Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4184b867-e655-3dce-b873-a7a19522f7ef.roa
File:                     4184b867-e655-3dce-b873-a7a19522f7ef.roa (raw, json)
Hash identifier:          gzaRA5CAVE1LB7uG4dp1YFeHzzGWFvp/cpmzmKqck6A=
Subject key identifier:   8F:B5:B9:9D:E4:59:D0:9C:C9:79:D4:4E:AF:19:79:EF:FE:D6:51:65
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E4F1F4F68110145F14A815080
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4184b867-e655-3dce-b873-a7a19522f7ef.roa
Signing time:             Sat 27 Jun 2026 09:00:12 +0000
ROA not before:           Sat 27 Jun 2026 09:00:12 +0000
ROA not after:            Fri 25 Sep 2026 09:00:12 +0000
asID:                     396582
IP address blocks:        199.7.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 30 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4f:1f:4f:68:11:01:45:f1:4a:81:50:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 27 09:00:12 2026 GMT
            Not After : Sep 25 09:00:12 2026 GMT
        Subject: CN=8fa11142-feb6-4931-9ce2-5131abcfefe3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:8c:0c:01:54:f3:e9:39:03:61:59:66:c6:b7:
                    22:40:b9:ff:0d:45:81:85:89:8f:b6:80:9f:5f:55:
                    59:e4:18:94:a1:2d:32:43:06:21:1b:98:45:55:48:
                    8b:24:ba:64:71:db:bb:dc:42:3d:8a:2e:f7:c4:be:
                    b1:cd:8b:05:f5:38:ec:fd:28:aa:f1:66:d0:82:e2:
                    ca:d3:e4:10:c9:38:dc:b2:67:40:4e:c6:40:e0:3d:
                    a0:56:64:9e:b0:95:b0:2d:53:8d:e9:37:e9:07:e2:
                    14:ef:cb:15:83:b8:3f:7e:d6:6c:8c:ae:55:ee:ed:
                    77:bd:ac:82:66:25:aa:bf:47:c6:ab:56:81:6a:c3:
                    8d:10:05:08:29:99:c9:8e:b3:d1:0e:f8:74:f5:b5:
                    48:7a:97:18:4f:2c:54:ac:8d:de:08:04:bc:08:c8:
                    5b:07:6b:7d:65:8d:28:a4:53:53:ab:60:e4:cd:4a:
                    31:3a:33:da:4f:75:c9:90:19:a7:e4:4f:5d:47:b8:
                    94:8f:2c:05:73:bb:43:34:3d:62:01:6b:f7:ba:4d:
                    cf:ed:49:03:a2:07:e0:4d:03:c6:6f:92:4e:e8:ec:
                    ff:15:66:34:ef:ed:31:23:a4:55:0d:9d:16:f2:1d:
                    68:d9:f3:4e:4c:29:45:d3:cc:24:51:90:ac:0e:ec:
                    68:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:B5:B9:9D:E4:59:D0:9C:C9:79:D4:4E:AF:19:79:EF:FE:D6:51:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4184b867-e655-3dce-b873-a7a19522f7ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:7e:f2:51:cf:7e:b5:99:f9:05:ce:7a:e1:9b:cb:71:20:c6:
         e4:87:4b:18:52:f3:bb:4c:d3:55:24:07:81:2e:a4:22:af:65:
         e5:1b:7e:1c:e8:89:39:0e:9b:ad:22:93:70:4d:57:ec:0a:af:
         30:da:cd:4b:4a:24:ec:20:74:9f:9a:dc:6f:eb:1f:59:0d:f2:
         68:3d:ca:59:e0:42:67:02:33:d5:29:d1:39:65:aa:ac:64:4a:
         b8:0d:c1:f1:54:8e:ba:b7:62:fa:a6:21:e4:80:9e:7f:bd:b6:
         b3:14:10:51:00:70:37:08:1d:75:b1:f7:84:ca:5f:02:29:bb:
         6f:4f:6e:b5:c9:88:77:43:7d:ed:0e:89:d2:ba:d1:08:1b:b8:
         4f:83:36:8a:f4:dc:a1:a8:d7:45:ec:a6:72:9a:f7:04:50:59:
         16:d4:fb:4e:67:e7:93:cd:ca:f5:30:dd:84:77:5d:81:89:c7:
         1b:eb:54:7d:47:16:65:03:35:35:f6:64:d6:5a:99:8a:df:cf:
         21:27:94:ad:e8:89:d1:9d:72:d4:f4:ff:1a:46:87:a5:52:5e:
         8c:2a:59:3d:e1:67:5b:3c:0c:42:43:7d:08:2a:75:a0:74:7d:
         67:72:3d:5a:33:80:0e:79:cd:10:0c:37:38:07:e8:db:c4:d6:
         6f:94:bf:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 28 20:37:06 2026 by rpki-client