Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/01fedb72-4e1d-370b-9a63-8f418044b5bd.roa
File:                     01fedb72-4e1d-370b-9a63-8f418044b5bd.roa (raw, json)
Hash identifier:          piGu6QDzArTmEmpVNZVXTnxsMlWX/e20ITWJovObV8w=
Subject key identifier:   C9:04:29:FD:F9:9A:52:DE:04:75:0F:96:C9:01:F8:0F:50:1E:25:F2
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858490CB14AE1009F1959618FAB00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/01fedb72-4e1d-370b-9a63-8f418044b5bd.roa
Signing time:             Sun 02 Mar 2025 02:00:40 +0000
ROA not before:           Sun 02 Mar 2025 02:00:40 +0000
ROA not after:            Sat 31 May 2025 01:00:40 +0000
asID:                     396570
IP address blocks:        199.7.71.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:0c:b1:4a:e1:00:9f:19:59:61:8f:ab:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar  2 02:00:40 2025 GMT
            Not After : May 31 01:00:40 2025 GMT
        Subject: CN=19c79367-6aeb-4b65-8e4a-efd4590b4b1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:55:f5:1f:98:82:82:f5:0b:e4:97:b3:2d:84:
                    36:82:1c:10:23:4a:0a:0b:81:cc:22:bd:d8:9e:bb:
                    2f:8f:d3:a4:b7:7b:e2:95:c1:9b:aa:bd:01:7f:bf:
                    67:a8:34:9c:68:b4:e8:b7:d2:19:ad:af:0c:08:3a:
                    95:54:51:66:06:c8:c2:24:f4:18:5a:87:a4:86:d0:
                    7f:33:a6:2d:3f:43:01:ec:0d:48:f7:90:a6:52:bc:
                    51:00:39:6d:89:4b:8a:e5:c3:06:8f:73:db:11:bd:
                    c6:14:93:5f:e1:1a:fe:5b:34:47:5b:90:52:a0:ce:
                    63:e6:a2:ee:b9:ee:2a:f4:f2:14:6c:81:1a:a7:08:
                    d8:b6:2f:35:4e:7f:d1:15:5e:fd:48:e9:ca:40:24:
                    f5:e9:9b:a9:ba:e1:14:d0:5b:81:fc:f6:c8:01:42:
                    f2:16:c5:7a:bd:b4:a5:20:ca:d0:40:f8:b6:08:90:
                    6d:a5:28:4d:93:34:fb:02:ab:46:97:5d:dc:ca:f6:
                    35:e0:99:20:d2:70:de:33:6b:7b:0e:cf:69:46:e5:
                    ae:47:73:d5:52:de:5b:8c:2e:2d:cf:69:03:6f:bd:
                    f6:f0:e5:d6:89:48:bc:38:09:22:5d:05:44:58:5d:
                    0c:eb:f3:31:aa:5a:fe:bf:b9:2f:24:3f:6d:18:1f:
                    1a:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:04:29:FD:F9:9A:52:DE:04:75:0F:96:C9:01:F8:0F:50:1E:25:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/01fedb72-4e1d-370b-9a63-8f418044b5bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.71.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:b7:8f:6a:a8:21:0f:68:27:af:f5:df:72:ac:84:e4:c8:28:
         22:cc:74:68:25:3a:1c:59:20:60:6e:0b:17:cc:12:4d:be:c4:
         b5:e8:61:33:47:a2:c3:60:8b:a3:55:47:63:25:88:f7:f1:eb:
         97:d5:b0:c8:72:17:1c:fe:84:a3:aa:a6:c0:e3:9a:c2:aa:24:
         06:e1:82:40:35:e2:a9:8a:f8:54:12:a3:fe:7a:6a:5f:90:ad:
         e1:3d:0d:28:73:b5:2e:e9:ad:4e:d9:b3:6d:74:4f:ae:bb:f1:
         cf:88:37:b0:b6:c9:e0:ba:35:4a:9f:df:87:84:1d:69:d2:06:
         29:c7:ab:77:d0:15:ee:82:9d:66:51:cd:84:61:2d:c9:f9:7d:
         32:68:91:e3:f1:4b:9b:28:c5:4f:cd:0d:89:dc:8d:11:16:57:
         ba:2a:c2:72:f3:2d:99:94:b7:6b:33:d8:9c:0d:5d:a8:c0:48:
         f5:bd:29:02:00:30:68:52:21:a8:29:d2:c4:df:00:14:00:46:
         3b:2f:ee:0a:85:d6:46:4e:35:f5:c5:01:6e:e3:99:f9:9f:98:
         e2:a0:d7:27:3a:8d:b6:c7:ea:d2:d0:7a:15:d3:30:c8:61:53:
         2b:ca:da:73:4e:ea:01:22:9f:cb:db:12:a6:bb:08:1b:56:3f:
         3c:fc:0e:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:13:04 2025 by rpki-client