Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/86469a1c-bdd2-3e8f-b64f-b5fe8d71173a.roa
File:                     86469a1c-bdd2-3e8f-b64f-b5fe8d71173a.roa (raw, json)
Hash identifier:          HJfOwtp9fzcyBbrZPz26xEYvCHZZ3ueTJfh69VxsR0s=
Subject key identifier:   B4:5D:10:5B:F6:63:DD:3C:79:34:EE:91:64:AA:93:3E:95:1A:75:A9
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584ACCA67199036E0381B097D440
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/86469a1c-bdd2-3e8f-b64f-b5fe8d71173a.roa
Signing time:             Sat 09 Aug 2025 13:00:41 +0000
ROA not before:           Sat 09 Aug 2025 13:00:41 +0000
ROA not after:            Fri 07 Nov 2025 14:00:41 +0000
asID:                     396563
IP address blocks:        199.7.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:cc:a6:71:99:03:6e:03:81:b0:97:d4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug  9 13:00:41 2025 GMT
            Not After : Nov  7 14:00:41 2025 GMT
        Subject: CN=b781e573-490d-461c-9417-c23838bbfe6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:51:b7:df:24:01:1e:b1:69:87:11:9d:3d:32:
                    06:8d:d3:98:4d:9f:84:76:11:c0:c8:1e:58:1c:f1:
                    b4:63:bc:41:b9:b9:d4:1b:a3:f7:17:3e:60:cc:cd:
                    e5:68:10:11:ce:1e:73:90:16:69:cf:e6:50:c3:66:
                    18:f7:5c:41:1d:dc:f7:16:9b:a3:78:52:5c:96:97:
                    a8:f5:ee:11:44:c5:8d:9c:50:12:82:f0:92:b0:fa:
                    4a:05:07:08:4f:0c:46:94:d2:8b:23:1a:b8:a5:cb:
                    ea:85:78:e4:00:b0:5a:2c:50:ed:3c:98:1b:81:9c:
                    cc:5d:91:df:91:e6:ab:58:ad:47:14:21:42:9e:0a:
                    0a:aa:f0:87:e9:4f:fe:18:31:02:2e:0d:77:51:b1:
                    d8:5b:33:96:7e:07:d5:48:10:97:51:28:60:4c:2e:
                    f7:79:d5:f2:3d:36:a9:7c:83:77:6b:4f:92:7f:dd:
                    ab:da:ad:91:7c:14:bd:2b:3a:e6:a5:1a:d4:b8:04:
                    9c:5f:24:f9:18:dc:7c:74:46:72:08:9a:e4:9a:c4:
                    00:59:f0:0e:eb:b2:ad:0c:6f:09:ff:dd:8d:d8:19:
                    2e:9c:43:e3:3d:f1:6c:aa:09:3d:a7:18:e9:68:2c:
                    a2:68:29:18:97:8e:cf:63:f1:6e:31:93:c0:4c:72:
                    4a:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:5D:10:5B:F6:63:DD:3C:79:34:EE:91:64:AA:93:3E:95:1A:75:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/86469a1c-bdd2-3e8f-b64f-b5fe8d71173a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:7c:10:7e:cc:64:58:fc:c7:86:4c:62:8d:f8:94:a8:15:63:
         7b:ed:26:79:e2:c6:46:eb:53:ab:e4:fc:9d:a6:ff:8b:40:f7:
         41:3f:3c:28:17:9e:b6:de:1f:50:6c:6f:df:25:49:cc:fb:b0:
         de:6d:1e:53:8e:06:a7:5a:fa:26:dc:5b:17:b1:d3:54:9a:d4:
         95:b7:d1:46:ab:2c:33:e0:1e:1c:7c:65:c3:3c:ab:cb:3a:56:
         71:d7:a9:2a:b6:ba:1c:2d:69:ff:4e:c7:f3:47:dd:59:01:de:
         c5:a3:6f:25:84:1f:fb:ce:5c:c6:1a:73:f5:c0:71:4d:85:54:
         8d:94:10:94:d3:62:20:ce:fa:c2:bf:c6:f1:f1:2d:da:4e:94:
         b3:63:b0:53:be:cd:b3:38:7b:be:ee:91:4b:7f:39:11:22:1a:
         d4:ff:1b:1e:cd:5b:91:b6:f6:ed:98:92:bf:b2:d9:b1:40:28:
         0d:74:80:83:04:d1:fd:b7:ff:bb:d4:d7:b9:2b:37:ea:98:d9:
         6b:a1:91:66:dd:99:6d:b7:6d:df:4b:eb:60:62:7e:ef:da:65:
         5e:2d:8b:07:01:61:43:4e:00:a3:fa:8c:7f:69:50:d2:04:c6:
         4d:bc:b3:f1:59:d4:bb:14:19:2f:a1:7e:3a:d1:fe:b9:f5:84:
         4b:e9:7b:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:51:06 2025 by rpki-client