Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/15f7ad2d-aaa5-346a-bf9a-95ce5abb4a12.roa
File:                     15f7ad2d-aaa5-346a-bf9a-95ce5abb4a12.roa (raw, json)
Hash identifier:          adA30GNd1KV6yg5aG1k+KGyx5wPQ4F0HGjngzRrMaOQ=
Subject key identifier:   D8:29:9C:46:C4:45:F4:EF:80:F1:71:15:C4:3C:19:FE:4F:7B:4E:0A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584BAD626A7D7C0C0DCF961DAB80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/15f7ad2d-aaa5-346a-bf9a-95ce5abb4a12.roa
Signing time:             Wed 29 Oct 2025 01:00:31 +0000
ROA not before:           Wed 29 Oct 2025 01:00:31 +0000
ROA not after:            Tue 27 Jan 2026 02:00:31 +0000
asID:                     36622
IP address blocks:        199.7.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:ad:62:6a:7d:7c:0c:0d:cf:96:1d:ab:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 29 01:00:31 2025 GMT
            Not After : Jan 27 02:00:31 2026 GMT
        Subject: CN=4b47f034-979a-4bbd-ad62-8777827f9cda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:49:56:e5:9c:5e:c6:92:e6:9b:e6:ed:6a:21:
                    f4:a7:f5:80:e1:2f:1d:85:e0:ef:f6:f8:e4:3f:af:
                    12:c2:39:f1:9d:d0:aa:f0:5d:1b:85:b9:3e:84:09:
                    4a:c8:7a:84:f5:b1:4d:cd:25:74:cc:23:50:5b:67:
                    e7:a8:09:64:6d:d5:4c:07:97:38:23:fb:9b:c1:36:
                    89:46:e6:97:1a:e6:70:69:18:d0:05:06:e5:79:9b:
                    dc:f7:55:06:1a:c0:2a:6f:bb:f2:13:c8:3f:24:79:
                    b4:02:12:61:88:e0:45:5f:cd:54:0f:b0:48:70:d9:
                    c6:84:9c:c5:51:7e:cc:3f:da:1b:54:08:80:7e:7a:
                    ca:cf:1f:ca:42:19:6d:88:af:0c:58:4c:52:df:5b:
                    f0:08:24:3a:30:9f:a5:93:4a:e5:d4:08:18:1e:33:
                    fb:bc:6d:db:12:01:f1:61:d9:c1:4e:7a:4f:01:7c:
                    10:4e:4b:13:3c:4e:3f:59:08:cd:0e:90:9f:4f:61:
                    f1:4b:5f:88:ca:aa:3e:02:2d:e7:e6:2b:c2:c8:f3:
                    16:50:72:de:52:95:66:4d:a4:9e:5c:c5:a5:22:80:
                    0b:72:33:f6:73:4d:53:c8:03:a7:34:8b:25:1c:20:
                    33:1a:24:39:88:3c:a8:31:61:38:07:8c:11:c3:a0:
                    cf:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:29:9C:46:C4:45:F4:EF:80:F1:71:15:C4:3C:19:FE:4F:7B:4E:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/15f7ad2d-aaa5-346a-bf9a-95ce5abb4a12.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:1c:00:66:7a:5f:8d:94:64:74:78:d4:fe:d6:79:a7:59:c7:
         24:80:83:e1:95:4c:aa:dc:d2:48:00:2b:6d:d5:86:89:59:f9:
         94:ee:8d:61:28:68:f7:5f:40:99:2e:7b:e7:22:5b:6d:3c:be:
         53:65:78:aa:05:c6:c1:aa:46:13:af:bc:7c:46:22:0f:ae:5c:
         df:cc:53:aa:45:65:f0:49:44:01:c6:35:ce:99:7e:0e:13:aa:
         6b:45:e4:a3:94:b1:29:91:a8:fa:e9:7c:fb:e5:67:a8:f1:19:
         8e:a6:74:4e:e4:d6:a5:e5:c7:80:ef:8d:a2:85:15:c6:a2:c4:
         0f:50:00:88:6b:81:74:9d:50:c6:49:e5:ae:86:27:09:14:72:
         c7:36:6d:64:cf:f1:15:d2:75:79:bf:ba:c5:c8:79:0d:1c:bc:
         76:ae:59:c5:22:14:1a:5f:52:08:d1:40:5f:14:42:c8:06:e9:
         88:c4:3b:ce:80:d2:61:e6:3a:b9:a0:12:63:82:ba:ea:90:e8:
         b3:9b:55:a3:7c:a5:32:b7:5c:65:93:c4:06:41:8b:fb:26:68:
         df:54:cf:f8:9b:b6:6c:7c:1f:6b:fc:dc:01:36:a1:6c:4f:54:
         68:a5:18:75:17:e8:30:c9:f7:d0:b1:da:6d:cb:46:e6:fd:72:
         63:85:a3:f5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEutYmp9fAwNz5Ydq4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MTAyOTAxMDAzMVoXDTI2MDEyNzAyMDAzMVowLzEtMCsGA1UEAxMk
NGI0N2YwMzQtOTc5YS00YmJkLWFkNjItODc3NzgyN2Y5Y2RhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhklW5ZxexpLmm+btaiH0p/WA4S8dheDv9vjk
P68SwjnxndCq8F0bhbk+hAlKyHqE9bFNzSV0zCNQW2fnqAlkbdVMB5c4I/ubwTaJ
RuaXGuZwaRjQBQbleZvc91UGGsAqb7vyE8g/JHm0AhJhiOBFX81UD7BIcNnGhJzF
UX7MP9obVAiAfnrKzx/KQhltiK8MWExS31vwCCQ6MJ+lk0rl1AgYHjP7vG3bEgHx
YdnBTnpPAXwQTksTPE4/WQjNDpCfT2HxS1+Iyqo+Ai3n5ivCyPMWUHLeUpVmTaSe
XMWlIoALcjP2c01TyAOnNIslHCAzGiQ5iDyoMWE4B4wRw6DPBwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNgpnEbERfTvgPFxFcQ8Gf5Pe04KMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMTVmN2FkMmQtYWFhNS0z
NDZhLWJmOWEtOTVjZTVhYmI0YTEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwdHMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABkcAGZ6X42UZHR41P7WeadZxySAg+GVTKrc0kgAK23VholZ+ZTujWEo
aPdfQJkue+ciW208vlNleKoFxsGqRhOvvHxGIg+uXN/MU6pFZfBJRAHGNc6Zfg4T
qmtF5KOUsSmRqPrpfPvlZ6jxGY6mdE7k1qXlx4DvjaKFFcaixA9QAIhrgXSdUMZJ
5a6GJwkUcsc2bWTP8RXSdXm/usXIeQ0cvHauWcUiFBpfUgjRQF8UQsgG6YjEO86A
0mHmOrmgEmOCuuqQ6LObVaN8pTK3XGWTxAZBi/smaN9Uz/ibtmx8H2v83AE2oWxP
VGilGHUX6DDJ99Cx2m3LRub9cmOFo/U=
-----END CERTIFICATE-----
Generated at Wed Oct 29 09:12:52 2025 by rpki-client