Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2cd04b2c-ebfc-38cf-9611-32d914a8ec85.roa
File:                     2cd04b2c-ebfc-38cf-9611-32d914a8ec85.roa (raw, json)
Hash identifier:          46DKCb8RZppcgNWLBX8VoHstgso33EapcVCpGLhP2iI=
Subject key identifier:   46:89:EB:C9:05:39:3D:9D:A6:29:E9:85:A2:A1:78:35:E3:3D:BB:23
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285849EBEA7D50ACB12D4921D08200
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2cd04b2c-ebfc-38cf-9611-32d914a8ec85.roa
Signing time:             Wed 21 May 2025 01:00:49 +0000
ROA not before:           Wed 21 May 2025 01:00:49 +0000
ROA not after:            Tue 19 Aug 2025 01:00:49 +0000
asID:                     396541
IP address blocks:        199.7.71.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:eb:ea:7d:50:ac:b1:2d:49:21:d0:82:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 21 01:00:49 2025 GMT
            Not After : Aug 19 01:00:49 2025 GMT
        Subject: CN=f92866da-7069-4a95-a6dd-38aa2ac517b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:7a:96:f8:9e:ae:47:a7:bf:2a:5a:79:a0:3b:
                    6d:d5:4d:ba:92:6c:ab:df:af:26:92:de:7e:ed:43:
                    f1:ef:07:a1:f1:ac:48:86:2b:f2:d5:01:9d:87:b3:
                    ba:9f:c5:53:c1:58:b4:60:e5:21:e5:90:56:fb:9a:
                    85:42:13:bc:94:16:08:ec:1d:d9:31:0e:d2:b9:ff:
                    03:e6:37:1a:5c:03:74:a4:60:5c:1e:a1:6d:1d:72:
                    3a:11:81:e6:59:b8:40:cf:14:03:43:7a:f7:42:71:
                    5c:28:35:e5:7a:17:4b:75:d9:99:4b:4c:c9:a0:62:
                    67:f3:b5:b9:a3:b8:39:37:8d:eb:e5:af:e0:e0:bf:
                    e1:9e:da:ed:bf:3c:44:4c:3a:b0:92:74:b9:6b:81:
                    71:e5:33:15:1e:31:3f:49:f7:40:9c:a3:bc:67:0d:
                    00:0b:3a:9b:8e:78:7e:47:d3:6a:65:c6:dc:72:0c:
                    14:b1:03:d7:aa:68:47:f0:ae:ec:84:e6:59:7f:3c:
                    ec:65:1b:85:a4:88:cf:4f:98:fa:a6:38:05:a9:9f:
                    29:ad:08:23:71:4b:b5:6d:80:5f:3c:8d:00:5f:6f:
                    49:05:a7:1a:96:61:3a:e0:02:13:2b:c7:48:b7:3c:
                    63:fa:31:a6:ee:96:45:4d:28:fa:6e:e0:f4:95:bd:
                    ae:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:89:EB:C9:05:39:3D:9D:A6:29:E9:85:A2:A1:78:35:E3:3D:BB:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2cd04b2c-ebfc-38cf-9611-32d914a8ec85.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.71.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:87:20:66:a1:74:d5:25:22:50:79:88:1f:3a:cf:b6:b1:3b:
         96:ec:11:68:ec:41:74:30:fe:3c:97:a9:38:89:76:ca:2d:b3:
         fc:68:fc:03:0f:f5:3f:42:31:f8:65:97:39:7a:cb:11:0f:63:
         9f:7b:91:a0:4e:0e:de:c3:5b:80:92:83:f8:af:fd:2f:6c:26:
         75:d9:31:65:a5:7c:2b:fa:da:86:24:4c:a5:ee:88:38:7e:76:
         b4:01:9e:d0:2d:8e:05:2d:37:bc:37:95:3c:3d:5e:87:a8:33:
         fa:5f:83:c4:9a:2a:d5:d2:5c:69:2b:3e:02:0c:ab:ca:a3:2a:
         b1:7c:0a:0e:ec:0d:2d:24:cd:79:57:27:fb:04:2a:df:f0:9f:
         58:e9:74:86:a2:ac:15:30:82:8f:61:fd:85:32:56:64:69:24:
         ae:2e:7a:72:06:45:ec:d1:1a:28:67:78:5b:6d:bf:ea:16:ae:
         df:e6:4d:bf:1a:62:28:d7:51:03:75:9d:d3:4f:46:b6:54:54:
         d9:b0:53:0c:6c:d0:9a:f2:65:34:28:c4:c8:cd:84:32:28:f5:
         c7:84:af:0c:fe:7a:1e:71:76:a9:43:30:66:e0:83:62:c4:d9:
         b9:a6:6b:2b:47:e7:72:26:fb:8a:61:8a:9d:4e:e2:c5:d3:79:
         ab:f8:55:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 19:38:21 2025 by rpki-client