Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/efbe50ce-5f9a-3f1c-b434-ec626cbfa27d.roa
File:                     efbe50ce-5f9a-3f1c-b434-ec626cbfa27d.roa (raw, json)
Hash identifier:          +bnUqHQMCXhOMRyv/LSKeF28i5bfqc/jB9o/Hb3c7i4=
Subject key identifier:   30:56:FC:F7:39:5F:F0:5A:0B:61:78:AC:61:E4:62:4D:A0:47:B4:ED
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584ACCA66E103795C5A60A5E337C
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/efbe50ce-5f9a-3f1c-b434-ec626cbfa27d.roa
Signing time:             Sat 09 Aug 2025 13:00:41 +0000
ROA not before:           Sat 09 Aug 2025 13:00:41 +0000
ROA not after:            Fri 07 Nov 2025 14:00:41 +0000
asID:                     36618
IP address blocks:        199.7.71.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:cc:a6:6e:10:37:95:c5:a6:0a:5e:33:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug  9 13:00:41 2025 GMT
            Not After : Nov  7 14:00:41 2025 GMT
        Subject: CN=0fe7733a-5f5c-4add-a840-8eca156a6ef5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:7b:a1:2f:66:56:91:e9:1a:7d:1a:8e:7e:a6:
                    a2:0e:3c:5d:a4:2b:93:df:0d:9f:62:81:62:49:c8:
                    a0:a1:a6:3b:75:ba:53:77:fc:67:93:42:14:b3:91:
                    c4:0a:c8:b3:62:53:4d:bf:8f:0a:6d:31:47:33:9a:
                    27:1d:0d:04:50:16:3e:f3:89:bf:b0:8b:0b:1b:e6:
                    fd:99:51:fc:f3:ae:16:a7:ff:4c:12:e1:4d:ad:f9:
                    93:98:bc:d5:af:fe:77:83:f3:80:19:b6:47:95:7c:
                    53:2e:34:10:a2:93:a3:f7:d2:1a:06:84:d7:50:0d:
                    30:92:a2:52:bc:ef:72:e1:a5:45:0d:8b:b5:3e:6c:
                    5e:36:e6:65:30:98:5f:84:75:70:2e:be:23:09:9a:
                    fd:5a:95:48:bd:c5:42:f9:e1:16:cb:96:72:f2:26:
                    29:35:e5:95:09:c8:00:88:0c:7b:12:46:1f:6f:c7:
                    54:d2:4c:c4:9f:42:61:fe:9a:5f:97:36:3c:88:a7:
                    6c:f4:7f:67:8a:58:b0:00:b3:d8:5f:96:b3:09:b6:
                    47:17:9e:86:2a:df:92:6d:ee:c1:1b:ca:9d:8e:01:
                    5d:32:a4:5d:25:13:4b:1a:c2:e8:34:c7:8b:bb:13:
                    30:6c:a1:06:e6:94:f8:be:ea:cc:3c:9f:70:06:1d:
                    94:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:56:FC:F7:39:5F:F0:5A:0B:61:78:AC:61:E4:62:4D:A0:47:B4:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/efbe50ce-5f9a-3f1c-b434-ec626cbfa27d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.71.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:ea:43:7b:b0:b1:da:1a:6c:a6:18:10:0b:fb:0a:4b:cb:5e:
         b8:ce:b5:c0:d0:77:d0:bd:08:b4:ae:1c:1a:43:b1:7e:a8:bb:
         b2:ea:4f:bb:a7:9a:ab:48:08:56:36:1f:9f:fa:a0:2f:61:a6:
         c0:52:bb:57:1b:bf:7e:c8:a4:c4:ce:80:e6:36:dc:09:97:c9:
         cd:7a:84:0a:b6:74:02:1b:58:01:a9:ee:51:d7:42:09:a5:13:
         f5:65:ae:b3:47:bf:a9:b1:b1:bf:39:8f:1e:1c:54:72:12:8b:
         1e:26:11:88:d3:6d:44:2a:00:4a:8e:d5:20:4d:31:c4:e2:8c:
         a2:be:79:05:42:89:b4:24:7a:46:21:a1:df:79:04:e5:bc:52:
         c8:2b:1d:5d:b6:81:94:f0:66:3d:47:14:4e:81:47:bd:f8:36:
         69:f3:eb:d6:23:2e:3f:90:ec:5c:a3:a2:7a:b9:90:c4:81:62:
         35:82:ca:10:0f:51:5f:be:82:47:86:91:1d:62:ac:9d:d6:ef:
         49:1d:4f:8c:47:0f:5f:37:16:2d:5d:5b:29:aa:98:72:56:97:
         0d:07:23:b5:f5:33:6b:2f:38:da:67:02:97:57:7e:a6:88:2b:
         31:38:05:68:34:0d:4d:b3:20:df:9a:f6:b1:c6:7f:82:92:52:
         2e:4c:95:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:37:42 2025 by rpki-client