Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/47a1e6bf-6f8a-3f7c-8df2-df26d39cf253.roa
File:                     47a1e6bf-6f8a-3f7c-8df2-df26d39cf253.roa (raw, json)
Hash identifier:          /sra5eCftTR5KRLMWzQDH3pPgLSApXVlGMSlyLh/G4s=
Subject key identifier:   17:35:C9:4D:7E:5A:B4:6D:96:D7:29:5D:54:25:2B:0F:2A:48:BF:37
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584BAD6269E1594DDE044E2BC668
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/47a1e6bf-6f8a-3f7c-8df2-df26d39cf253.roa
Signing time:             Wed 29 Oct 2025 01:00:31 +0000
ROA not before:           Wed 29 Oct 2025 01:00:31 +0000
ROA not after:            Tue 27 Jan 2026 02:00:31 +0000
asID:                     396739
IP address blocks:        199.7.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:ad:62:69:e1:59:4d:de:04:4e:2b:c6:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 29 01:00:31 2025 GMT
            Not After : Jan 27 02:00:31 2026 GMT
        Subject: CN=f2af0ed2-771b-49d6-b736-09c228bc2f26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:f1:c9:ea:45:ea:94:1d:33:d0:38:a5:19:22:
                    46:70:c3:20:9f:fb:b3:a4:15:c3:fe:d1:4c:50:26:
                    ae:69:d0:f7:ca:09:6c:50:d2:ea:50:32:a5:dd:51:
                    df:ae:de:de:53:5d:48:c3:04:70:22:9e:2f:d8:da:
                    ab:f2:42:ff:50:f7:22:e5:bf:a4:b3:e1:fc:64:69:
                    d4:4d:09:f9:81:a6:33:cc:a8:c7:de:d4:a2:44:e3:
                    31:e4:ef:c0:f3:64:74:8f:f5:d2:55:ed:3e:f5:14:
                    d3:c3:95:85:f2:91:22:0f:6c:bb:02:71:ca:a2:f6:
                    a1:75:32:12:0b:63:aa:6b:a0:73:4f:ff:70:99:cf:
                    db:23:a0:b5:6e:45:31:1c:6b:21:19:8f:16:d5:14:
                    e7:3d:09:32:04:eb:64:a1:e5:0a:a2:a8:7d:9c:23:
                    97:e8:aa:7d:af:80:06:19:4e:85:b3:1c:d2:0f:78:
                    15:8b:95:da:d0:73:3d:e6:f3:9f:5c:53:5c:d9:1b:
                    1e:e1:27:e9:17:03:bb:8b:d4:5e:bf:eb:2f:e3:8d:
                    47:77:fa:29:f3:68:85:04:c9:e3:5e:79:9e:a7:60:
                    47:2f:72:b6:bd:d1:9f:25:e6:ad:5a:fb:e1:9b:31:
                    f5:82:07:b0:8e:2e:14:25:98:a2:3c:ea:7c:2b:45:
                    3f:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:35:C9:4D:7E:5A:B4:6D:96:D7:29:5D:54:25:2B:0F:2A:48:BF:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/47a1e6bf-6f8a-3f7c-8df2-df26d39cf253.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:74:af:17:30:0b:78:f8:ff:4f:9e:ea:c4:6c:90:fd:3c:14:
         81:70:bf:d2:0d:bc:5e:a6:0b:bf:55:5e:b1:b6:59:28:05:ac:
         0b:77:b3:05:89:3e:8b:6f:a2:45:e4:03:0c:19:21:6d:7b:8a:
         bc:93:f0:08:fd:7a:bf:94:6a:fe:07:98:b6:96:ab:97:5f:82:
         1e:be:b2:d1:18:82:05:67:98:c8:94:41:31:c8:68:a1:15:f2:
         de:28:7f:e5:c8:60:1c:68:0f:64:8e:e7:b8:de:cd:bf:ff:40:
         3f:9c:19:61:43:39:24:8d:da:da:6a:b0:64:99:86:45:72:f2:
         b0:19:6f:54:ab:12:fe:08:e0:91:4e:a9:42:66:6f:75:ba:49:
         82:12:ed:c6:17:a9:90:fc:9b:b2:8b:a0:ea:ec:ea:c8:d8:89:
         da:b7:f8:3c:fd:f7:cd:0a:29:c0:79:d9:11:ef:c0:89:02:ef:
         23:ca:a2:26:7a:f4:d5:29:50:a5:39:89:1f:ef:fc:13:5b:0c:
         7d:c6:14:ff:af:c8:91:a5:be:27:9d:f9:dc:99:81:cc:ff:0c:
         ff:f3:42:a5:84:8b:95:2f:08:80:f1:9a:bd:ea:9d:df:f0:6d:
         7e:5b:3c:8d:dd:22:3d:e0:41:1e:9d:de:eb:f6:0c:5b:8d:13:
         ca:72:90:d8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEutYmnhWU3eBE4rxmgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MTAyOTAxMDAzMVoXDTI2MDEyNzAyMDAzMVowLzEtMCsGA1UEAxMk
ZjJhZjBlZDItNzcxYi00OWQ2LWI3MzYtMDljMjI4YmMyZjI2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoPHJ6kXqlB0z0DilGSJGcMMgn/uzpBXD/tFM
UCauadD3yglsUNLqUDKl3VHfrt7eU11IwwRwIp4v2Nqr8kL/UPci5b+ks+H8ZGnU
TQn5gaYzzKjH3tSiROMx5O/A82R0j/XSVe0+9RTTw5WF8pEiD2y7AnHKovahdTIS
C2Oqa6BzT/9wmc/bI6C1bkUxHGshGY8W1RTnPQkyBOtkoeUKoqh9nCOX6Kp9r4AG
GU6FsxzSD3gVi5Xa0HM95vOfXFNc2Rse4SfpFwO7i9Rev+sv441Hd/op82iFBMnj
Xnmep2BHL3K2vdGfJeatWvvhmzH1ggewji4UJZiiPOp8K0U/TQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBc1yU1+WrRtltcpXVQlKw8qSL83MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNDdhMWU2YmYtNmY4YS0z
ZjdjLThkZjItZGYyNmQzOWNmMjUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwdHMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJ90rxcwC3j4/0+e6sRskP08FIFwv9INvF6mC79VXrG2WSgFrAt3swWJ
PotvokXkAwwZIW17iryT8Aj9er+Uav4HmLaWq5dfgh6+stEYggVnmMiUQTHIaKEV
8t4of+XIYBxoD2SO57jezb//QD+cGWFDOSSN2tpqsGSZhkVy8rAZb1SrEv4I4JFO
qUJmb3W6SYIS7cYXqZD8m7KLoOrs6sjYidq3+Dz9980KKcB52RHvwIkC7yPKoiZ6
9NUpUKU5iR/v/BNbDH3GFP+vyJGlvied+dyZgcz/DP/zQqWEi5UvCIDxmr3qnd/w
bX5bPI3dIj3gQR6d3uv2DFuNE8pykNg=
-----END CERTIFICATE-----
Generated at Wed Oct 29 07:20:19 2025 by rpki-client