Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/eac38a1e-3dca-3d47-b8d1-3a83a2ed66e9.roa
File:                     eac38a1e-3dca-3d47-b8d1-3a83a2ed66e9.roa (raw, json)
Hash identifier:          xXTH35AXcExDVlu8EVG7tc4uNWRTKsHI7vh6mq80TUU=
Subject key identifier:   D2:A2:A0:0B:E1:03:4E:E7:26:4D:0E:39:5D:56:D6:12:81:1B:E9:24
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584ACCA67FAA2E45EA437BFEDFC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/eac38a1e-3dca-3d47-b8d1-3a83a2ed66e9.roa
Signing time:             Sat 09 Aug 2025 13:00:41 +0000
ROA not before:           Sat 09 Aug 2025 13:00:41 +0000
ROA not after:            Fri 07 Nov 2025 14:00:41 +0000
asID:                     396595
IP address blocks:        199.7.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:cc:a6:7f:aa:2e:45:ea:43:7b:fe:df:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug  9 13:00:41 2025 GMT
            Not After : Nov  7 14:00:41 2025 GMT
        Subject: CN=58c7ddec-e2f9-47d0-a8b0-b7a7f9074ba8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b4:03:ab:7a:c3:f6:10:6f:b8:73:5f:4c:f9:
                    88:8b:1b:d8:dd:1b:13:19:55:b8:ec:90:f7:7b:45:
                    53:b1:f8:18:65:4e:66:7f:42:04:e6:ed:a1:32:c5:
                    e4:6d:21:d8:8c:dc:78:3b:1f:c1:09:0d:f6:2d:40:
                    59:2a:f7:7d:7f:e8:48:c7:fd:e2:17:4d:4f:7c:23:
                    3f:bf:c0:c6:e1:e0:56:c8:33:fd:95:d2:d3:8a:85:
                    36:bb:57:82:ac:1f:c1:09:60:9b:62:2f:6e:2e:01:
                    6a:ae:ae:54:79:9c:e7:92:18:df:98:29:7b:a5:6c:
                    cd:42:cd:26:d6:dd:cd:e7:25:a8:0f:4f:cf:8f:ad:
                    30:df:c9:8e:34:9b:b5:3b:cf:4e:a1:dd:e7:8f:7d:
                    f2:16:b2:79:93:fc:3d:b1:96:61:76:06:86:9e:ca:
                    6a:b8:6a:a4:48:bb:86:93:71:d0:7b:1d:e9:c1:d7:
                    6a:2d:3e:56:ea:0f:a6:c4:9d:85:c2:11:25:0b:e3:
                    c8:7b:0b:b8:0f:08:c4:f4:38:5d:53:2a:79:f7:03:
                    d2:c7:53:16:c3:e9:85:b9:5e:38:84:45:e6:fe:f1:
                    f7:00:31:13:27:e9:1f:28:5c:b5:ca:8b:7e:1d:a5:
                    b4:d6:4c:48:7b:57:ac:cc:b2:17:96:2d:c0:8f:9b:
                    0a:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:A2:A0:0B:E1:03:4E:E7:26:4D:0E:39:5D:56:D6:12:81:1B:E9:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/eac38a1e-3dca-3d47-b8d1-3a83a2ed66e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:65:c3:79:3f:ea:86:c9:0a:cd:ad:f8:83:a6:f6:e0:14:50:
         8f:48:d0:22:2f:c4:d3:5f:c8:92:a1:bc:a4:37:f2:e5:eb:4f:
         da:3e:a7:4e:b1:6f:a6:22:a7:dd:c7:b6:b0:cd:5a:43:38:80:
         fa:79:78:a2:19:92:7f:a1:d9:59:f9:08:08:cf:92:5d:c0:a9:
         09:bc:86:9a:cf:45:20:c9:e2:af:04:ae:f7:e1:59:b4:71:a9:
         38:93:30:41:5c:4a:6a:f4:7a:06:3b:a1:84:89:1e:f7:59:ed:
         7d:50:7b:30:37:f2:dc:cf:2b:66:09:7c:4b:c9:ee:d4:0a:24:
         38:6c:e9:62:24:c4:a6:b5:1c:9b:24:09:cc:be:42:56:a3:11:
         f8:22:72:51:a4:9b:b7:bc:eb:87:5a:55:71:92:85:c0:8e:02:
         b8:fb:f3:51:85:41:5b:cf:64:0f:d9:3e:de:e8:6f:23:af:ca:
         89:a1:3e:84:a2:5c:71:d4:17:d2:8b:1f:31:02:96:e7:ea:fa:
         ae:5c:12:ee:18:06:fb:85:ef:75:22:4b:a1:58:28:9b:33:55:
         ad:27:43:ce:b2:31:fa:12:cc:22:ee:4b:59:3a:73:06:2b:d0:
         a5:d6:a3:13:34:ef:87:d3:1f:b3:ea:b7:92:c7:a3:3f:0c:31:
         00:01:f1:a9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErMpn+qLkXqQ3v+38AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDgwOTEzMDA0MVoXDTI1MTEwNzE0MDA0MVowLzEtMCsGA1UEAxMk
NThjN2RkZWMtZTJmOS00N2QwLWE4YjAtYjdhN2Y5MDc0YmE4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtrQDq3rD9hBvuHNfTPmIixvY3RsTGVW47JD3
e0VTsfgYZU5mf0IE5u2hMsXkbSHYjNx4Ox/BCQ32LUBZKvd9f+hIx/3iF01PfCM/
v8DG4eBWyDP9ldLTioU2u1eCrB/BCWCbYi9uLgFqrq5UeZznkhjfmCl7pWzNQs0m
1t3N5yWoD0/Pj60w38mONJu1O89Ood3nj33yFrJ5k/w9sZZhdgaGnspquGqkSLuG
k3HQex3pwddqLT5W6g+mxJ2FwhElC+PIewu4DwjE9DhdUyp59wPSx1MWw+mFuV44
hEXm/vH3ADETJ+kfKFy1yot+HaW01kxIe1eszLIXli3Aj5sK4QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNKioAvhA07nJk0OOV1W1hKBG+kkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZWFjMzhhMWUtM2RjYS0z
ZDQ3LWI4ZDEtM2E4M2EyZWQ2NmU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwdHMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAllw3k/6obJCs2t+IOm9uAUUI9I0CIvxNNfyJKhvKQ38uXrT9o+p06x
b6Yip93HtrDNWkM4gPp5eKIZkn+h2Vn5CAjPkl3AqQm8hprPRSDJ4q8ErvfhWbRx
qTiTMEFcSmr0egY7oYSJHvdZ7X1QezA38tzPK2YJfEvJ7tQKJDhs6WIkxKa1HJsk
Ccy+QlajEfgiclGkm7e864daVXGShcCOArj781GFQVvPZA/ZPt7obyOvyomhPoSi
XHHUF9KLHzEClufq+q5cEu4YBvuF73UiS6FYKJszVa0nQ86yMfoSzCLuS1k6cwYr
0KXWoxM074fTH7Pqt5LHoz8MMQAB8ak=
-----END CERTIFICATE-----
Generated at Sat Aug 23 15:01:51 2025 by rpki-client