Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/eae32372-9d88-3d4b-9426-33f93b7a1dca.roa
File:                     eae32372-9d88-3d4b-9426-33f93b7a1dca.roa (raw, json)
Hash identifier:          zHnw6BpjAE/W++N3edDaoC6GiLS1O2fjDkyhi1iP/+4=
Subject key identifier:   36:EB:52:F5:F8:42:BD:D6:FC:0D:CA:4C:2A:61:B1:4E:CE:EB:D2:CF
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285849EBEA7F83EF3B2A2041478E80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/eae32372-9d88-3d4b-9426-33f93b7a1dca.roa
Signing time:             Wed 21 May 2025 01:00:49 +0000
ROA not before:           Wed 21 May 2025 01:00:49 +0000
ROA not after:            Tue 19 Aug 2025 01:00:49 +0000
asID:                     396553
IP address blocks:        199.7.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:eb:ea:7f:83:ef:3b:2a:20:41:47:8e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 21 01:00:49 2025 GMT
            Not After : Aug 19 01:00:49 2025 GMT
        Subject: CN=8e55fe3c-cfe6-4840-9795-53b5d4f2cc99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:64:9a:a5:4e:a2:98:d6:d0:95:16:da:95:46:
                    b9:2d:a5:9a:d6:88:76:42:d3:0a:75:91:63:7e:47:
                    e5:91:21:bb:d4:b8:95:e4:ce:2b:9e:12:8a:b2:4e:
                    47:87:6c:69:41:b5:ef:52:55:09:19:f2:7a:aa:2c:
                    ac:72:c0:77:57:a7:5d:fe:a6:95:27:39:1f:66:bd:
                    03:45:80:be:07:99:81:13:e9:38:d4:fa:f0:36:30:
                    92:ae:9c:3d:74:b6:8d:f9:85:ba:69:b3:3a:98:37:
                    08:c7:71:a1:a3:a1:1b:40:23:94:1e:06:b6:55:db:
                    6d:4f:82:4a:8c:45:9f:3f:d8:4a:53:83:30:07:ac:
                    c9:bd:c4:4d:87:95:c9:7c:aa:e0:08:2f:8f:3a:e5:
                    2d:77:53:7a:a4:9d:be:41:9a:88:80:ea:15:18:bc:
                    39:f7:33:f2:c2:95:df:98:31:43:ef:a5:25:b8:c0:
                    3e:22:7c:cd:2e:14:62:64:b4:5f:57:52:a2:f2:2b:
                    d9:03:ee:e7:6c:59:60:86:76:dc:27:be:b5:7c:59:
                    c8:3b:0e:0a:5d:5e:5d:49:c8:08:e3:f5:26:25:cd:
                    b0:db:f8:ef:72:a3:ad:bd:a5:9b:88:3c:82:95:de:
                    dc:62:98:7a:c1:c7:02:a4:8b:04:c9:42:c0:8e:b1:
                    b0:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:EB:52:F5:F8:42:BD:D6:FC:0D:CA:4C:2A:61:B1:4E:CE:EB:D2:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/eae32372-9d88-3d4b-9426-33f93b7a1dca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:40:85:dd:00:15:72:3a:7b:3a:8c:50:64:46:58:78:16:0c:
         e5:a2:2f:ac:6c:98:5f:6a:ff:32:72:83:1e:aa:af:df:c4:0b:
         7b:10:5d:e1:0f:e0:12:01:87:af:83:8c:77:83:4a:5b:a6:cf:
         2a:0e:02:01:b5:66:07:61:9d:e0:79:4f:ab:1a:5e:f0:18:85:
         92:bc:b6:e0:ee:16:da:48:db:f4:21:a8:71:14:46:8b:90:42:
         69:1a:c4:f1:29:3e:18:84:d9:7d:6f:8a:04:bf:de:3f:09:26:
         70:90:e4:28:c7:11:d2:63:66:8e:22:52:77:cd:16:26:98:53:
         6f:0b:76:76:b6:27:67:22:ed:a0:ef:b8:de:13:a4:bf:83:a6:
         10:ee:1d:83:c2:c0:ae:3d:a1:6f:90:ae:64:71:ad:92:e1:30:
         1a:8b:e1:9b:69:22:98:53:bc:a6:d0:6a:ca:4d:69:aa:92:f4:
         6f:c3:ab:fc:33:91:0e:f3:49:b3:f4:87:c8:b7:40:59:03:2f:
         f4:34:ef:1d:2e:9b:ec:99:c3:bf:72:0a:c4:2e:53:9b:e6:0b:
         88:30:e3:80:5f:82:cd:f9:fe:b6:19:5e:2a:ca:6a:4c:fc:58:
         62:25:3b:b9:7c:cb:a1:3b:81:1f:69:b0:06:2d:af:d2:1a:e4:
         9a:3b:df:16
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnr6n+D7zsqIEFHjoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDUyMTAxMDA0OVoXDTI1MDgxOTAxMDA0OVowLzEtMCsGA1UEAxMk
OGU1NWZlM2MtY2ZlNi00ODQwLTk3OTUtNTNiNWQ0ZjJjYzk5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoGSapU6imNbQlRbalUa5LaWa1oh2QtMKdZFj
fkflkSG71LiV5M4rnhKKsk5Hh2xpQbXvUlUJGfJ6qiyscsB3V6dd/qaVJzkfZr0D
RYC+B5mBE+k41PrwNjCSrpw9dLaN+YW6abM6mDcIx3Gho6EbQCOUHga2VdttT4JK
jEWfP9hKU4MwB6zJvcRNh5XJfKrgCC+POuUtd1N6pJ2+QZqIgOoVGLw59zPywpXf
mDFD76UluMA+InzNLhRiZLRfV1Ki8ivZA+7nbFlghnbcJ761fFnIOw4KXV5dScgI
4/UmJc2w2/jvcqOtvaWbiDyCld7cYph6wccCpIsEyULAjrGw2wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDbrUvX4Qr3W/A3KTCphsU7O69LPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZWFlMzIzNzItOWQ4OC0z
ZDRiLTk0MjYtMzNmOTNiN2ExZGNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwdHMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACpAhd0AFXI6ezqMUGRGWHgWDOWiL6xsmF9q/zJygx6qr9/EC3sQXeEP
4BIBh6+DjHeDSlumzyoOAgG1ZgdhneB5T6saXvAYhZK8tuDuFtpI2/QhqHEURouQ
QmkaxPEpPhiE2X1vigS/3j8JJnCQ5CjHEdJjZo4iUnfNFiaYU28Ldna2J2ci7aDv
uN4TpL+DphDuHYPCwK49oW+QrmRxrZLhMBqL4ZtpIphTvKbQaspNaaqS9G/Dq/wz
kQ7zSbP0h8i3QFkDL/Q07x0um+yZw79yCsQuU5vmC4gw44Bfgs35/rYZXirKakz8
WGIlO7l8y6E7gR9psAYtr9Ia5Jo73xY=
-----END CERTIFICATE-----
Generated at Tue Jul 1 05:34:33 2025 by rpki-client