Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f887a2c8-0f26-3b5e-8cff-d2702d75d14d.roa
File:                     f887a2c8-0f26-3b5e-8cff-d2702d75d14d.roa (raw, json)
Hash identifier:          A6b+uMeasyED5Qi6XQfzMYH/AnUrmDFXyOcsdF981fk=
Subject key identifier:   99:42:62:58:C5:8A:E2:5E:11:FD:01:B9:64:0C:49:9A:92:D6:D1:E9
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584ACCA683AE00181A09FC1CB940
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f887a2c8-0f26-3b5e-8cff-d2702d75d14d.roa
Signing time:             Sat 09 Aug 2025 13:00:41 +0000
ROA not before:           Sat 09 Aug 2025 13:00:41 +0000
ROA not after:            Fri 07 Nov 2025 14:00:41 +0000
asID:                     396542
IP address blocks:        199.7.71.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:cc:a6:83:ae:00:18:1a:09:fc:1c:b9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug  9 13:00:41 2025 GMT
            Not After : Nov  7 14:00:41 2025 GMT
        Subject: CN=d4ddf3c2-a3e6-433c-a408-07b36798830f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:3c:82:23:ba:66:0e:74:52:5b:09:6a:ef:85:
                    28:73:7e:35:2e:e0:83:b9:38:04:a3:ae:9f:f2:74:
                    a0:63:5a:bc:0b:6c:d0:82:6e:16:c1:8a:ed:8b:4e:
                    28:5f:92:c7:ba:9f:db:2c:be:8f:70:c6:9a:ee:d6:
                    f3:98:c5:34:58:24:55:68:dc:12:c4:7a:12:9e:5f:
                    ac:53:26:70:69:35:a4:fd:72:1d:06:f4:67:37:38:
                    63:22:1a:03:63:31:b6:8a:bc:98:d8:f6:d7:47:f0:
                    09:e3:b6:94:58:22:34:34:33:4c:32:20:1b:ea:38:
                    df:4d:86:4f:0c:73:8d:2b:e0:2c:11:c7:94:d6:5f:
                    75:df:c8:4b:8b:a1:94:eb:38:70:bf:5e:e8:8e:77:
                    d8:0a:76:49:2e:e3:85:00:28:3c:e2:a5:e6:fb:ec:
                    d1:fe:18:4e:3a:ff:34:39:00:4c:2e:e7:6e:4a:f1:
                    e7:90:94:32:23:de:1e:47:70:08:3c:5c:7b:12:97:
                    e4:63:c6:9b:3c:dc:92:31:be:34:c9:9e:29:bd:80:
                    8f:49:63:e7:c9:21:24:db:20:9f:fa:41:ff:33:9c:
                    20:fe:87:4e:d3:1b:92:26:c4:67:40:ce:62:3a:87:
                    93:d7:9a:2e:14:ce:47:a9:18:40:7e:46:24:41:8a:
                    33:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:42:62:58:C5:8A:E2:5E:11:FD:01:B9:64:0C:49:9A:92:D6:D1:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f887a2c8-0f26-3b5e-8cff-d2702d75d14d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.71.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:3f:ae:77:b8:2e:3c:87:56:aa:ff:c8:6a:39:6b:c8:9a:18:
         4f:19:e0:a4:cf:82:6c:65:bc:df:0b:38:cf:fd:ac:4f:16:c9:
         b6:0d:9b:be:53:d9:01:45:92:2b:dc:2e:32:4e:b8:75:77:ab:
         c2:10:1d:97:e6:ee:d4:b5:6a:27:b4:33:12:f8:52:d5:4c:6e:
         0e:1c:87:c2:5b:ef:99:6b:55:82:d0:9c:c3:8a:e8:95:da:ed:
         d9:17:44:04:66:d5:4b:32:d3:78:aa:8b:2b:9c:01:2a:79:02:
         06:92:d0:5d:16:b4:03:2c:6d:c4:49:e5:65:3c:99:4c:96:db:
         eb:21:5e:45:e1:fe:04:7e:bd:5f:07:34:bd:15:dc:0d:8a:11:
         35:1b:3d:d6:d5:c7:31:2f:8f:cd:f9:09:39:24:0f:47:cf:22:
         ad:6b:ee:8c:3e:4e:60:87:29:6b:7a:0f:29:c6:86:2d:f4:64:
         3a:b3:ae:97:4a:fb:23:76:88:57:20:49:60:9c:a7:3e:9c:6f:
         6f:df:ee:7c:a7:1a:ac:12:bd:fe:94:df:96:35:32:de:ab:0a:
         1a:0a:59:ba:cb:df:ee:4a:ff:2d:44:55:77:f7:70:b8:cf:61:
         bd:04:77:e4:83:c0:00:b4:3a:f1:16:fd:49:4f:f6:68:97:d7:
         16:73:f4:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:03:49 2025 by rpki-client