Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/172349c1-69ea-3c55-8795-4ebc3fd2d702.roa
File:                     172349c1-69ea-3c55-8795-4ebc3fd2d702.roa (raw, json)
Hash identifier:          BxOnaibl4xPww4Bp9M3ff902NdLjitUhGmxrEnuvkD4=
Subject key identifier:   8D:01:2D:59:05:3D:96:89:88:8A:57:57:74:AA:37:1E:5F:3C:C5:37
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584BAD6266B7FE271267638CD700
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/172349c1-69ea-3c55-8795-4ebc3fd2d702.roa
Signing time:             Wed 29 Oct 2025 01:00:31 +0000
ROA not before:           Wed 29 Oct 2025 01:00:31 +0000
ROA not after:            Tue 27 Jan 2026 02:00:31 +0000
asID:                     397203
IP address blocks:        199.7.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:ad:62:66:b7:fe:27:12:67:63:8c:d7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 29 01:00:31 2025 GMT
            Not After : Jan 27 02:00:31 2026 GMT
        Subject: CN=0deecbe2-a0dd-4a47-8b5f-6db43d427bd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:60:de:7d:0b:cd:d5:7c:4e:53:09:06:57:d6:
                    3f:8a:0f:6a:2e:06:62:9f:9f:92:5b:4b:d1:57:21:
                    aa:71:f4:a9:ff:bf:b7:f2:2f:cc:63:0b:b6:2f:f1:
                    29:11:5f:15:b2:39:b8:01:e4:8f:dd:36:26:26:79:
                    1d:64:fe:b7:86:6c:d0:95:6d:77:c2:77:ba:9e:3b:
                    b5:04:84:1c:a6:14:cc:3b:5d:18:0b:be:d9:c0:3a:
                    28:88:cd:c2:d1:68:ac:6c:0a:c3:6f:05:41:f0:5e:
                    3f:1e:22:61:b2:92:cb:3f:c2:28:76:16:6e:0e:32:
                    8e:3a:82:6f:24:4a:5b:6a:b3:4a:84:08:9f:3e:a7:
                    32:2b:d1:65:2e:a3:73:44:cb:90:84:68:56:46:b5:
                    42:06:80:3c:8a:ac:95:7b:d3:01:f2:3e:2f:c3:4a:
                    f0:dc:0c:e3:bd:26:4b:34:e5:a1:e4:17:10:1c:d6:
                    a6:ee:e7:e8:58:51:7d:0b:de:c4:a0:1a:8e:a1:7a:
                    e5:36:37:9a:6a:ab:eb:8a:c4:98:72:cb:1d:8a:e1:
                    42:97:1f:38:01:75:59:7c:8f:ad:79:4a:9f:12:b8:
                    3a:a5:aa:2e:b2:20:17:7b:e8:69:ba:64:9c:84:09:
                    cc:95:51:65:9e:62:d9:4a:df:2d:aa:d6:5e:23:91:
                    39:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:01:2D:59:05:3D:96:89:88:8A:57:57:74:AA:37:1E:5F:3C:C5:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/172349c1-69ea-3c55-8795-4ebc3fd2d702.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b8:86:ca:fe:7a:4d:59:09:d1:9b:81:8a:4e:98:56:37:b7:86:
         99:7d:fa:44:f3:b2:66:b1:3a:0f:b6:fc:eb:9c:a6:ab:63:99:
         c2:f5:d9:13:bc:fe:6f:58:5c:17:81:ab:91:40:08:85:dc:89:
         13:40:5d:59:9c:cd:8d:9d:95:4b:b5:2e:4e:fe:e3:6f:47:9f:
         92:6b:49:b2:d9:c6:60:e5:63:5a:86:21:79:ef:fc:63:74:aa:
         aa:84:d0:b0:95:5a:d5:ba:25:c9:cd:90:fc:b8:8d:bd:73:fa:
         84:94:bd:e0:92:9d:58:22:ff:a2:a8:41:f4:70:34:07:74:41:
         46:48:2d:04:69:c4:59:f0:cf:e6:f3:ef:59:02:a2:84:c7:60:
         5b:57:59:a2:35:1e:ae:a8:44:7e:a4:e6:e2:37:a8:34:c1:95:
         b8:50:37:a6:a6:85:93:5a:02:12:2b:9d:47:2b:c4:9c:e2:24:
         af:1f:18:c8:79:be:f4:0c:42:e5:80:35:12:43:9e:55:1c:27:
         a7:6b:af:ae:3d:b9:fb:02:c5:ad:5d:ab:df:6c:af:73:0c:da:
         ea:80:4a:e1:33:5a:46:be:00:e0:b0:10:0f:bd:bd:fb:fe:ae:
         50:89:f2:0a:d6:18:f0:93:24:d8:a7:36:3c:1a:3b:27:c8:53:
         0d:4c:b5:19
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEutYma3/icSZ2OM1wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MTAyOTAxMDAzMVoXDTI2MDEyNzAyMDAzMVowLzEtMCsGA1UEAxMk
MGRlZWNiZTItYTBkZC00YTQ3LThiNWYtNmRiNDNkNDI3YmQ4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnWDefQvN1XxOUwkGV9Y/ig9qLgZin5+SW0vR
VyGqcfSp/7+38i/MYwu2L/EpEV8Vsjm4AeSP3TYmJnkdZP63hmzQlW13wne6nju1
BIQcphTMO10YC77ZwDooiM3C0WisbArDbwVB8F4/HiJhspLLP8IodhZuDjKOOoJv
JEpbarNKhAifPqcyK9FlLqNzRMuQhGhWRrVCBoA8iqyVe9MB8j4vw0rw3AzjvSZL
NOWh5BcQHNam7ufoWFF9C97EoBqOoXrlNjeaaqvrisSYcssdiuFClx84AXVZfI+t
eUqfErg6paousiAXe+hpumSchAnMlVFlnmLZSt8tqtZeI5E5JQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFI0BLVkFPZaJiIpXV3SqNx5fPMU3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMTcyMzQ5YzEtNjllYS0z
YzU1LTg3OTUtNGViYzNmZDJkNzAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwdHMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALiGyv56TVkJ0ZuBik6YVje3hpl9+kTzsmaxOg+2/OucpqtjmcL12RO8
/m9YXBeBq5FACIXciRNAXVmczY2dlUu1Lk7+429Hn5JrSbLZxmDlY1qGIXnv/GN0
qqqE0LCVWtW6JcnNkPy4jb1z+oSUveCSnVgi/6KoQfRwNAd0QUZILQRpxFnwz+bz
71kCooTHYFtXWaI1Hq6oRH6k5uI3qDTBlbhQN6amhZNaAhIrnUcrxJziJK8fGMh5
vvQMQuWANRJDnlUcJ6drr649ufsCxa1dq99sr3MM2uqASuEzWka+AOCwEA+9vfv+
rlCJ8grWGPCTJNinNjwaOyfIUw1MtRk=
-----END CERTIFICATE-----
Generated at Wed Oct 29 07:22:00 2025 by rpki-client