json)
Hash identifier:          V0xwkDpai/HbUBq9pwPEhyXAdrChlIz9I1v2PxR6BsQ=
Subject key identifier:   B3:6D:8B:C6:DE:EF:E7:43:23:D0:16:75:4C:B7:86:82:BC:51:7A:A3
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584ACCA6691989D5E78ABA3E2620
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5601347b-9529-3996-8a0b-84e74f65897c.roa
Signing time:             Sat 09 Aug 2025 13:00:41 +0000
ROA not before:           Sat 09 Aug 2025 13:00:41 +0000
ROA not after:            Fri 07 Nov 2025 14:00:41 +0000
asID:                     396612
IP address blocks:        199.7.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:cc:a6:69:19:89:d5:e7:8a:ba:3e:26:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug  9 13:00:41 2025 GMT
            Not After : Nov  7 14:00:41 2025 GMT
        Subject: CN=1bfb8ed1-e4b8-43d3-adf4-922aefeabbc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:47:ea:23:cf:40:d8:8e:f1:e9:e4:98:21:63:
                    19:8c:e3:67:5b:b2:ca:9e:f9:96:1c:6b:f6:5d:42:
                    a1:89:77:03:cd:e3:0a:50:90:53:a9:80:f8:27:f7:
                    ab:a3:12:dc:04:e2:ff:12:0d:1f:44:4a:fe:f9:ce:
                    34:b4:b4:1f:49:60:59:86:ff:cd:9e:3b:e4:db:f5:
                    27:8b:6d:e2:39:c6:dd:ce:50:23:b4:d5:13:2e:42:
                    25:39:9a:73:39:82:14:19:e7:a4:7a:5d:fa:ab:94:
                    5e:72:fe:56:a8:0e:e7:10:5d:a3:45:25:cc:f5:24:
                    14:84:5f:68:2d:55:ce:90:f3:47:11:a6:eb:12:8f:
                    82:e2:fe:f6:1f:bb:bf:f4:67:dd:12:f1:3c:4a:6d:
                    42:44:52:58:f4:b5:e3:c9:05:0c:72:20:b4:eb:d4:
                    b9:8f:f2:5c:ed:0f:35:ac:cf:35:7d:e0:6d:55:dc:
                    3c:51:20:82:46:96:67:4d:f2:57:c4:22:90:d5:53:
                    60:02:86:7f:c6:2d:e0:7a:ef:e4:08:45:7e:da:70:
                    1f:f8:c5:e0:ad:ec:5d:e3:e4:87:42:c3:4b:e8:7b:
                    f3:64:c6:24:6a:9e:0b:93:06:35:7e:a9:5e:7a:9c:
                    89:ab:b2:a1:89:da:8b:a2:c5:bc:0b:c4:15:31:ba:
                    a8:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:6D:8B:C6:DE:EF:E7:43:23:D0:16:75:4C:B7:86:82:BC:51:7A:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5601347b-9529-3996-8a0b-84e74f65897c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:67:91:74:7a:cf:13:52:6c:a2:65:3e:4a:0d:cd:d0:86:e3:
         94:d8:87:da:bc:98:6e:ac:a8:94:56:63:60:3f:02:04:d5:88:
         8c:33:00:09:61:e1:f1:96:dd:c6:36:a2:55:1e:b7:56:4f:4a:
         c3:53:c8:0b:71:2e:74:f6:6c:48:17:89:60:14:c5:df:92:ff:
         6d:c0:c2:5c:f7:82:ca:a8:11:27:f1:3c:04:f2:ce:8c:ed:57:
         3c:fa:09:46:22:09:ca:bc:e5:79:6c:ae:7f:d0:b5:17:b7:4d:
         b5:ad:57:0a:a8:07:e2:b4:9f:68:43:2b:71:ec:2f:ed:5d:e7:
         00:a4:f9:e4:24:86:1f:b1:85:80:45:58:81:35:86:77:9a:f8:
         32:eb:c5:08:2d:ee:6d:62:ba:ed:e2:3a:7c:62:1b:aa:c6:f3:
         73:92:ae:47:06:c7:da:84:2e:45:a6:91:7a:29:ba:88:be:87:
         f6:84:5f:90:10:42:52:f8:0b:1b:97:a4:ff:bc:44:88:ca:e0:
         58:3d:35:47:e5:01:03:35:22:dc:68:8a:b9:7a:b6:b2:43:27:
         cc:eb:00:b2:a6:c3:b5:ff:22:a8:64:ca:b7:de:8c:77:2e:36:
         c7:bc:5e:5d:1e:8b:2f:8a:06:11:ed:76:fc:7d:c7:3f:a2:48:
         c9:24:64:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:26:34 2025 by rpki-client