Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c6f5c30b-16c5-3615-bdc3-89f9d1d229bb.roa
File:                     c6f5c30b-16c5-3615-bdc3-89f9d1d229bb.roa (raw, json)
Hash identifier:          pr1BcGelxmoTA2r8ZicsDwyqPvB6DyN7uGevgNblQ8w=
Subject key identifier:   59:66:DA:77:18:EE:84:8D:F5:CA:68:E7:63:35:43:3E:96:A5:4E:E3
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584ACCA672751948E89CBC2D5E80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c6f5c30b-16c5-3615-bdc3-89f9d1d229bb.roa
Signing time:             Sat 09 Aug 2025 13:00:41 +0000
ROA not before:           Sat 09 Aug 2025 13:00:41 +0000
ROA not after:            Fri 07 Nov 2025 14:00:41 +0000
asID:                     32651
IP address blocks:        199.7.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:cc:a6:72:75:19:48:e8:9c:bc:2d:5e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug  9 13:00:41 2025 GMT
            Not After : Nov  7 14:00:41 2025 GMT
        Subject: CN=f56a314d-b19b-4257-9c0a-dc9651ce3af2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:43:f8:e8:97:47:a7:4c:de:9c:37:bb:ee:ff:
                    14:0e:30:af:df:52:bc:fd:37:9e:05:31:73:9e:31:
                    23:90:af:bb:0b:8e:a7:37:3d:f6:3e:94:82:05:9a:
                    6b:58:91:60:de:de:4e:28:5f:59:bb:f9:48:a7:d1:
                    06:32:f7:3b:b4:c9:04:b0:61:b6:38:9d:de:f7:99:
                    17:24:ed:22:42:0a:85:31:e2:2a:87:fb:ba:c9:50:
                    59:61:72:91:08:52:27:13:b0:12:fa:4e:a4:b7:ac:
                    f0:14:c1:b1:56:12:a7:81:c5:78:be:92:3c:b3:73:
                    a2:6c:a5:6a:1a:a4:69:da:dd:1b:e6:f2:60:be:8d:
                    6a:88:39:b5:3c:b1:cc:82:26:de:40:68:b1:dd:ef:
                    05:b3:21:ca:39:13:22:ca:e9:7b:7c:fc:83:83:76:
                    98:6c:74:62:66:5f:32:3f:4e:a5:f2:ff:ec:4f:75:
                    6d:5c:81:7b:a1:a2:50:1d:6b:ab:49:2b:c8:1c:54:
                    a0:54:2d:85:59:b4:d2:ec:51:81:5f:12:e2:e6:89:
                    b5:fe:92:52:21:d6:89:46:da:99:77:ed:4c:59:d3:
                    dd:a1:aa:53:66:f5:5f:ae:7d:05:79:c2:33:06:ff:
                    3f:a4:87:9e:0e:6a:db:fd:2e:ba:3b:7d:fc:d0:79:
                    90:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:66:DA:77:18:EE:84:8D:F5:CA:68:E7:63:35:43:3E:96:A5:4E:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c6f5c30b-16c5-3615-bdc3-89f9d1d229bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:d0:bf:79:18:e4:6d:43:ec:89:ed:99:98:84:c8:7b:6d:b5:
         94:3b:f4:b4:a8:c6:7f:92:a6:71:c0:68:48:71:c2:70:d4:4c:
         60:61:ea:2e:f9:bb:97:a5:2d:2c:bf:19:7b:67:9e:4d:2d:2b:
         84:78:5a:43:ff:08:71:97:e2:29:8a:60:2a:60:1f:71:06:46:
         e6:cd:9b:03:91:19:d7:74:6f:08:97:fb:73:fb:8f:3d:51:55:
         df:96:c3:97:39:c4:30:62:42:b3:e2:da:0e:45:83:08:06:f0:
         78:b6:5d:7d:39:12:d7:85:bd:a4:d7:27:18:3e:0e:8e:8b:52:
         a3:75:7a:c7:1f:81:27:15:3b:d0:96:11:bd:25:1c:17:09:4f:
         59:a3:6a:0e:4a:00:34:16:a3:fb:dc:d9:2f:1b:fb:5e:2f:25:
         b7:e8:5d:60:91:60:db:f8:c4:ee:35:cd:bb:10:02:80:75:ee:
         d6:b6:38:16:01:bd:1a:24:7b:88:78:c5:85:25:fd:b6:43:dc:
         2f:3e:94:00:47:e6:a3:fd:63:a4:61:3b:fb:ca:da:43:19:f5:
         5c:09:ca:23:4e:03:0a:2e:bb:a2:ec:43:62:e6:ad:ae:62:65:
         9c:15:ea:fe:c8:82:c5:63:aa:dd:22:b7:e8:fa:94:0e:87:16:
         19:a0:9d:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:07:27 2025 by rpki-client