Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5c15328c-1ada-32b1-92ef-c94ac4ad2fcd.roa
File:                     5c15328c-1ada-32b1-92ef-c94ac4ad2fcd.roa (raw, json)
Hash identifier:          4bmaFVPVFHtwmZsZDOuwhB5kVV55ZiT80u8g9J2IsqU=
Subject key identifier:   AA:F2:DB:44:84:E2:BA:12:19:20:21:BA:18:77:16:2B:98:9D:F1:B9
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285849EBEA6EC7260DE9FECDB8A300
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5c15328c-1ada-32b1-92ef-c94ac4ad2fcd.roa
Signing time:             Wed 21 May 2025 01:00:49 +0000
ROA not before:           Wed 21 May 2025 01:00:49 +0000
ROA not after:            Tue 19 Aug 2025 01:00:49 +0000
asID:                     36627
IP address blocks:        199.7.71.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:eb:ea:6e:c7:26:0d:e9:fe:cd:b8:a3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 21 01:00:49 2025 GMT
            Not After : Aug 19 01:00:49 2025 GMT
        Subject: CN=d35b7079-2ba8-4d00-ac74-1040b849b400
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c1:81:41:59:d4:98:e4:4c:02:51:78:5c:7b:
                    8a:05:06:fc:64:ee:de:b7:20:de:38:d7:09:a1:fc:
                    30:40:2e:65:72:ea:13:5c:87:5d:f0:7c:9e:af:60:
                    1d:96:05:fd:ba:bc:59:53:d4:07:bb:07:d0:2e:db:
                    87:0c:b2:c8:e8:92:ec:34:32:05:84:fb:9e:2f:5b:
                    34:44:df:0a:e4:7f:90:10:41:82:b2:36:58:b0:7f:
                    80:f8:ff:f0:ea:40:c6:f8:da:80:cb:10:f4:a7:6d:
                    cd:3a:84:32:8c:60:aa:11:9a:11:99:ad:83:38:ac:
                    e2:98:57:4f:66:ca:16:e1:f1:fa:e0:b1:7c:9c:33:
                    37:7f:0d:d1:95:bb:da:b2:c7:69:aa:ad:50:04:e1:
                    eb:cc:c4:e6:68:6c:58:60:ed:ad:dd:c2:9b:a4:23:
                    73:6b:a9:f1:22:93:93:22:8c:61:e3:36:ce:a2:80:
                    e8:0d:21:dc:ee:cc:85:8a:66:fc:7c:73:28:7d:15:
                    b8:d1:6d:07:c2:74:67:3e:4a:3e:c7:6d:5e:f9:1a:
                    32:e7:bb:e9:9d:1d:03:30:47:ec:96:b7:fc:7b:0c:
                    6d:4c:03:c1:e0:21:8e:3d:8d:b7:d8:90:e4:d9:08:
                    fc:3d:7f:62:01:76:d6:b7:26:69:8b:60:0a:88:fe:
                    7b:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:F2:DB:44:84:E2:BA:12:19:20:21:BA:18:77:16:2B:98:9D:F1:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5c15328c-1ada-32b1-92ef-c94ac4ad2fcd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.71.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:d7:10:60:fc:b7:4b:38:80:1e:78:0b:14:11:e8:dc:21:d1:
         32:aa:38:31:63:e6:15:a3:4d:ca:76:20:ca:d0:4c:c6:e6:a9:
         b0:74:1a:4b:2e:21:23:b9:22:1c:df:c4:08:b6:55:79:03:6f:
         f6:79:1b:48:81:66:64:68:e6:65:e9:1c:21:33:94:c2:3b:13:
         97:2d:62:8f:e9:db:77:0c:bb:43:24:95:21:5d:b7:57:18:34:
         24:2a:b9:71:4c:81:88:d5:24:33:96:2e:24:73:92:48:34:a3:
         49:88:09:4a:a9:9f:26:0c:23:96:c1:21:b4:ae:f1:31:6f:be:
         3c:5f:0a:4b:ad:d7:6a:44:e4:ad:63:fe:e5:cd:c5:d1:db:42:
         f5:50:b1:f2:97:63:e0:9f:f2:33:0e:87:9d:ea:b1:69:88:59:
         bd:00:c1:e4:e2:c8:cc:e1:16:1d:98:4d:e4:a5:0e:2a:1d:be:
         4f:78:69:31:3d:d1:02:9e:dd:72:43:68:0d:29:4b:13:1d:d9:
         78:12:b8:01:f5:13:dd:37:0c:df:17:94:c4:84:4b:65:c3:8f:
         6f:61:5e:3c:2a:f3:9d:4a:cb:18:86:3f:94:40:e7:4e:7c:fc:
         89:59:44:69:08:ed:ed:b5:72:20:c6:37:7b:46:82:75:6b:d7:
         61:77:7f:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 19:26:53 2025 by rpki-client