Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/40396f1d-107d-3392-804c-6dc000308c79.roa
File:                     40396f1d-107d-3392-804c-6dc000308c79.roa (raw, json)
Hash identifier:          hiO3+388QmnG0nXEKc9ZfVMrmTmJkBx5ta3L0Jn9/h8=
Subject key identifier:   27:8B:81:C9:84:FB:65:79:0C:65:7F:A8:F2:16:B6:CD:DF:FF:E1:81
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858495C242CA3028EBFC7F9608580
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/40396f1d-107d-3392-804c-6dc000308c79.roa
Signing time:             Sun 30 Mar 2025 13:01:02 +0000
ROA not before:           Sun 30 Mar 2025 13:01:02 +0000
ROA not after:            Sat 28 Jun 2025 13:01:02 +0000
asID:                     27544
IP address blocks:        199.7.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5c:24:2c:a3:02:8e:bf:c7:f9:60:85:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 30 13:01:02 2025 GMT
            Not After : Jun 28 13:01:02 2025 GMT
        Subject: CN=70514dd2-bacb-4163-9b35-cc1fd5a5e21b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:c4:10:4c:58:b6:25:dd:81:fa:c0:73:0e:0a:
                    b6:88:30:a2:88:37:6a:db:be:e2:95:df:b5:e5:6f:
                    f9:22:7a:bd:28:32:a7:a1:4c:b1:37:0f:bb:a6:9f:
                    72:13:df:b9:73:6c:5c:0c:65:a1:e4:54:03:33:77:
                    fa:35:3b:29:1e:03:af:1d:c1:65:cb:96:0a:fd:3a:
                    cd:db:7e:f6:45:7d:81:59:6a:95:02:44:16:78:ae:
                    c7:a1:8a:89:3f:06:13:f0:59:8f:46:7c:f5:55:e6:
                    e0:1e:03:4a:31:e1:c8:8c:8c:88:2f:51:65:4e:03:
                    ff:71:bd:d9:b7:7f:10:e6:b5:dd:45:54:8f:e8:bb:
                    47:09:29:86:da:30:fb:95:c5:73:a4:f3:0c:27:26:
                    61:24:77:41:50:f5:2d:dd:59:d5:21:03:d6:75:49:
                    df:15:12:2c:52:13:af:9c:9c:0d:bb:e6:fa:2e:e8:
                    4f:d6:d7:b4:b3:da:f9:a1:ec:c3:5f:31:a4:47:8f:
                    14:40:dd:9c:fd:b3:bd:11:12:70:a3:18:83:63:11:
                    e2:bd:b5:24:ff:0d:7c:5f:bb:91:b3:e6:87:43:13:
                    1a:9b:af:ce:06:8c:77:a7:6a:4f:8e:3d:7f:26:5f:
                    cc:99:e7:85:74:1b:b1:bb:4a:18:05:3d:01:20:e7:
                    95:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:8B:81:C9:84:FB:65:79:0C:65:7F:A8:F2:16:B6:CD:DF:FF:E1:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/40396f1d-107d-3392-804c-6dc000308c79.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:0e:2e:09:ae:52:4d:57:6e:13:98:94:25:8e:99:6d:e9:18:
         44:33:1f:6e:b1:44:75:56:2f:c5:81:e3:2f:9e:ea:fd:04:1c:
         8f:c2:a4:14:c6:19:9f:bf:2b:1c:ba:c5:16:5c:9f:25:41:98:
         a0:27:e6:31:81:0d:e9:37:5d:23:4c:21:34:0b:92:56:dd:5f:
         1c:6f:a4:2c:4a:9f:f1:72:a1:0d:20:50:19:3e:f2:51:b1:14:
         da:16:a2:bb:48:d9:09:22:1b:28:6d:40:84:bc:40:aa:e6:1b:
         57:69:84:37:13:de:43:67:ea:da:e8:5b:ef:6f:d6:3c:b3:fb:
         f8:d5:e5:a5:f6:fd:bb:7e:86:49:0b:54:9f:5e:e1:0b:86:1f:
         82:5d:28:a1:26:2f:31:ba:9e:df:01:c0:fd:1e:52:36:d0:5b:
         9b:b1:81:f6:a9:e9:d7:65:38:05:78:1f:dc:f9:a8:52:5d:f1:
         d4:bc:57:00:fe:ce:b0:6d:e3:65:59:3d:89:86:33:a5:27:8b:
         bd:3c:6e:42:da:15:59:4d:fa:23:58:1f:8c:c3:4a:19:8b:dd:
         a3:cc:08:44:8a:1e:5d:99:67:0e:0c:7d:05:87:c7:c1:12:17:
         59:f4:b3:0c:50:93:23:59:e3:79:7e:a8:1a:81:be:3d:65:76:
         12:7e:62:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:23:32 2025 by rpki-client