Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/31c0f0d4-51b2-37b0-bb7c-38d493449b50.roa
File:                     31c0f0d4-51b2-37b0-bb7c-38d493449b50.roa (raw, json)
Hash identifier:          9IOCFGwYWk1OiDZc40KseEr8KZqRKYIQofB32R52zFc=
Subject key identifier:   12:DB:75:28:DC:93:BB:45:F1:BB:5D:EF:F4:19:96:1F:91:3F:76:B7
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584BAD626F41C24C3833EA2DDA80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/31c0f0d4-51b2-37b0-bb7c-38d493449b50.roa
Signing time:             Wed 29 Oct 2025 01:00:31 +0000
ROA not before:           Wed 29 Oct 2025 01:00:31 +0000
ROA not after:            Tue 27 Jan 2026 02:00:31 +0000
asID:                     396547
IP address blocks:        199.7.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:ad:62:6f:41:c2:4c:38:33:ea:2d:da:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 29 01:00:31 2025 GMT
            Not After : Jan 27 02:00:31 2026 GMT
        Subject: CN=db70c917-999a-473a-a4c2-d2d888d27207
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:e0:6a:ac:a9:68:e7:42:af:37:00:e1:3d:fa:
                    bc:71:6e:fc:6d:31:9d:86:5c:23:25:c0:40:40:2f:
                    28:eb:1d:66:a5:eb:15:c1:e6:c9:ff:d4:fa:e6:87:
                    c1:83:d4:54:1d:18:60:82:62:a3:85:68:6b:3d:ba:
                    2a:be:a6:57:79:f3:c9:c0:12:83:7b:d2:97:37:f0:
                    ed:1b:79:2a:f6:06:ec:93:9d:a1:b5:b6:bb:6f:f6:
                    3a:9e:b5:2e:0e:80:f1:35:86:35:5f:d3:7d:18:72:
                    4c:07:26:2a:8b:1f:de:4b:5a:f3:50:96:d3:95:6b:
                    b3:a5:7e:0e:bb:0e:e0:f4:cf:8a:78:b9:91:91:71:
                    01:98:4b:15:61:da:b5:22:07:6e:4e:ec:5f:fc:9f:
                    a7:0c:00:67:86:d8:49:be:f9:e5:71:20:0f:69:43:
                    56:c4:81:27:a5:ce:a9:11:a9:eb:aa:f3:f5:ee:8d:
                    74:9a:e3:95:c9:3f:29:20:0c:26:95:ef:db:bf:88:
                    37:03:8c:37:6d:d6:c8:74:cb:4c:b9:d3:31:bb:72:
                    8d:42:8c:30:8a:97:c1:c4:41:f5:6f:72:e3:22:00:
                    22:ce:1e:c2:b0:77:d9:6e:b9:fb:e2:89:1c:0e:83:
                    b9:fd:14:dd:30:d5:44:19:5d:31:88:12:53:c5:9b:
                    11:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:DB:75:28:DC:93:BB:45:F1:BB:5D:EF:F4:19:96:1F:91:3F:76:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/31c0f0d4-51b2-37b0-bb7c-38d493449b50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:ce:04:11:fb:d5:f0:fb:d8:d9:9a:fd:a3:9b:85:f7:eb:9f:
         a9:6c:21:c3:15:91:85:80:2a:e5:35:48:44:82:64:82:55:83:
         54:69:9c:ee:9e:b8:ba:2c:4b:ee:fd:43:b3:df:cc:a2:89:87:
         ae:93:95:4a:92:94:5c:57:85:75:98:1e:07:a1:69:0b:1f:34:
         31:56:e4:d0:53:fe:3c:e5:ef:09:27:79:af:30:c0:1d:e6:20:
         5e:5c:d8:41:34:dc:d0:35:43:1c:6f:dd:93:b2:27:ed:ff:9d:
         12:f3:9d:6b:9b:e4:6a:a9:74:52:97:e5:14:74:f2:1a:fd:b6:
         b8:68:d4:a3:4f:4a:74:c6:6e:5d:c3:ca:33:70:7f:ea:86:39:
         97:17:b8:85:7f:19:14:04:0f:6c:ac:cd:15:fb:6b:f2:af:56:
         40:70:56:de:03:4f:7c:21:66:9c:ae:e5:13:df:eb:0c:39:b8:
         c0:2d:84:b2:22:52:71:4b:70:13:2d:b5:f7:a7:90:16:ca:04:
         c6:de:6a:bc:9e:7c:63:b8:0c:e5:0b:e4:73:f3:b9:66:27:f3:
         ad:1d:ed:19:7f:de:e3:0c:cc:36:b3:0c:a5:af:7d:fa:ae:e8:
         1f:d6:bf:ca:23:44:2f:42:97:c3:d2:ee:8e:3b:37:43:8c:af:
         f1:e4:a0:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 09:12:48 2025 by rpki-client