Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0211fb73-7b2b-30ac-adfe-af5404647b0a.roa
File:                     0211fb73-7b2b-30ac-adfe-af5404647b0a.roa (raw, json)
Hash identifier:          HgZn8wonZUy7zxlaeQJ8u6UdaseLS7EavGmIAgo3XH8=
Subject key identifier:   A5:D8:BF:CF:A4:D1:78:8C:9B:18:3A:14:E4:31:AA:6C:E9:F8:E2:BD
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285849EBEA6461728F596602F4C480
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0211fb73-7b2b-30ac-adfe-af5404647b0a.roa
Signing time:             Wed 21 May 2025 01:00:49 +0000
ROA not before:           Wed 21 May 2025 01:00:49 +0000
ROA not after:            Tue 19 Aug 2025 01:00:49 +0000
asID:                     396557
IP address blocks:        199.7.71.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:eb:ea:64:61:72:8f:59:66:02:f4:c4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 21 01:00:49 2025 GMT
            Not After : Aug 19 01:00:49 2025 GMT
        Subject: CN=f37a80d7-1c3a-41aa-bff4-f24b0134ffc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:7f:35:2f:75:44:68:a7:49:b3:a3:a1:fe:c7:
                    32:1c:ae:0b:25:76:80:3b:ba:14:62:03:54:12:4f:
                    1d:e2:aa:5a:2b:7a:13:fa:b8:f8:52:56:c8:7b:69:
                    31:f0:ae:d4:7d:5a:de:df:51:b7:b4:a8:96:3a:44:
                    aa:87:5c:79:b8:21:f0:84:e0:85:7f:95:7b:50:9f:
                    06:aa:63:be:d4:26:55:c7:a4:37:cf:6f:c6:26:78:
                    51:86:1d:dd:38:a3:60:1a:64:50:dc:65:65:ba:0c:
                    b1:8e:43:e6:50:f1:e7:82:0f:4a:8f:60:2d:3a:cc:
                    9c:82:0a:fd:4a:0d:c0:ce:29:8b:84:33:d6:e1:a9:
                    8a:be:8d:c1:c2:e2:67:4a:dc:9f:34:c4:0d:8e:7d:
                    1b:36:01:ed:09:b3:ee:af:b8:38:84:86:28:89:11:
                    ec:80:0f:51:49:87:f3:51:b2:73:76:7e:a7:40:ee:
                    17:78:ab:2b:62:27:ab:76:2c:44:29:fe:ae:84:b9:
                    02:59:d4:e2:63:42:98:b7:15:4c:c0:ca:92:19:84:
                    94:d8:94:bb:cf:67:81:9e:ef:27:32:c9:63:e0:e8:
                    7f:26:38:bf:ca:fb:ab:a4:37:09:7f:f8:39:ef:ed:
                    0b:c4:2d:f6:ee:66:34:68:a4:98:7e:01:77:50:08:
                    72:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:D8:BF:CF:A4:D1:78:8C:9B:18:3A:14:E4:31:AA:6C:E9:F8:E2:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0211fb73-7b2b-30ac-adfe-af5404647b0a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.71.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:dd:e1:2e:32:32:43:26:f9:57:10:14:b9:94:d3:cd:4e:03:
         01:c2:66:21:5d:87:b2:45:54:52:1b:fa:c2:69:e7:39:8a:3d:
         af:72:d9:76:20:95:ee:24:b5:d9:48:fa:56:31:2a:a5:18:02:
         db:2c:51:92:7c:5f:08:8e:2b:70:ca:95:cc:44:86:4d:ed:97:
         b0:f8:75:2c:95:ec:fd:9b:9c:ad:81:7e:d7:19:06:67:15:a6:
         f5:c5:3c:ef:90:c0:be:80:40:7c:0f:13:7d:4a:11:59:de:2a:
         e4:73:af:60:03:c9:36:70:c5:1b:33:47:34:40:4b:47:af:a2:
         d9:e6:8b:f6:90:cb:eb:23:2a:47:55:5d:9d:ac:44:23:f5:b4:
         d0:46:c8:2c:22:55:57:b2:2d:bc:6c:ba:95:e6:55:b8:fc:33:
         15:32:19:28:49:f7:fc:99:fd:91:63:d4:c1:73:84:6c:90:39:
         bf:e3:d3:34:c1:26:96:9a:fb:ed:f3:01:99:bf:fa:05:e7:fc:
         2e:14:bf:0f:73:a8:22:35:22:56:88:b9:69:b6:23:8e:9d:a8:
         7a:03:f6:cb:c8:2a:d4:32:a7:1a:4f:e2:c6:3c:e4:95:4d:c4:
         aa:80:7c:9d:5c:7f:26:c7:43:10:9e:e4:25:9d:3d:a0:a8:c4:
         69:ea:31:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 19:41:23 2025 by rpki-client