Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/06b461aa-7896-3e4c-94b1-8d2f5014cec0.roa
File:                     06b461aa-7896-3e4c-94b1-8d2f5014cec0.roa (raw, json)
Hash identifier:          0vnDDBDoD1aYnz3tGNof2y4pnzc84zMdL20D82JBuQk=
Subject key identifier:   EE:F0:75:10:4D:41:A4:59:57:19:07:2C:AB:3E:3C:CA:54:7B:67:41
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285849EBEA7FF2823023660CB86380
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/06b461aa-7896-3e4c-94b1-8d2f5014cec0.roa
Signing time:             Wed 21 May 2025 01:00:49 +0000
ROA not before:           Wed 21 May 2025 01:00:49 +0000
ROA not after:            Tue 19 Aug 2025 01:00:49 +0000
asID:                     396595
IP address blocks:        199.7.71.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:eb:ea:7f:f2:82:30:23:66:0c:b8:63:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 21 01:00:49 2025 GMT
            Not After : Aug 19 01:00:49 2025 GMT
        Subject: CN=e0b1414b-4990-48bb-9312-bf4407c0b8fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:91:73:0b:47:e1:8f:aa:53:b3:ed:2a:9c:fa:
                    2d:e6:3b:e8:64:44:e2:80:3c:cb:8d:89:c3:82:ca:
                    a6:07:1e:f1:be:2e:40:6e:16:05:ac:b2:ba:cc:36:
                    66:10:8f:39:0b:ed:6d:64:c6:2a:ef:f8:63:3d:83:
                    c7:0f:30:20:30:eb:91:ea:29:b9:f7:b2:a5:0b:fe:
                    49:0a:4d:3f:36:39:b2:d7:d2:ca:b3:e5:30:d0:10:
                    ee:59:14:d5:b8:3d:b3:65:f4:1e:19:45:0c:31:e2:
                    e4:35:d8:52:57:21:22:68:cf:0c:b3:1d:b4:59:9c:
                    7c:8e:a3:da:6f:9d:61:49:fd:73:8d:83:e0:03:c0:
                    15:05:f0:7b:68:b8:6a:f7:24:c1:4f:2a:5b:82:84:
                    a6:c3:6b:a3:53:14:e8:f1:eb:ee:ff:5e:b9:db:ac:
                    19:48:dc:8a:b4:60:1c:a3:da:2d:16:7f:c4:3d:3d:
                    09:56:dc:2a:38:96:03:f7:f0:3d:ab:64:e3:86:41:
                    5a:ff:49:44:78:d3:40:85:2b:17:b0:83:21:02:89:
                    49:04:e6:13:d0:ea:dd:a7:8a:84:57:0b:68:ad:3b:
                    e7:fe:c3:ca:b5:01:8f:42:e6:02:b9:a1:d9:cb:73:
                    78:79:ab:65:74:84:36:d5:bf:96:c3:db:99:5b:48:
                    42:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:F0:75:10:4D:41:A4:59:57:19:07:2C:AB:3E:3C:CA:54:7B:67:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/06b461aa-7896-3e4c-94b1-8d2f5014cec0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.71.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:c8:11:48:6e:d8:16:a6:a3:2b:10:2c:11:f6:9b:dd:ca:6d:
         87:05:e1:2b:38:33:42:b6:9b:ce:a0:0c:1c:d0:eb:cc:a2:8d:
         8a:93:36:43:5d:61:61:e4:61:df:2f:44:27:88:d3:e8:5d:78:
         60:26:32:54:8d:94:ce:7e:6c:d3:c0:d6:42:ab:68:54:1d:d3:
         ab:51:a9:e5:44:6f:26:b2:29:77:6c:2a:02:08:64:67:43:bd:
         bb:75:a5:e2:53:cd:4e:c1:37:e0:9d:ea:37:18:65:ce:5d:f6:
         36:61:47:7d:59:70:ca:23:30:dc:ac:fb:c3:2b:e9:bc:85:66:
         82:97:2d:56:3b:3b:3e:6d:1f:e4:b8:c1:a5:5e:df:0f:e7:de:
         aa:22:8c:0e:cf:ac:22:0e:6f:87:71:83:3c:ad:3e:c1:22:74:
         b1:da:84:d0:35:0a:7d:47:0a:b0:d8:4b:1c:62:74:9e:d5:85:
         6a:d8:62:cb:42:1d:45:ac:41:5c:e2:50:ab:94:aa:48:0f:b8:
         6f:be:86:68:09:48:72:65:d5:fd:2f:97:f2:b0:a9:66:12:4e:
         6a:ce:1f:2f:88:1c:ff:55:7b:e1:ba:83:2a:1b:2d:08:59:86:
         06:82:36:78:6b:99:e3:d8:4b:7e:be:60:78:00:0e:a9:04:df:
         83:f7:ed:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 19:32:12 2025 by rpki-client