Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/eae32372-9d88-3d4b-9426-33f93b7a1dca.roa
File:                     eae32372-9d88-3d4b-9426-33f93b7a1dca.roa (raw, json)
Hash identifier:          dUWaA5jnZhPV2vr18PWxy9Zi6jsqjQrhubQaQGMQCI8=
Subject key identifier:   4C:87:D0:0B:F3:C2:16:68:54:FE:8B:7B:32:73:43:77:72:30:69:47
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584ACCA687526829EF159399C0C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/eae32372-9d88-3d4b-9426-33f93b7a1dca.roa
Signing time:             Sat 09 Aug 2025 13:00:41 +0000
ROA not before:           Sat 09 Aug 2025 13:00:41 +0000
ROA not after:            Fri 07 Nov 2025 14:00:41 +0000
asID:                     396553
IP address blocks:        199.7.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:cc:a6:87:52:68:29:ef:15:93:99:c0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug  9 13:00:41 2025 GMT
            Not After : Nov  7 14:00:41 2025 GMT
        Subject: CN=043b661e-0fbd-4c0f-ae4d-fe1cd093a8f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:7c:ae:9e:49:0d:34:78:35:c6:58:c7:47:33:
                    01:1e:3d:be:7d:b7:fb:69:15:bd:b5:68:a4:73:a3:
                    b6:de:ba:89:bf:21:bd:70:72:23:d5:a7:83:e1:4d:
                    8b:9f:d0:b4:ed:49:78:d8:db:0c:3f:e1:5a:ec:95:
                    d3:39:25:67:73:2d:34:6f:6e:27:98:9f:14:71:23:
                    a3:df:ff:4a:7b:67:b0:7d:35:3e:79:1e:84:32:bf:
                    31:90:84:ba:74:2a:a5:f5:38:2f:6b:b4:48:18:45:
                    d6:99:b1:83:86:ca:02:87:f5:57:a3:f6:16:23:8f:
                    38:e1:a5:91:4d:60:31:f5:16:3f:ca:a6:84:6b:29:
                    4b:28:4c:34:19:d4:51:b1:dc:04:df:c0:12:07:ad:
                    37:bf:07:d5:90:06:70:75:18:a5:be:03:51:a7:54:
                    2b:a1:b7:c2:dc:fa:58:25:57:ae:82:86:d8:4d:af:
                    bf:6b:14:cd:52:45:ab:4a:1c:6c:1f:b0:d5:0d:06:
                    3d:a8:a7:69:77:de:06:33:fb:8f:68:43:ee:36:fd:
                    6d:07:7b:76:99:0b:7b:c5:f8:32:95:d5:c3:5d:f4:
                    13:82:8d:63:47:74:45:c3:32:6c:3b:2c:6e:23:77:
                    72:c9:75:36:86:43:ad:1c:50:c4:aa:89:83:a2:d8:
                    4e:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:87:D0:0B:F3:C2:16:68:54:FE:8B:7B:32:73:43:77:72:30:69:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/eae32372-9d88-3d4b-9426-33f93b7a1dca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:8b:bc:13:b8:8b:f3:93:81:5e:b3:33:c7:7d:a4:01:1b:cc:
         c1:25:8d:59:cb:2a:bf:df:5e:19:d5:34:c4:00:56:ee:c4:87:
         68:9b:0c:5d:a4:4c:fc:43:b2:00:21:b1:3f:dd:b9:40:1c:e9:
         14:fc:16:ea:01:00:73:6b:27:2b:ee:5f:9a:cc:05:fa:4f:22:
         84:a7:75:87:a6:bc:c1:81:df:c5:43:57:7a:07:ac:1b:16:13:
         0f:37:7f:02:11:92:46:fb:65:05:c5:e0:25:f6:31:11:49:84:
         ea:a5:21:e7:8e:0b:c8:4c:31:62:6d:be:c4:64:fe:5b:92:8a:
         04:24:c6:88:8e:15:a2:5c:1b:2b:36:ac:a7:b5:17:33:aa:5e:
         24:24:c0:0a:6d:19:e0:e9:b7:da:6e:d5:39:4e:d7:55:fc:02:
         ca:5e:29:bb:4a:26:91:52:a9:87:92:9a:a5:53:6a:50:03:c2:
         0d:ee:f7:94:ca:2a:12:4d:11:20:dc:b1:d8:34:66:60:0f:6c:
         e7:5e:96:34:d1:8a:2c:4f:7f:6d:60:5d:f6:f5:44:83:3d:d0:
         3b:46:e6:97:21:1b:9e:50:af:47:e3:18:62:12:f4:66:98:ef:
         93:d6:ba:90:3e:80:aa:94:ab:0f:b2:08:76:4f:7f:fb:75:83:
         40:fb:9b:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:26:01 2025 by rpki-client