Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c27835b5-0eca-3dc2-9e18-f6d5b352724e.roa
File:                     c27835b5-0eca-3dc2-9e18-f6d5b352724e.roa (raw, json)
Hash identifier:          ZFCQdSgLVlZ7NXfdZoxg1Ha3Vo0PoEKsJvIJgQdwjh4=
Subject key identifier:   A7:B6:DD:AA:3B:5E:EF:27:6D:BB:FF:79:67:E8:38:9C:2C:68:20:8B
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EF182200D2914B3F5A63D3CF0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c27835b5-0eca-3dc2-9e18-f6d5b352724e.roa
Signing time:             Mon 24 Aug 2026 13:00:12 +0000
ROA not before:           Mon 24 Aug 2026 13:00:12 +0000
ROA not after:            Sun 22 Nov 2026 14:00:12 +0000
asID:                     396603
IP address blocks:        199.7.71.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f1:82:20:0d:29:14:b3:f5:a6:3d:3c:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 24 13:00:12 2026 GMT
            Not After : Nov 22 14:00:12 2026 GMT
        Subject: CN=07b9bf09-44d1-43a7-b748-988e2375a1d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:63:81:c7:8b:36:75:88:90:c5:38:11:16:d9:
                    68:20:5d:76:60:77:75:24:cd:a7:8c:3e:74:72:6d:
                    1c:13:af:d6:b9:2d:9c:dd:72:36:97:36:70:dd:fc:
                    9c:39:bc:e1:69:b6:f5:4b:c2:6a:f2:4f:42:8a:03:
                    ae:c7:3c:a2:15:c0:2e:43:b8:74:06:ac:1a:86:b2:
                    2a:6c:0d:03:bf:f3:b7:73:cc:cf:32:09:30:64:b9:
                    19:5d:98:29:99:ea:81:c3:e4:6e:8a:2f:bf:34:b5:
                    52:6b:35:b0:1d:c5:ae:65:41:90:77:82:eb:10:f0:
                    11:41:e4:03:8a:8d:aa:4d:b7:19:7a:21:18:25:78:
                    29:02:d1:e0:26:3f:61:3e:43:48:32:7c:d0:91:cf:
                    88:13:d9:c0:d4:e0:a0:22:ff:87:da:21:b2:ec:ab:
                    fe:9d:9e:17:b1:c0:f2:76:4b:d1:31:a7:57:c0:d0:
                    cc:33:c3:a4:58:23:dd:2d:84:5b:b4:b2:5e:f2:f5:
                    ba:60:d9:1d:9a:ec:bd:15:52:47:c9:61:f9:95:15:
                    1d:54:d0:a2:5f:91:b1:5d:fd:75:2c:a8:81:9a:13:
                    c9:35:40:37:cc:d9:af:df:04:cc:79:e4:05:8c:a8:
                    b3:b5:3d:70:31:d4:b1:ba:37:02:61:50:91:cb:8d:
                    d2:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:B6:DD:AA:3B:5E:EF:27:6D:BB:FF:79:67:E8:38:9C:2C:68:20:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c27835b5-0eca-3dc2-9e18-f6d5b352724e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.71.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:6a:4b:9a:0a:cc:ed:1d:ce:cf:12:9d:3e:f6:fd:f9:7b:f7:
         4e:26:4d:1a:c3:13:cc:52:6e:4a:2e:d2:f8:f6:17:87:2a:e5:
         d2:a2:e0:01:4b:29:17:65:1b:b4:c3:0b:6d:f5:5e:71:81:ca:
         44:13:41:c8:1a:3c:5d:20:90:a5:64:73:cf:ae:ec:dd:60:f2:
         d2:02:56:38:e4:e0:06:e7:ad:70:80:37:b1:1a:7c:77:e4:bb:
         26:30:af:0d:4d:52:b9:d9:2b:20:76:26:01:00:6d:d7:b3:07:
         0a:72:f7:37:f8:ce:82:d4:d8:4e:7f:ba:bc:9f:5f:f6:83:d7:
         4f:2d:fd:ee:ef:10:cd:3e:bb:5e:73:19:b0:70:07:a2:ba:d6:
         e9:86:2d:fd:32:20:3b:ab:6c:d5:a4:d4:d1:89:69:aa:08:e7:
         26:53:6a:70:29:d0:95:7d:da:20:8d:d5:37:fa:60:18:43:6d:
         89:f7:9c:98:72:b3:25:42:f1:22:97:f7:99:c2:a7:dc:e3:41:
         fe:c4:ec:b5:bd:1d:b7:5e:00:d4:bc:21:cf:b3:7b:51:d9:f7:
         e3:cf:03:fe:99:b8:75:47:f0:16:d6:cb:ae:32:47:c4:30:f0:
         6c:f2:47:86:e1:3c:15:78:31:a3:85:a0:95:b1:a7:fe:c7:cf:
         f9:39:ae:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 12:26:04 2026 by rpki-client