Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/482417bc-beeb-3913-b367-ceb938e7f5eb.roa
File:                     482417bc-beeb-3913-b367-ceb938e7f5eb.roa (raw, json)
Hash identifier:          fx1UoBSc/OgoGsdiCSuUhyBEMiV2R5psxNTB++GagA0=
Subject key identifier:   E3:AB:BF:9E:45:38:FE:61:FD:5B:15:E8:43:D3:5F:93:72:AF:B5:FB
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584BAD626AC36BFAD314A1235500
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/482417bc-beeb-3913-b367-ceb938e7f5eb.roa
Signing time:             Wed 29 Oct 2025 01:00:31 +0000
ROA not before:           Wed 29 Oct 2025 01:00:31 +0000
ROA not after:            Tue 27 Jan 2026 02:00:31 +0000
asID:                     396574
IP address blocks:        199.7.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:ad:62:6a:c3:6b:fa:d3:14:a1:23:55:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 29 01:00:31 2025 GMT
            Not After : Jan 27 02:00:31 2026 GMT
        Subject: CN=dbc6d2e6-317a-49e5-b2e1-2020e9b5075e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b5:a4:67:d5:bc:ce:8d:21:cc:9d:8a:b5:7e:
                    70:26:cd:04:d6:c0:bb:54:c2:e7:0d:9c:79:26:32:
                    36:d1:31:e7:96:e4:39:e9:7a:49:e5:02:3e:09:c3:
                    13:0b:43:78:3a:27:4e:7b:78:a1:bc:9e:6b:35:24:
                    90:0c:42:a8:78:f1:bc:b4:21:47:d9:9c:90:6b:1f:
                    85:39:31:f7:ad:0e:ba:7c:7c:57:39:21:e9:ae:c9:
                    77:f2:62:3b:ec:29:22:f0:14:72:2f:de:6b:8a:a6:
                    7d:9d:35:5e:de:31:04:86:9d:80:34:69:51:d1:c9:
                    af:29:41:df:6d:47:b8:9e:39:1e:c5:4a:75:85:61:
                    3a:16:e2:bc:a6:7f:79:a5:e5:48:26:dd:eb:ae:78:
                    cf:8b:7e:a1:ca:c4:7c:53:78:8c:01:1d:ac:87:63:
                    22:2f:9a:b2:22:d4:af:b5:85:ff:a3:b1:0f:50:dc:
                    9c:3f:7e:53:d5:4c:58:9e:44:06:ae:ee:a6:43:a7:
                    de:b8:96:79:35:a4:fc:df:59:39:e4:33:42:30:29:
                    20:25:c4:db:3e:59:99:a2:2b:cd:ff:be:a4:18:af:
                    94:f6:d1:19:2b:d4:95:55:8a:97:2b:16:8f:51:21:
                    fc:54:8f:4f:9a:16:96:e7:13:02:39:2e:f9:5f:33:
                    53:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:AB:BF:9E:45:38:FE:61:FD:5B:15:E8:43:D3:5F:93:72:AF:B5:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/482417bc-beeb-3913-b367-ceb938e7f5eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:ad:c0:f9:8b:78:b3:f7:78:53:e3:16:90:45:07:00:38:95:
         61:63:82:55:ee:c4:09:06:e3:16:22:1f:03:a8:77:d9:2a:c7:
         71:47:3c:3e:28:f7:b9:9b:5c:38:e7:ff:d8:51:07:da:81:f8:
         60:86:21:5e:4a:19:0c:1c:9c:a5:29:99:8c:f4:11:2e:fa:a7:
         4b:ef:3e:ae:c3:97:a1:75:c1:17:a1:c3:bd:9f:ac:6b:72:18:
         38:1b:f7:57:99:52:c4:73:12:ca:99:9c:f7:f4:dd:c9:28:38:
         29:f1:45:25:fa:71:8f:d2:dc:b7:69:96:2b:40:a9:00:70:42:
         2b:23:87:79:aa:04:70:ab:f5:e4:d5:eb:0f:79:49:56:1b:f5:
         3a:56:2a:e7:56:0e:2e:07:90:12:c0:3b:06:a4:12:fa:57:0f:
         1d:c4:93:2b:21:b4:31:2d:42:b9:97:1e:08:ec:41:fc:4d:ae:
         7c:a1:e6:3f:67:10:6c:1a:c3:d0:99:d5:4b:e8:37:71:71:71:
         f8:83:8e:a3:42:c2:75:7b:51:92:75:a0:1a:30:8e:38:91:01:
         39:30:93:97:fe:a2:a9:f8:0d:2c:1b:1a:a9:30:88:62:c5:e9:
         90:b3:5f:4f:47:6c:cb:f6:ed:3b:3d:44:25:c3:63:37:da:57:
         f9:01:b3:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 07:18:48 2025 by rpki-client