Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3075df5c-bf33-354f-b377-d2ebe3a06ca8.roa
File:                     3075df5c-bf33-354f-b377-d2ebe3a06ca8.roa (raw, json)
Hash identifier:          RT+xCL+Db6wtK26lc7JD+bGuKqQbMMJuz+fZFQCJVIw=
Subject key identifier:   56:16:A5:99:9C:5E:3E:3D:6B:4F:E1:49:BB:C9:A9:02:13:B6:46:14
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E4F1F474C57D80415F7B61680
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3075df5c-bf33-354f-b377-d2ebe3a06ca8.roa
Signing time:             Sat 27 Jun 2026 09:00:12 +0000
ROA not before:           Sat 27 Jun 2026 09:00:12 +0000
ROA not after:            Fri 25 Sep 2026 09:00:12 +0000
asID:                     396546
IP address blocks:        199.7.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 30 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4f:1f:47:4c:57:d8:04:15:f7:b6:16:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 27 09:00:12 2026 GMT
            Not After : Sep 25 09:00:12 2026 GMT
        Subject: CN=ddc7f562-f061-4664-8c85-69cd97949329
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:96:f0:c3:49:b0:d5:cb:88:45:36:db:7b:85:
                    de:45:a1:cb:af:64:5b:b4:1b:ca:23:cd:14:c1:c1:
                    5a:e1:9a:c0:dd:fc:0e:0f:bf:c8:ee:4f:c8:6d:3e:
                    05:38:d6:d3:7c:ef:c9:0c:78:5c:65:3e:d0:a3:ab:
                    2e:b4:77:4b:11:7d:d4:ba:99:d0:fa:4b:19:1e:01:
                    1b:7d:aa:b4:09:6d:cd:24:ad:78:2b:2f:ef:4e:88:
                    bc:a2:5f:f2:f9:a2:d5:50:56:d1:9c:81:88:1b:be:
                    b5:a7:ec:e9:3f:45:33:9e:37:8b:d7:0e:21:5c:8b:
                    f8:c3:f9:61:7e:53:9b:a2:7f:12:6a:27:03:49:7e:
                    9b:12:57:dd:98:0d:64:e4:a3:28:6f:db:df:6d:29:
                    63:67:e1:5e:1e:85:ea:5e:a7:e7:9e:76:c4:47:16:
                    78:99:c0:94:57:7b:48:1b:85:9c:a5:e0:8d:43:de:
                    27:8b:d3:d6:51:b4:d5:32:10:49:4f:9b:b5:bf:3c:
                    fd:fa:16:78:0f:fb:04:45:c5:51:1c:c7:07:b7:ea:
                    f0:17:2e:b9:93:bc:a3:96:5c:28:d8:fd:4c:ff:fc:
                    16:e9:c4:71:fe:1c:73:eb:6a:d1:71:ab:fd:29:62:
                    73:42:73:33:4d:05:c9:0c:ea:d6:94:2e:48:55:71:
                    fc:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:16:A5:99:9C:5E:3E:3D:6B:4F:E1:49:BB:C9:A9:02:13:B6:46:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3075df5c-bf33-354f-b377-d2ebe3a06ca8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:39:e9:79:81:26:13:8a:3d:8f:32:34:a7:f1:af:ef:4d:e0:
         34:06:e5:1f:7c:0f:20:1a:32:94:d3:cf:d2:a1:55:64:25:df:
         5a:54:a2:82:4b:58:08:97:4c:53:15:74:2b:69:76:f8:33:0f:
         0d:34:af:1a:e8:e6:d1:9d:fd:e1:a0:f0:d3:58:d6:3a:4f:c9:
         d4:68:ec:31:85:6e:78:f5:3c:87:b7:05:e4:55:c5:53:c9:26:
         22:43:b8:b9:52:74:b8:2b:40:5a:83:a3:72:ec:1b:ae:78:83:
         38:90:c3:50:04:a5:0c:a9:63:fc:d7:8e:f5:fd:ed:a3:95:3c:
         a5:1f:23:17:21:27:93:09:b1:70:84:bf:a7:1f:3e:0b:37:2c:
         35:a3:48:c6:51:0f:bd:a5:36:1f:6e:a8:87:0e:00:f3:42:a7:
         c1:eb:ec:4c:cb:12:b7:16:25:d0:6f:8d:38:a6:33:03:8f:9c:
         c7:be:6b:6c:d7:14:7e:f9:1c:9d:84:b8:d9:1b:ac:67:8c:0c:
         9b:9c:07:8a:f8:89:fe:87:d9:16:b4:74:36:ef:6d:02:9f:0a:
         15:bb:8f:f6:9f:6e:6b:d6:b7:9b:ec:b7:bf:c0:a2:c4:65:ff:
         bb:98:db:84:e5:5f:de:1c:7c:69:b7:0f:a5:63:fa:4f:96:9c:
         10:96:d8:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 28 23:02:04 2026 by rpki-client