Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1364e581-bb4a-3766-9125-586c63ffb099.roa
File:                     1364e581-bb4a-3766-9125-586c63ffb099.roa (raw, json)
Hash identifier:          WKT+gUKXqd/Dz33tRTjRSOaNauKMh2FjaDBWSHKnilQ=
Subject key identifier:   60:E1:BD:AD:0E:EB:D2:8A:F9:32:6C:1E:23:64:E9:DB:2A:CF:7B:6D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285849EBEA64CF7AF9639414D165C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1364e581-bb4a-3766-9125-586c63ffb099.roa
Signing time:             Wed 21 May 2025 01:00:49 +0000
ROA not before:           Wed 21 May 2025 01:00:49 +0000
ROA not after:            Tue 19 Aug 2025 01:00:49 +0000
asID:                     36616
IP address blocks:        199.7.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:eb:ea:64:cf:7a:f9:63:94:14:d1:65:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 21 01:00:49 2025 GMT
            Not After : Aug 19 01:00:49 2025 GMT
        Subject: CN=c79cbf6d-9d1f-43b2-956f-66241faf5d4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:bc:77:35:78:0c:46:19:82:88:75:98:cb:4e:
                    d8:99:2b:97:15:71:6d:26:24:e0:cb:69:8e:0a:96:
                    45:1e:e3:f5:62:0d:9e:b6:64:8d:0c:1b:15:20:0c:
                    34:b8:a4:8b:d4:04:d8:13:a9:3c:17:82:48:aa:cd:
                    0f:23:6b:5c:42:99:f0:3c:f8:0f:3e:b8:52:a2:a0:
                    34:a1:d3:fb:6f:f0:59:ef:64:72:53:d9:ad:52:d2:
                    ba:be:e6:91:47:2e:69:b7:38:1e:3b:ba:b7:7c:93:
                    8d:e3:10:70:b7:f8:35:f4:32:9e:56:2e:b0:f3:4a:
                    47:65:d5:17:d5:66:4b:3f:d0:13:a1:2d:cf:e0:25:
                    ae:df:66:c0:c0:8e:da:c8:8e:d5:e0:30:cc:11:af:
                    af:c4:6a:68:19:71:84:ce:a0:fd:96:2f:c0:f9:37:
                    1c:ea:e7:aa:44:ee:d4:96:b7:bf:79:1f:41:67:3d:
                    48:c9:de:90:86:62:c6:cf:84:72:f0:56:3e:24:27:
                    22:05:21:35:f8:1c:bc:b5:af:7f:aa:93:2e:0f:05:
                    20:e8:ef:77:85:c6:e6:09:8e:0c:62:e7:81:cc:d0:
                    f1:7b:57:37:9a:1b:32:86:b8:6d:d4:a1:e7:6f:db:
                    9c:3c:20:22:31:bb:6b:01:bd:d9:f4:15:a6:07:87:
                    33:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:E1:BD:AD:0E:EB:D2:8A:F9:32:6C:1E:23:64:E9:DB:2A:CF:7B:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1364e581-bb4a-3766-9125-586c63ffb099.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:ef:0f:ed:db:48:44:af:c4:44:bc:ad:9e:93:8d:99:38:06:
         b1:1f:d8:66:a8:20:6d:09:d3:1e:41:b1:5e:6f:23:fc:05:a4:
         77:21:1d:cd:57:cb:ee:3c:32:25:fb:f4:94:f2:da:6c:a9:1d:
         0c:a2:95:ea:c3:43:3e:ef:f4:0f:5f:9f:e8:9e:fe:f0:7c:64:
         ce:9a:1f:e7:dc:95:c1:40:46:dc:ff:60:ac:82:ad:06:5f:29:
         a0:16:62:b6:53:c1:c0:e0:0f:30:52:d4:a9:98:ec:b7:00:07:
         a1:e6:6b:4e:70:ed:ee:0d:4d:85:57:80:ed:24:8e:fa:55:de:
         69:89:2e:50:2f:e0:0b:50:cb:31:38:18:62:9b:f6:5b:fc:5b:
         27:51:20:45:c5:58:98:1c:38:96:75:21:b4:67:01:71:86:3c:
         33:9e:95:45:40:e6:57:f7:1f:84:f5:dd:ab:b2:15:c7:d5:72:
         de:0e:72:39:59:73:89:30:4d:58:6b:41:a3:7c:27:b6:36:df:
         84:1d:36:1a:3a:1f:44:65:16:06:c5:35:63:79:87:4b:a7:37:
         2b:53:5b:8e:f4:71:cc:20:c6:00:d4:f2:ae:21:63:3c:15:b4:
         c8:56:31:85:93:e1:d3:08:cf:b1:34:8e:ad:97:bc:60:fb:9c:
         3f:99:8b:57
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnr6mTPevljlBTRZcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDUyMTAxMDA0OVoXDTI1MDgxOTAxMDA0OVowLzEtMCsGA1UEAxMk
Yzc5Y2JmNmQtOWQxZi00M2IyLTk1NmYtNjYyNDFmYWY1ZDRkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwrx3NXgMRhmCiHWYy07YmSuXFXFtJiTgy2mO
CpZFHuP1Yg2etmSNDBsVIAw0uKSL1ATYE6k8F4JIqs0PI2tcQpnwPPgPPrhSoqA0
odP7b/BZ72RyU9mtUtK6vuaRRy5ptzgeO7q3fJON4xBwt/g19DKeVi6w80pHZdUX
1WZLP9AToS3P4CWu32bAwI7ayI7V4DDMEa+vxGpoGXGEzqD9li/A+Tcc6ueqRO7U
lre/eR9BZz1Iyd6QhmLGz4Ry8FY+JCciBSE1+By8ta9/qpMuDwUg6O93hcbmCY4M
YueBzNDxe1c3mhsyhrht1KHnb9ucPCAiMbtrAb3Z9BWmB4cz8wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGDhva0O69KK+TJsHiNk6dsqz3ttMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMTM2NGU1ODEtYmI0YS0z
NzY2LTkxMjUtNTg2YzYzZmZiMDk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwdHMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEPvD+3bSESvxES8rZ6TjZk4BrEf2GaoIG0J0x5BsV5vI/wFpHchHc1X
y+48MiX79JTy2mypHQyilerDQz7v9A9fn+ie/vB8ZM6aH+fclcFARtz/YKyCrQZf
KaAWYrZTwcDgDzBS1KmY7LcAB6Hma05w7e4NTYVXgO0kjvpV3mmJLlAv4AtQyzE4
GGKb9lv8WydRIEXFWJgcOJZ1IbRnAXGGPDOelUVA5lf3H4T13auyFcfVct4OcjlZ
c4kwTVhrQaN8J7Y234QdNho6H0RlFgbFNWN5h0unNytTW470ccwgxgDU8q4hYzwV
tMhWMYWT4dMIz7E0jq2XvGD7nD+Zi1c=
-----END CERTIFICATE-----
Generated at Sat Jun 7 17:58:54 2025 by rpki-client