Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c27835b5-0eca-3dc2-9e18-f6d5b352724e.roa
File:                     c27835b5-0eca-3dc2-9e18-f6d5b352724e.roa (raw, json)
Hash identifier:          s8RiBUjJRIcoSetF47dHMPTh4+I8pmq460C6w5j2cGs=
Subject key identifier:   03:AF:55:BE:03:B9:CB:D4:78:B4:E8:87:D4:AF:A6:F0:17:37:7B:87
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584ACCA67E2470300BF67BB73F00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c27835b5-0eca-3dc2-9e18-f6d5b352724e.roa
Signing time:             Sat 09 Aug 2025 13:00:41 +0000
ROA not before:           Sat 09 Aug 2025 13:00:41 +0000
ROA not after:            Fri 07 Nov 2025 14:00:41 +0000
asID:                     396603
IP address blocks:        199.7.71.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:cc:a6:7e:24:70:30:0b:f6:7b:b7:3f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug  9 13:00:41 2025 GMT
            Not After : Nov  7 14:00:41 2025 GMT
        Subject: CN=13b3232d-217c-428b-94b7-540bfe4229b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:70:60:b6:66:22:48:01:b1:c2:d6:4c:bc:24:
                    43:86:9d:01:76:8a:67:da:e3:2a:d5:7f:a6:e9:b4:
                    ed:16:2b:0e:b8:d1:72:8f:d8:62:77:a5:2d:40:00:
                    32:5e:d8:f5:17:bf:46:d9:e5:5e:2b:3b:47:c4:f6:
                    0f:b4:88:46:76:6f:5f:f4:7b:6d:67:04:86:d0:55:
                    f9:1e:08:29:18:06:2d:32:00:e7:c4:55:c6:2b:fc:
                    8b:39:fe:27:28:f6:a4:7f:2c:7f:a0:90:7a:60:8a:
                    e8:f2:10:36:e5:ad:7b:bb:03:14:f9:5b:dd:48:34:
                    5a:83:4e:56:4f:82:77:e1:a2:7f:3f:c4:64:a3:a2:
                    61:2b:b3:8e:28:7f:41:d3:4c:ec:4b:84:e9:c2:8b:
                    83:3b:b3:cb:a8:41:3a:d2:42:7f:42:cf:45:df:73:
                    ad:01:45:d5:e7:26:4d:10:ae:b4:e8:7d:1b:ce:9b:
                    f4:b7:8e:31:b9:26:11:4b:a3:0f:3f:1f:cf:cc:91:
                    89:28:78:70:ae:06:6c:c1:bc:3f:a4:11:a0:fd:0b:
                    d6:6c:91:d2:89:f2:5a:f9:0b:f1:f9:a0:2b:ce:0d:
                    a5:ef:63:7c:3c:2a:76:8b:34:f6:05:5b:f9:94:88:
                    ed:97:14:fc:6e:bf:b2:24:35:e5:c5:0d:9b:54:a7:
                    2a:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:AF:55:BE:03:B9:CB:D4:78:B4:E8:87:D4:AF:A6:F0:17:37:7B:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c27835b5-0eca-3dc2-9e18-f6d5b352724e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.71.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:97:bf:87:94:aa:da:37:b0:82:e9:6a:73:fa:21:7e:8b:46:
         59:04:a7:83:9d:7d:af:85:9a:8a:dd:f0:96:c0:fe:8b:f3:69:
         95:a7:20:b0:82:1f:1f:62:63:3e:c6:44:cd:05:19:28:44:f5:
         fa:29:34:d9:c7:c0:61:e5:03:dc:c3:73:58:e7:a7:b1:92:4a:
         a9:bd:3b:6f:59:67:af:91:90:ab:60:2b:2d:0d:5a:cf:11:cc:
         2e:fd:3a:d2:aa:2c:73:f7:7a:aa:c4:1a:a3:4e:04:86:37:01:
         47:c3:90:14:38:7f:4b:b5:38:7c:e1:cf:04:71:72:9d:fc:8a:
         23:2a:b3:19:25:ba:91:15:9e:29:68:e9:dd:17:99:c9:88:d0:
         fa:fa:e0:bc:36:dc:43:aa:ca:08:6e:74:d4:4a:94:c4:d0:58:
         7b:15:8f:a0:ef:7a:5e:01:79:cc:0c:33:8f:b2:b2:39:da:d5:
         2b:a2:08:c7:1f:59:37:13:af:32:3b:d7:8a:d9:52:5d:13:9b:
         2f:f2:26:96:a2:4c:90:3a:8c:74:98:7f:ef:1f:9a:ad:64:01:
         49:f3:6a:11:bd:e9:5e:5c:ef:b6:0c:f5:b7:fb:2a:b6:06:2e:
         76:ee:8b:37:bd:ae:87:11:28:18:3d:0c:10:32:71:5e:32:6d:
         ef:93:f2:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:55:34 2025 by rpki-client