Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/886fac1b-0905-3db0-8a39-117c258c4907.roa
File:                     886fac1b-0905-3db0-8a39-117c258c4907.roa (raw, json)
Hash identifier:          hDX1mjzrwfkCfPaWvnMVKM5KeXiozj1IkFNnASxVEmo=
Subject key identifier:   E9:DA:93:1B:62:22:A7:BE:E2:D0:47:6A:F0:2E:D3:61:25:F8:59:8A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584ACCA66CAD3053950933601080
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/886fac1b-0905-3db0-8a39-117c258c4907.roa
Signing time:             Sat 09 Aug 2025 13:00:41 +0000
ROA not before:           Sat 09 Aug 2025 13:00:41 +0000
ROA not after:            Fri 07 Nov 2025 14:00:41 +0000
asID:                     396547
IP address blocks:        199.7.71.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:cc:a6:6c:ad:30:53:95:09:33:60:10:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug  9 13:00:41 2025 GMT
            Not After : Nov  7 14:00:41 2025 GMT
        Subject: CN=123881ee-3c5d-4337-89b6-44ca140b5923
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:24:cc:ee:dd:6e:53:4b:41:81:a0:7f:19:27:
                    24:8f:0e:a8:5a:aa:7c:1e:68:a0:35:42:f0:2e:9c:
                    30:cd:9e:8f:41:22:bb:b2:2f:9e:4e:7b:c6:79:5d:
                    93:d9:ec:f2:73:4c:b4:c1:90:78:4a:cf:f7:1b:40:
                    fa:41:f5:4f:70:0e:7b:48:0e:f9:3c:05:e9:64:35:
                    09:9f:49:3e:38:da:26:b8:1f:93:f6:78:18:43:28:
                    9b:05:e3:ef:42:8b:a1:82:14:a9:6f:0d:6d:cd:d3:
                    e2:e2:1c:35:b0:a2:20:ec:a6:27:f0:7f:4d:e9:84:
                    f7:98:41:7c:00:54:fd:15:1c:91:5e:6d:b7:ed:d8:
                    f1:b8:fd:28:ba:68:de:43:82:41:5a:2e:08:42:41:
                    6d:6c:7d:4d:1c:9c:1b:f2:65:f9:8f:51:84:ff:e5:
                    de:9b:9a:47:b2:29:ff:08:9b:64:a3:90:b3:14:18:
                    f5:12:7a:b1:6f:3b:80:26:32:39:a2:01:9f:7e:03:
                    e0:18:4f:95:58:1e:d0:11:8a:e4:ed:92:62:da:c0:
                    31:1e:55:e9:6a:d8:f1:04:76:4b:48:77:07:22:34:
                    54:0b:bb:b1:49:8c:a1:ee:b7:aa:62:6b:d3:8b:62:
                    81:6f:cf:c9:9f:d1:be:86:30:e0:9f:2d:eb:52:eb:
                    ad:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:DA:93:1B:62:22:A7:BE:E2:D0:47:6A:F0:2E:D3:61:25:F8:59:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/886fac1b-0905-3db0-8a39-117c258c4907.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.71.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:76:9b:e2:69:d0:18:64:30:0e:31:e8:23:17:64:c9:af:1e:
         ea:fe:4c:ac:cc:fd:80:d5:d2:65:7f:80:40:2d:c8:b0:32:dd:
         5e:c5:ee:8d:e3:32:7f:34:7a:fd:f4:08:49:de:35:80:6d:2f:
         4d:50:4c:66:91:2f:b3:48:0a:24:40:00:1d:a7:2a:01:9f:56:
         66:ce:09:e9:ee:72:ad:50:3b:44:2a:03:5d:87:fb:fb:6d:69:
         f9:ff:d6:2c:76:0f:d3:5a:de:6b:66:d1:9a:0d:08:d6:a0:a9:
         c3:ab:12:6c:90:17:a7:70:3e:27:4f:19:2e:e5:14:41:73:85:
         9a:76:a4:2e:4d:f3:b6:94:25:f0:0b:ed:6e:8c:82:e4:e6:e4:
         8a:c5:15:ec:81:06:c3:7f:72:3b:cb:b7:2d:d0:8d:a0:d2:90:
         3c:51:93:fa:83:68:38:8c:ce:6a:0a:0d:45:c3:bd:a3:76:ec:
         91:d8:f2:ab:f8:a5:49:2f:8c:bd:23:a3:fe:fc:4e:5e:fb:1b:
         bd:ef:3e:33:19:49:99:20:4c:b0:44:78:e0:2f:56:69:9c:b5:
         ae:e7:87:ee:f8:d4:4d:4c:76:5d:fb:59:b7:db:a7:13:9a:b8:
         58:04:bb:39:fe:8c:b5:4b:f6:5b:79:72:a7:46:fc:6d:96:96:
         2c:c9:33:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:02:11 2025 by rpki-client