Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e4e17339-8a5f-39cd-bddc-934cac0a288d.roa
File:                     e4e17339-8a5f-39cd-bddc-934cac0a288d.roa (raw, json)
Hash identifier:          9/ELTJrRYfDY9wLULHHotaEtzOjEfmdRr+g2WxZ7tf4=
Subject key identifier:   93:50:0B:A3:D0:73:9F:78:F3:9D:C0:18:11:6A:55:CA:A7:75:91:93
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584ACCA672AAC0BA3EE0EB1FA3C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e4e17339-8a5f-39cd-bddc-934cac0a288d.roa
Signing time:             Sat 09 Aug 2025 13:00:41 +0000
ROA not before:           Sat 09 Aug 2025 13:00:41 +0000
ROA not after:            Fri 07 Nov 2025 14:00:41 +0000
asID:                     396582
IP address blocks:        199.7.71.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:cc:a6:72:aa:c0:ba:3e:e0:eb:1f:a3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug  9 13:00:41 2025 GMT
            Not After : Nov  7 14:00:41 2025 GMT
        Subject: CN=305008e8-59cd-4744-a63e-13caf8e40d28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:a9:75:0c:45:5e:6c:0f:08:10:5f:97:32:4f:
                    a3:95:c1:a4:b5:76:b2:82:6c:7e:db:bc:06:d9:d5:
                    c6:dd:e1:89:b8:32:0e:70:55:4b:ec:0c:24:dd:ef:
                    f0:7c:36:d9:c3:f8:b6:a4:c6:54:36:32:6c:71:3d:
                    60:21:ef:94:eb:43:0d:78:7c:21:92:a8:e0:d5:75:
                    97:6f:9f:41:ad:07:d5:0b:66:7a:83:21:13:13:d4:
                    2e:48:b3:96:f8:8e:66:f5:e6:9f:f2:16:03:37:e8:
                    f4:4e:ac:6e:f5:7b:26:8c:68:76:53:f2:05:03:4f:
                    54:3f:81:13:37:3e:e9:8e:0e:a8:58:91:c0:25:2d:
                    19:14:cc:a4:c5:76:d2:04:25:05:82:8d:c1:d1:c1:
                    c6:fc:05:76:8f:8d:87:ce:f7:e0:e9:a7:b9:2e:f6:
                    73:eb:62:cf:04:8a:ac:1d:62:a1:44:e7:03:18:17:
                    d8:17:2b:df:0d:c0:dc:ad:92:85:75:bb:59:b9:2c:
                    58:30:b8:c7:44:c5:74:ba:4d:b9:cb:34:e0:23:36:
                    a8:c0:2a:f6:12:06:2f:d9:cf:68:6f:c1:9a:f6:9c:
                    e5:1f:10:44:c3:4c:71:66:23:8f:46:40:ea:11:df:
                    02:67:79:a5:6f:17:69:a6:dc:56:1d:8d:76:62:ac:
                    25:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:50:0B:A3:D0:73:9F:78:F3:9D:C0:18:11:6A:55:CA:A7:75:91:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e4e17339-8a5f-39cd-bddc-934cac0a288d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.71.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:34:dd:29:71:c3:2e:94:02:e8:9f:19:43:e6:f4:f9:6b:a5:
         75:cf:ed:6a:64:56:f8:6a:70:4c:89:ae:9a:95:07:05:7b:f1:
         ba:d8:ee:ec:e1:b4:26:77:9e:db:df:21:22:81:d8:d5:33:2d:
         e3:8a:d7:cb:d8:29:71:cd:df:c4:5d:fe:f0:db:30:25:ce:20:
         df:73:a9:3f:94:fc:e0:d2:16:f1:d4:55:ae:64:27:61:da:3a:
         06:bd:45:4c:b6:50:79:cc:5e:55:71:0e:59:57:74:d8:4d:d1:
         e5:54:56:e0:bb:82:69:45:8e:08:70:c5:b7:ec:43:03:f3:91:
         2f:94:8f:25:9e:d7:4a:33:1f:2b:9a:d9:6a:76:81:8a:eb:c8:
         82:f7:98:52:14:4a:2e:db:7c:04:e4:00:c0:90:fc:46:36:e5:
         d4:67:19:db:df:bc:5b:be:68:dd:b3:c2:bd:7d:38:62:3d:07:
         91:21:ec:7f:6a:d4:80:2d:f5:0d:a6:d7:e8:a8:c5:3a:79:ef:
         50:cd:4c:99:c0:04:83:ec:56:90:1b:3d:45:2f:57:ab:56:67:
         82:5f:41:25:a1:f2:35:f2:fd:5a:78:c1:aa:95:9e:ae:76:90:
         bc:a1:1c:77:6f:03:8f:31:38:0a:ee:68:e9:46:7d:43:f1:47:
         a3:ef:7e:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:00:57 2025 by rpki-client