Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d6cfbb7b-901a-3109-b761-5ddd4cb02131.roa
File:                     d6cfbb7b-901a-3109-b761-5ddd4cb02131.roa (raw, json)
Hash identifier:          VU+MPnOlYa3dgTmdNDjTPm/m9vs4Uezg2yHOJ4cYB4o=
Subject key identifier:   1C:D4:44:00:73:75:66:9A:8C:C3:06:B6:36:F8:94:C0:8E:FA:3F:7F
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584ACCA688B2CE103F7D2B4E2E00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d6cfbb7b-901a-3109-b761-5ddd4cb02131.roa
Signing time:             Sat 09 Aug 2025 13:00:41 +0000
ROA not before:           Sat 09 Aug 2025 13:00:41 +0000
ROA not after:            Fri 07 Nov 2025 14:00:41 +0000
asID:                     396602
IP address blocks:        199.7.71.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:cc:a6:88:b2:ce:10:3f:7d:2b:4e:2e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug  9 13:00:41 2025 GMT
            Not After : Nov  7 14:00:41 2025 GMT
        Subject: CN=537274d9-4ce9-42e3-9a32-4ecd5797a66f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c2:38:19:0f:b7:16:47:e1:e6:cb:d7:77:bf:
                    34:cf:82:8b:9a:5d:2c:65:23:e7:94:b8:da:ae:2d:
                    87:ae:93:17:75:64:4b:be:0d:e9:e3:39:09:ed:6f:
                    50:b0:fb:a6:15:8b:19:4a:c5:53:3a:ac:c5:60:75:
                    74:38:59:2d:42:a9:e1:e8:94:c4:a2:80:82:3d:4c:
                    9d:98:bc:80:31:6b:a0:d4:44:ee:b0:66:de:ba:25:
                    7e:18:c2:ae:c1:77:f3:67:06:e3:11:3f:7c:09:7f:
                    1d:ad:e5:d9:e7:b5:ed:96:37:d8:24:34:c9:3a:7a:
                    ed:d6:89:61:51:7e:c1:d8:e5:72:de:c9:0f:f6:e1:
                    b2:65:a9:89:8b:5b:a4:b8:18:e2:48:8e:d4:88:85:
                    ea:a2:13:b8:df:fa:67:7a:39:bc:1d:bc:2b:2b:39:
                    6f:98:4d:08:d5:18:4d:60:6a:71:29:35:08:74:6c:
                    ab:54:cd:d6:a3:8a:2f:9e:8c:5c:3e:72:02:74:ee:
                    29:41:dd:1c:1a:15:5a:35:d1:18:c5:c0:e5:e5:f4:
                    5f:78:c0:e0:37:cd:ed:a8:47:8e:c9:0b:76:ef:90:
                    83:04:82:4d:1d:56:09:52:e1:42:15:06:b3:2e:86:
                    1c:58:23:0e:a0:cc:2f:24:06:c8:4d:5c:ad:d4:ad:
                    4d:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:D4:44:00:73:75:66:9A:8C:C3:06:B6:36:F8:94:C0:8E:FA:3F:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d6cfbb7b-901a-3109-b761-5ddd4cb02131.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.71.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:fe:b5:12:df:b7:da:77:38:8b:6a:1a:97:48:52:69:b4:50:
         1e:08:de:68:8f:4d:18:53:1d:55:31:60:d2:6d:1a:02:54:f3:
         b7:7f:11:e3:b7:fd:bf:37:ac:3c:7a:bc:69:d6:20:a4:86:f7:
         2e:40:f4:7e:16:b3:41:46:fb:01:a8:34:32:39:3c:bd:b8:19:
         b5:98:77:48:f4:92:a7:a5:38:f0:b8:5a:73:bf:76:a4:b3:21:
         d7:0a:4d:df:20:b5:0c:e9:59:95:2f:6a:ec:4e:8a:13:59:c9:
         8b:12:3d:11:f8:76:62:c8:91:be:02:3b:9f:64:d3:f7:b4:3b:
         7a:d8:3d:cf:32:26:10:33:60:ed:10:d2:8a:6d:c0:51:66:0d:
         fe:b1:8a:e2:84:66:4a:a6:a6:3a:9d:51:aa:0b:e6:b5:62:36:
         42:a3:2f:7f:fe:a3:0d:af:0a:f4:a4:fc:93:27:e5:c2:d5:15:
         2e:6c:b5:14:6e:f4:04:14:47:4e:7e:f5:28:0b:cc:47:4e:e1:
         72:9c:33:7e:fc:f8:24:b3:7e:f1:d7:f9:b7:25:69:19:8a:f9:
         57:42:d9:30:67:f1:d4:27:7a:32:6c:fe:5e:8f:4c:b0:5f:30:
         aa:de:6a:31:69:34:d5:39:a3:b1:b8:3a:b4:42:c3:86:50:a7:
         5a:ad:36:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:22:17 2025 by rpki-client