Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aa784391-c2ea-398e-9f2a-f5ca64eeb60a.roa
File:                     aa784391-c2ea-398e-9f2a-f5ca64eeb60a.roa (raw, json)
Hash identifier:          MYH1a6Jx2nnukhb8zwv7VU1W+VcEk1EfEnETh9SYCd4=
Subject key identifier:   01:D1:07:25:3D:FE:67:C1:BC:3B:21:5A:7B:F5:75:3C:BD:42:39:51
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AE196C4A94A45F8CCAE4C2B40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aa784391-c2ea-398e-9f2a-f5ca64eeb60a.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     36623
IP address blocks:        199.7.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:c4:a9:4a:45:f8:cc:ae:4c:2b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=e66ee0f4-372f-4e96-9707-39ecd1fcff6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:7a:9c:0e:a6:8c:ef:33:e2:3e:e7:41:5d:cf:
                    83:7e:6e:77:e1:3f:28:ae:13:cd:93:54:a3:76:8a:
                    00:35:af:a8:bf:0b:d4:bd:f0:c0:3f:df:88:c1:4e:
                    df:2a:96:e8:cc:de:4b:c9:c6:9f:25:5e:d0:97:df:
                    51:3e:b4:e7:f1:2f:55:ee:6c:bc:42:63:a8:be:8c:
                    72:5b:c8:8a:f0:3a:c5:5c:8e:34:b2:67:46:4d:a0:
                    05:69:62:56:39:79:5e:ed:19:ad:69:4c:9e:48:ad:
                    c4:e4:98:bc:85:28:10:7e:0a:4e:27:f2:2d:91:ba:
                    6f:fe:b1:8a:b7:af:d1:32:96:74:63:d5:79:cf:01:
                    5d:a0:b0:04:5e:d4:b9:f9:01:c9:8b:37:cf:12:87:
                    58:25:74:01:eb:89:47:1d:d3:0f:a6:af:a1:fc:92:
                    39:d6:ef:d6:7b:39:10:f3:15:40:d5:10:7b:16:fd:
                    b8:93:eb:7f:68:87:b3:bb:75:11:dd:16:17:d7:a5:
                    e3:40:f0:74:cc:25:44:81:51:64:0c:cf:21:20:be:
                    ff:0e:73:ff:5a:a8:cd:9c:a3:39:e7:83:c9:c2:10:
                    80:58:d8:ef:e6:6e:c6:8c:9d:53:43:48:89:54:db:
                    f0:15:05:57:88:b7:04:af:c7:d5:a2:7e:24:fb:b2:
                    b2:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:D1:07:25:3D:FE:67:C1:BC:3B:21:5A:7B:F5:75:3C:BD:42:39:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aa784391-c2ea-398e-9f2a-f5ca64eeb60a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:37:d8:be:a8:81:f6:6f:5c:6e:fb:f0:95:44:6f:a3:ed:11:
         a1:cf:f1:60:af:0a:03:ad:18:e9:c6:a4:de:e9:93:5d:19:78:
         06:76:af:96:3d:1e:ab:48:e4:8c:c5:b4:a3:99:4f:28:a5:5e:
         cf:b3:4f:87:d4:82:e5:05:49:b9:b8:d3:c1:a5:e8:85:8f:bc:
         4c:fa:76:38:4c:c3:c8:fc:c0:0f:63:ab:fb:ec:a4:a9:70:53:
         3a:6d:3a:77:1b:a8:65:a4:36:7e:81:f8:30:40:0b:c3:93:1f:
         71:74:93:9a:ec:96:b8:eb:12:59:09:8f:53:21:9c:c8:85:e3:
         10:e2:5d:72:ba:06:59:a6:be:16:bc:7e:2a:cb:49:45:11:c1:
         ad:8a:b9:7f:cd:e3:00:cc:fb:91:11:93:9f:ea:3a:a9:9a:00:
         53:58:b0:d8:0f:ee:4a:46:68:c3:87:fc:6e:fe:7f:fa:da:5e:
         f6:c8:43:0a:1c:82:40:a0:08:fd:4e:86:98:01:59:41:9a:b6:
         80:80:06:15:2a:63:b3:f4:34:69:e5:98:56:eb:4b:68:ea:69:
         0b:ee:70:02:f3:87:67:50:06:e5:51:e5:8e:4f:28:43:40:d1:
         7b:d8:ab:90:58:e6:a8:c1:6d:83:ee:c8:85:ad:2b:cb:22:bb:
         1e:2b:17:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:12:26 2025 by rpki-client