Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a6095842-237a-3147-8a77-7d6cbf2f90af.roa
File:                     a6095842-237a-3147-8a77-7d6cbf2f90af.roa (raw, json)
Hash identifier:          /0U2TUZJIllHYAElL5gx+qmUsjVSEjHKFQ/6RmeGYuc=
Subject key identifier:   19:9C:CA:C5:4A:29:3F:7E:31:FA:1C:4C:9D:57:02:F2:26:A0:6E:68
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584ACCA686D3968A62A3D9AD7680
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a6095842-237a-3147-8a77-7d6cbf2f90af.roa
Signing time:             Sat 09 Aug 2025 13:00:41 +0000
ROA not before:           Sat 09 Aug 2025 13:00:41 +0000
ROA not after:            Fri 07 Nov 2025 14:00:41 +0000
asID:                     396561
IP address blocks:        199.7.71.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:cc:a6:86:d3:96:8a:62:a3:d9:ad:76:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug  9 13:00:41 2025 GMT
            Not After : Nov  7 14:00:41 2025 GMT
        Subject: CN=32164ad2-dda2-4732-89b7-12afa744f521
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:54:57:16:79:dc:3f:ad:6a:7b:83:09:46:f4:
                    66:8e:98:74:c0:0f:f5:cd:13:6f:20:03:f5:fc:aa:
                    48:1b:e2:41:f6:79:8a:6d:27:63:e4:78:9c:52:e6:
                    9e:38:13:76:9e:83:06:b3:61:ea:00:2a:ec:f7:3b:
                    74:17:0a:b5:6b:d7:c0:87:01:8a:94:1c:cf:45:49:
                    a6:98:4a:b5:a6:e0:40:7e:0b:40:40:b0:27:09:d8:
                    27:19:f8:dd:d1:d3:a9:f9:c4:08:78:e7:36:e5:9e:
                    74:5c:e8:49:b2:7e:b5:a1:ad:fb:4e:36:68:b7:c3:
                    93:2a:08:96:3f:56:83:be:1e:87:fe:c2:89:a0:9f:
                    b3:68:db:37:04:18:87:26:2b:e2:f9:23:a6:8f:77:
                    8f:6c:63:37:af:21:c8:ef:71:84:a5:d0:3d:1f:ec:
                    c2:4c:d5:ea:60:d0:83:94:b0:be:7c:60:5f:de:90:
                    bf:f6:b1:2c:b4:4e:4e:44:94:66:4f:c2:0d:83:63:
                    9d:82:0f:80:9d:78:e7:a0:7b:48:2e:bf:a5:dd:c8:
                    78:04:4f:7d:f3:64:af:d6:80:ce:60:1c:63:fe:4a:
                    dd:4e:0b:6c:b7:00:36:7b:cd:e3:0f:3c:7a:82:0e:
                    e3:e7:9c:ed:ea:61:7f:80:c6:88:3a:e3:0d:d6:5c:
                    16:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:9C:CA:C5:4A:29:3F:7E:31:FA:1C:4C:9D:57:02:F2:26:A0:6E:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a6095842-237a-3147-8a77-7d6cbf2f90af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.71.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:c0:41:b2:aa:bd:97:7a:8a:5b:8d:16:48:bb:2e:77:9f:7b:
         50:c6:87:ad:86:db:bd:b0:4e:98:95:81:0b:44:7e:b9:15:02:
         6a:57:bd:b0:78:fa:69:63:27:56:2f:13:a1:33:a0:8b:9b:6f:
         15:dc:b4:8f:e9:05:4f:b0:8f:b2:df:1a:a5:02:36:63:cd:07:
         1d:dc:a8:cf:bf:87:ad:76:a3:4c:0a:4b:16:b1:f9:1c:19:ed:
         26:aa:b9:87:5d:5d:4f:60:8a:3e:f9:f6:34:94:d8:d8:f2:bb:
         62:00:03:cc:9d:5c:35:9b:2e:51:02:71:b8:3f:9e:2b:b2:28:
         78:ff:34:0a:6c:75:78:0b:f6:17:27:32:75:ff:c8:8a:45:f7:
         99:1f:f3:09:8a:64:9d:02:1e:93:73:9a:0f:c9:df:3b:54:e1:
         4a:b1:ac:d0:51:24:ee:90:b0:a7:2c:96:5e:b0:b8:79:26:3c:
         1a:54:aa:7f:f4:cd:7b:d2:d3:c8:ed:2f:f3:74:6b:65:33:e0:
         ec:c9:ff:58:1b:c5:16:e8:d4:e4:73:e2:02:2e:8e:bd:e8:8f:
         b4:a9:3c:d8:49:26:ef:a8:90:a6:4c:58:cc:51:a6:4d:78:e5:
         dd:39:8a:02:eb:90:85:9e:81:f9:f2:71:68:13:8e:55:37:23:
         ce:76:2e:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:41:07 2025 by rpki-client