Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/50f82138-a028-3204-96e4-7aec481e35d4.roa
File:                     50f82138-a028-3204-96e4-7aec481e35d4.roa (raw, json)
Hash identifier:          QLUz7Hy1LjsQ8P1+dckMl6Vzjs12rvIpazW/4LeYtwc=
Subject key identifier:   41:83:89:64:54:E0:9F:B9:3B:A9:FE:0C:C4:E8:F4:BF:DE:57:66:32
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858490CB15C0D79A064C463D8EF80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/50f82138-a028-3204-96e4-7aec481e35d4.roa
Signing time:             Sun 02 Mar 2025 02:00:40 +0000
ROA not before:           Sun 02 Mar 2025 02:00:40 +0000
ROA not after:            Sat 31 May 2025 01:00:40 +0000
asID:                     397195
IP address blocks:        199.7.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:0c:b1:5c:0d:79:a0:64:c4:63:d8:ef:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar  2 02:00:40 2025 GMT
            Not After : May 31 01:00:40 2025 GMT
        Subject: CN=dbd7d0d2-7b9e-4980-a6de-d1fb8de90202
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:c1:66:47:d0:15:cb:c5:b2:10:b2:b7:c6:f6:
                    c1:e3:13:fe:55:f1:9f:e9:db:5b:dd:4f:8d:20:01:
                    f1:1a:b8:3f:f1:82:09:f8:47:65:5e:bd:75:45:1c:
                    f3:97:3f:ea:b5:c2:73:ed:69:60:50:e2:fa:8b:16:
                    ca:4a:88:9b:64:ff:15:76:c1:af:61:56:7a:e2:ab:
                    c0:80:88:24:41:05:76:69:cc:f6:ff:71:c3:4b:3a:
                    66:ae:05:77:fe:09:53:e8:17:e3:a8:86:ad:2e:da:
                    6a:f1:d1:81:64:79:de:02:7f:05:9c:3c:63:95:e0:
                    40:72:cf:b7:2a:92:49:48:49:4a:7e:15:6d:ed:89:
                    12:fa:55:37:01:72:b8:51:04:94:9e:0b:b2:66:31:
                    6d:c0:90:40:cf:de:51:73:71:67:2d:bb:55:d3:98:
                    11:43:d0:e7:27:33:77:3b:c5:17:73:54:66:9f:d1:
                    8b:2a:36:98:47:f5:1e:d9:c3:f6:11:f7:c1:f5:58:
                    c4:2b:cd:e2:b8:aa:76:d6:f7:d7:1b:96:89:ea:74:
                    c4:cc:e4:1d:f2:75:c7:21:0a:f1:ab:f8:46:5d:7e:
                    70:52:4a:20:68:45:6d:92:2a:ab:a0:26:76:5e:8c:
                    ed:3c:38:63:71:59:ab:bb:38:d8:b3:ba:76:bc:b2:
                    a5:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:83:89:64:54:E0:9F:B9:3B:A9:FE:0C:C4:E8:F4:BF:DE:57:66:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/50f82138-a028-3204-96e4-7aec481e35d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:be:cd:57:d8:89:89:07:35:b3:42:0f:9a:68:b4:fd:f3:fc:
         96:56:66:1a:29:98:82:81:cd:58:03:84:70:31:53:44:c6:4e:
         62:33:97:bd:c3:91:c7:e4:d0:25:88:67:c7:ea:6b:5f:20:21:
         3b:ea:bf:45:e2:e8:41:87:0b:e1:73:2a:ae:54:bf:f7:fa:d3:
         4b:f1:73:54:df:aa:61:6b:d9:8a:17:6f:22:61:4b:c0:79:07:
         13:4d:20:57:b3:64:17:43:64:8f:4f:94:d6:6d:7b:07:e0:3b:
         86:0c:82:e1:d7:f9:1d:90:20:a1:ea:54:91:25:17:b4:a3:81:
         58:a9:00:33:76:6c:89:9d:ae:66:00:33:1d:85:f1:fc:9c:42:
         3d:e8:5a:b0:57:2c:16:31:0f:47:1d:da:ea:6e:a3:e1:b6:59:
         24:81:1e:95:7e:25:c7:72:30:1f:d7:d1:1e:f7:6d:67:c8:ba:
         bd:ab:b4:77:d8:c7:52:7b:c1:20:a8:86:43:af:48:64:fd:48:
         38:bd:73:3c:d9:f9:c5:81:c3:a3:11:a0:f5:8c:52:db:b8:4a:
         51:ae:10:47:38:99:de:91:76:a7:c0:bd:b6:8b:20:3c:5a:93:
         55:e4:32:89:f7:5e:ba:ca:b3:1c:1e:a2:1b:f3:ca:33:3f:9a:
         ba:f0:46:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:08:52 2025 by rpki-client