Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e23f21f0-c7eb-3c3d-9368-92da472b239d.roa
File:                     e23f21f0-c7eb-3c3d-9368-92da472b239d.roa (raw, json)
Hash identifier:          L9TsvMqcOI3f/W3/Xio22WyiEUfOBgM49lxJMLzClz4=
Subject key identifier:   16:55:62:3D:10:FF:DE:65:A4:0A:CF:77:5F:B6:99:1A:B6:65:49:BF
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584ACCA67B3485A83B145F57E200
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e23f21f0-c7eb-3c3d-9368-92da472b239d.roa
Signing time:             Sat 09 Aug 2025 13:00:41 +0000
ROA not before:           Sat 09 Aug 2025 13:00:41 +0000
ROA not after:            Fri 07 Nov 2025 14:00:41 +0000
asID:                     396587
IP address blocks:        199.7.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:cc:a6:7b:34:85:a8:3b:14:5f:57:e2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug  9 13:00:41 2025 GMT
            Not After : Nov  7 14:00:41 2025 GMT
        Subject: CN=d22d7635-06d0-4d73-a68f-af12b4d6d314
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:a9:5f:a5:a1:53:af:0c:92:94:d9:6e:25:b8:
                    db:cd:08:73:b2:ff:35:11:62:29:3b:d9:98:f1:6f:
                    58:3a:05:f8:d5:07:7a:77:b5:fd:87:b6:8f:c7:d6:
                    9e:79:82:5b:28:ca:84:5e:f4:10:2a:6f:43:f1:3e:
                    86:54:87:26:4d:d7:c1:bf:dc:aa:ed:cc:38:62:61:
                    d6:5f:76:72:3c:55:c2:e3:35:b1:f4:ca:a8:41:76:
                    e7:09:f1:ca:5d:b3:76:2a:10:a2:d0:c9:d9:c9:86:
                    d2:2b:13:ec:6d:ce:8e:f6:2a:bf:e5:bf:78:33:c6:
                    bc:79:6b:37:1d:75:c3:12:3a:8c:ee:7f:e2:ab:fd:
                    ef:75:8c:9e:cc:07:02:27:ef:7e:5d:f9:ca:0f:94:
                    90:86:e3:bc:80:7c:c8:ac:c2:76:d0:34:48:91:05:
                    7e:c6:28:db:66:8d:03:16:86:ff:ea:1f:ed:b8:ba:
                    7c:b5:fc:68:97:87:b5:59:62:2a:bc:dc:0a:c5:45:
                    6e:19:52:2a:a2:11:7b:21:94:87:f1:47:bf:58:c2:
                    1f:26:fd:c4:cf:8f:82:8e:45:75:67:71:bd:73:95:
                    1b:c9:93:07:41:90:75:a8:ae:b3:5b:be:6e:fd:58:
                    bf:79:a6:c0:60:df:3f:54:40:95:87:72:75:d7:6b:
                    35:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:55:62:3D:10:FF:DE:65:A4:0A:CF:77:5F:B6:99:1A:B6:65:49:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e23f21f0-c7eb-3c3d-9368-92da472b239d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:ca:aa:b5:02:3d:2c:a8:8d:0f:28:6b:cc:68:a1:65:1f:de:
         36:9c:76:25:9f:68:ba:a7:66:ca:a1:51:06:d9:f9:b0:f2:21:
         ba:07:11:b5:a6:e9:67:1b:52:82:22:eb:36:7b:64:5e:8e:da:
         e0:b2:bf:d4:76:42:23:54:36:04:27:bb:a4:08:5f:f0:a2:f5:
         b6:1b:5a:b7:a9:39:43:7a:d1:a3:af:c0:ea:3b:ff:75:de:6d:
         e2:90:a6:21:73:32:c6:c4:df:66:5b:b1:6e:12:94:55:b0:72:
         69:b8:29:02:79:1d:a0:b1:47:7c:d0:62:b0:0e:95:d2:c7:1e:
         bb:ea:68:be:66:15:7f:60:ba:8c:70:27:be:7e:0b:8c:a1:f4:
         44:50:a7:66:6c:3b:ef:57:ee:34:df:91:2e:46:c5:c9:e4:7c:
         4f:a7:93:fe:dc:76:ab:85:bb:61:3b:db:37:35:ee:3c:92:a1:
         45:b6:78:29:07:26:ab:9a:10:26:d9:58:bd:3f:65:b8:37:44:
         b8:75:5e:29:9a:1d:a9:90:ee:a1:5d:4a:74:d2:13:9b:78:4e:
         d2:61:c2:c1:dd:9e:c9:cf:4b:68:2d:58:b5:fe:71:b8:e5:53:
         b2:21:a3:59:1b:17:34:ba:80:ed:37:0e:a8:a5:4c:1d:78:a6:
         2c:5c:e4:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:03:51 2025 by rpki-client