Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c7dc1247-f746-3644-863d-c56ce4653e23.roa
File:                     c7dc1247-f746-3644-863d-c56ce4653e23.roa (raw, json)
Hash identifier:          /6SZTZonJs+7Kzn8c85H/quPnZYTrWiuhNGF/9EVr7c=
Subject key identifier:   C6:AC:82:C3:B7:A9:22:D5:23:86:4A:BA:B9:B3:ED:24:0C:49:47:73
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584ACCA67F559AF7E438EA054800
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c7dc1247-f746-3644-863d-c56ce4653e23.roa
Signing time:             Sat 09 Aug 2025 13:00:41 +0000
ROA not before:           Sat 09 Aug 2025 13:00:41 +0000
ROA not after:            Fri 07 Nov 2025 14:00:41 +0000
asID:                     396571
IP address blocks:        199.7.71.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:cc:a6:7f:55:9a:f7:e4:38:ea:05:48:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug  9 13:00:41 2025 GMT
            Not After : Nov  7 14:00:41 2025 GMT
        Subject: CN=a8fefadf-8666-4154-8c02-377a2b05fe22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:15:3f:a1:4a:a5:30:33:18:6e:e1:dd:96:49:
                    e7:42:a0:7b:99:51:c2:1b:2b:74:1b:00:a6:91:46:
                    f2:8a:43:cc:e5:d1:89:d0:35:22:ee:00:ab:42:9a:
                    f1:b0:bb:73:d8:3b:40:9d:9d:db:27:de:1c:1e:11:
                    29:0b:ba:bc:aa:45:eb:03:44:43:93:14:de:e5:4d:
                    ad:7a:e4:a1:3d:0f:7c:83:0c:3e:98:3a:d7:5d:b4:
                    05:e1:a5:e2:53:cb:bf:c1:a6:ac:42:be:17:eb:a8:
                    1c:d0:0a:b8:f8:c9:14:d0:c2:aa:6e:a8:19:ee:b1:
                    d0:1b:17:fc:57:1a:5d:d7:2b:8c:b7:41:9c:9f:8e:
                    62:4e:a5:c4:3d:2c:17:ae:02:8a:6b:bd:6b:0f:ee:
                    1c:6b:95:c5:4a:7a:25:c4:70:47:46:1f:20:2d:a2:
                    53:48:fc:06:bd:d3:19:00:36:98:0c:2b:0f:50:05:
                    b3:20:b0:97:ac:25:e5:fe:8f:af:14:07:a2:02:94:
                    99:a3:68:57:ca:4c:69:ad:1f:fc:30:01:07:8a:19:
                    89:ae:5d:2a:da:81:48:45:82:18:e3:33:34:c2:7d:
                    b7:fc:3e:c0:b2:3c:70:b3:3d:f0:bc:9e:da:07:58:
                    72:8a:12:0c:1c:23:84:5d:07:8c:47:a8:52:12:a8:
                    0b:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:AC:82:C3:B7:A9:22:D5:23:86:4A:BA:B9:B3:ED:24:0C:49:47:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c7dc1247-f746-3644-863d-c56ce4653e23.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.71.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:fb:d4:87:b2:5d:1c:88:ac:45:c1:7f:cc:bc:36:27:ae:fd:
         71:33:58:d3:30:c3:4e:52:17:2e:59:7c:05:06:5d:e5:ab:53:
         af:ab:26:5e:56:57:f8:d0:ca:08:b4:c3:a7:7a:7b:94:99:77:
         fc:4f:a0:4b:7b:3c:7f:97:7c:ed:b9:96:a4:df:bc:bc:4c:18:
         06:b8:93:e8:33:21:fe:d6:dd:02:b3:16:b9:98:3b:29:0d:01:
         2f:cc:66:35:48:72:a4:3c:ac:bc:15:82:3b:ee:bf:4d:82:b9:
         68:64:6c:b7:30:04:b3:56:e5:f3:b3:52:86:f8:33:67:f4:ee:
         d6:4d:e7:2d:f4:e2:49:7a:4b:6f:ce:81:c6:fd:c6:df:92:25:
         45:c6:9b:ae:dc:25:f7:cd:51:91:a7:b5:c2:fa:e9:41:c4:f7:
         e3:7f:75:c4:d3:49:94:71:97:53:92:a0:ec:c8:b8:d1:2e:e7:
         e4:9b:20:d4:1e:0b:1a:7c:b8:e0:c6:cb:77:9e:bd:de:ab:69:
         a9:16:77:39:6e:e5:d3:18:11:c5:8b:6e:f2:bf:03:96:df:93:
         78:48:cf:a0:83:da:13:a5:9b:38:38:80:15:e8:f6:85:60:42:
         6a:da:3b:9d:b8:d6:f3:e9:96:74:ca:11:7f:ad:b7:eb:78:2e:
         ee:9a:74:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:26:57 2025 by rpki-client