Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3fdabff0-357b-3ef2-9030-d907f257be48.roa
File:                     3fdabff0-357b-3ef2-9030-d907f257be48.roa (raw, json)
Hash identifier:          EYQfJoBMgjL83Jnw3CulxtNgC2K1ani7WVL5T6gVnBE=
Subject key identifier:   37:E4:B8:FF:C9:A1:A0:55:D4:27:1E:D6:10:41:8B:94:31:B2:5A:8F
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285849EBEA6E6C98713612522EE190
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3fdabff0-357b-3ef2-9030-d907f257be48.roa
Signing time:             Wed 21 May 2025 01:00:49 +0000
ROA not before:           Wed 21 May 2025 01:00:49 +0000
ROA not after:            Tue 19 Aug 2025 01:00:49 +0000
asID:                     396554
IP address blocks:        199.7.71.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:eb:ea:6e:6c:98:71:36:12:52:2e:e1:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 21 01:00:49 2025 GMT
            Not After : Aug 19 01:00:49 2025 GMT
        Subject: CN=cf15cd44-e6ba-4807-bb5d-f0ae49670889
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:b5:23:99:a6:4f:04:3d:78:08:cb:69:c3:c2:
                    24:29:71:ef:62:0f:8d:54:f0:79:a2:22:f1:27:73:
                    af:99:35:3a:81:4f:02:5d:03:0e:fe:30:d5:93:e4:
                    a0:1d:a8:02:a1:ba:92:2b:a7:18:91:5b:12:4b:64:
                    59:0d:b0:25:49:d5:35:ac:ae:a6:39:76:01:8a:63:
                    b8:09:52:76:cc:a0:c3:05:e2:b0:79:02:ef:9d:ad:
                    ed:53:d4:49:ce:4a:32:aa:88:b0:a0:db:d9:6e:a4:
                    a8:2c:de:e6:4b:12:89:27:88:73:74:7c:35:95:aa:
                    d4:f8:c2:b4:de:00:b6:7d:99:5f:84:e1:d5:3a:89:
                    65:4b:7c:99:d2:11:75:51:28:4e:9e:fb:53:ad:ac:
                    57:ae:a4:e0:54:9a:de:62:c2:20:d9:07:80:15:11:
                    52:a3:c9:7f:8c:ff:52:a3:6d:30:8a:3b:14:42:c3:
                    b1:6c:6f:65:5d:29:7d:43:ac:bc:30:c2:9a:ce:48:
                    d4:e2:41:a4:19:d2:d6:bb:bb:3c:3c:8c:fa:f1:2a:
                    6b:25:92:c8:88:cc:b8:db:f5:b6:ca:a7:a4:d7:f5:
                    1f:ff:6e:db:6a:37:8a:83:23:b5:c3:81:e6:71:82:
                    89:b7:20:8a:dd:c7:7a:b1:18:09:d8:14:31:9e:95:
                    d5:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:E4:B8:FF:C9:A1:A0:55:D4:27:1E:D6:10:41:8B:94:31:B2:5A:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3fdabff0-357b-3ef2-9030-d907f257be48.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.71.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:ac:b5:8f:b4:e1:35:74:91:46:98:bc:12:c2:8c:65:63:21:
         c4:86:e7:a6:5e:ab:77:b9:54:5b:eb:55:3d:79:d6:2c:6a:c9:
         b7:82:c7:18:d7:d7:aa:d9:4c:d7:d5:a1:40:9b:56:c8:b6:f0:
         b1:cd:85:5f:57:be:ae:95:c6:18:48:d6:b0:d3:19:84:14:06:
         d5:c9:db:f5:c3:d6:c4:b0:b3:da:e2:e1:35:15:ca:f8:f5:eb:
         df:ef:c5:22:97:10:35:fb:f7:f1:55:d8:ae:c2:b1:20:cf:df:
         7e:84:81:25:66:d9:eb:dd:43:48:bb:93:d2:18:2b:d6:e5:fa:
         99:f1:21:62:2d:0d:8b:2e:2e:ee:a8:dc:1d:f3:61:72:0f:8a:
         33:c0:a5:bc:0f:a2:32:c2:58:91:6f:8e:24:05:8d:bd:ae:fc:
         da:7d:53:b6:88:de:2f:67:ff:81:65:c9:26:3e:ed:22:e7:f9:
         be:99:e3:e7:bc:58:3b:a3:5e:8e:eb:15:8e:39:1e:b8:30:78:
         18:0a:4c:20:aa:79:f3:26:56:09:6e:7b:4e:03:b2:74:65:87:
         c4:57:a6:57:bf:1f:3f:d5:28:fb:02:35:15:81:cc:c7:83:07:
         31:e0:8e:d2:ed:20:ed:b1:eb:2c:90:72:7c:5e:93:16:d9:44:
         da:96:6b:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 19:42:10 2025 by rpki-client