Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5e1c8865-7ea6-32e8-b986-09b226597db6.roa
File:                     5e1c8865-7ea6-32e8-b986-09b226597db6.roa (raw, json)
Hash identifier:          g24X2Y03HsGzRbJE3+uqfsPQHXATPYXTDRroi4t3mFc=
Subject key identifier:   30:26:EA:48:F6:07:BE:5D:7F:61:CC:C6:48:50:9A:27:B5:9E:61:11
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584BAD626B8946C027A7DB57A9C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5e1c8865-7ea6-32e8-b986-09b226597db6.roa
Signing time:             Wed 29 Oct 2025 01:00:31 +0000
ROA not before:           Wed 29 Oct 2025 01:00:31 +0000
ROA not after:            Tue 27 Jan 2026 02:00:31 +0000
asID:                     36632
IP address blocks:        199.7.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:ad:62:6b:89:46:c0:27:a7:db:57:a9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 29 01:00:31 2025 GMT
            Not After : Jan 27 02:00:31 2026 GMT
        Subject: CN=542ff4b9-0c43-42f9-8450-f2fc706c451e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:be:bd:07:6d:ea:94:18:c3:b8:d1:d0:d3:54:
                    f0:6c:c9:36:be:f2:2d:e0:7b:a2:61:83:bc:e4:71:
                    a4:bc:bc:83:bd:92:f3:b4:9c:89:51:ee:85:1b:6e:
                    f6:c6:ac:1f:b0:ca:58:b7:8b:69:d0:9d:59:e6:5b:
                    89:78:f6:6c:7e:1b:42:e5:42:86:2f:5a:1d:8c:63:
                    e3:1c:10:59:40:82:10:8e:ed:98:bd:3f:79:62:f4:
                    05:8a:f4:31:00:cb:f0:ef:1e:01:d4:24:26:1c:2b:
                    aa:58:0b:31:58:90:45:85:e1:ce:75:76:1a:eb:74:
                    53:8b:1e:25:06:26:f7:a0:61:59:1c:d2:e7:85:1b:
                    33:4a:9a:12:b9:39:9f:cc:4d:f1:e2:e4:f7:6d:32:
                    59:12:22:a7:04:ac:6b:37:47:46:8b:b9:ab:d3:8b:
                    27:cd:84:46:37:5c:da:73:12:0f:7f:57:0a:a0:82:
                    1a:0a:f3:2f:91:3e:a6:c2:49:3b:fc:ba:96:dc:69:
                    01:49:50:48:40:ef:94:de:89:3c:07:c8:05:99:f5:
                    46:09:74:dc:3d:23:5b:5a:06:84:89:6e:7b:32:fa:
                    73:4e:33:c2:b4:a2:b9:09:11:fc:af:53:99:ab:b3:
                    20:ef:16:87:53:95:a1:88:34:48:c6:89:c7:a2:be:
                    41:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:26:EA:48:F6:07:BE:5D:7F:61:CC:C6:48:50:9A:27:B5:9E:61:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5e1c8865-7ea6-32e8-b986-09b226597db6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:54:70:52:d2:d8:a1:2c:53:6b:b4:5c:ff:aa:2c:76:8d:75:
         c5:e4:8a:5b:2b:dd:14:72:1d:96:fb:ac:fc:d7:99:33:1e:5b:
         4d:5d:1c:0c:99:e9:05:f2:c9:c7:e5:75:07:b7:90:d3:1e:6c:
         0f:d2:cc:38:9c:fc:ef:8a:2f:a4:8c:c3:93:81:2d:1a:40:b4:
         65:54:27:34:29:26:49:de:62:26:c3:0b:29:c2:10:c3:4c:96:
         52:f2:23:68:2c:54:6a:9a:8c:b4:9f:e3:97:86:db:4b:c9:96:
         c8:c6:27:5f:55:43:98:0d:cd:af:b7:5e:6a:cd:44:d0:bb:ab:
         0b:0d:e9:2c:57:52:5a:fe:e6:be:1c:8b:6e:b6:fe:e4:9a:61:
         c2:d0:25:a3:19:fc:3f:be:70:45:2c:04:7d:c9:cd:4e:2a:e4:
         90:60:ea:9e:e4:64:11:4f:e8:8b:d7:b0:3f:d4:f2:67:b7:a3:
         fe:85:21:85:66:ca:af:70:9b:9a:ff:da:4d:ba:70:1f:bf:d2:
         a8:e0:55:5c:87:94:25:4e:5c:b3:20:df:5c:01:b9:c5:3d:da:
         c7:84:9b:ba:b9:f1:2b:c1:ae:60:7e:04:77:ae:f8:21:94:dd:
         ef:e6:59:88:64:f6:91:ff:1e:89:86:90:87:96:51:50:18:92:
         6a:11:c4:9a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEutYmuJRsAnp9tXqcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MTAyOTAxMDAzMVoXDTI2MDEyNzAyMDAzMVowLzEtMCsGA1UEAxMk
NTQyZmY0YjktMGM0My00MmY5LTg0NTAtZjJmYzcwNmM0NTFlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqL69B23qlBjDuNHQ01TwbMk2vvIt4HuiYYO8
5HGkvLyDvZLztJyJUe6FG272xqwfsMpYt4tp0J1Z5luJePZsfhtC5UKGL1odjGPj
HBBZQIIQju2YvT95YvQFivQxAMvw7x4B1CQmHCuqWAsxWJBFheHOdXYa63RTix4l
Bib3oGFZHNLnhRszSpoSuTmfzE3x4uT3bTJZEiKnBKxrN0dGi7mr04snzYRGN1za
cxIPf1cKoIIaCvMvkT6mwkk7/LqW3GkBSVBIQO+U3ok8B8gFmfVGCXTcPSNbWgaE
iW57MvpzTjPCtKK5CRH8r1OZq7Mg7xaHU5WhiDRIxonHor5BmwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDAm6kj2B75df2HMxkhQmie1nmERMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNWUxYzg4NjUtN2VhNi0z
MmU4LWI5ODYtMDliMjI2NTk3ZGI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwdHMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACJUcFLS2KEsU2u0XP+qLHaNdcXkilsr3RRyHZb7rPzXmTMeW01dHAyZ
6QXyycfldQe3kNMebA/SzDic/O+KL6SMw5OBLRpAtGVUJzQpJkneYibDCynCEMNM
llLyI2gsVGqajLSf45eG20vJlsjGJ19VQ5gNza+3XmrNRNC7qwsN6SxXUlr+5r4c
i262/uSaYcLQJaMZ/D++cEUsBH3JzU4q5JBg6p7kZBFP6IvXsD/U8me3o/6FIYVm
yq9wm5r/2k26cB+/0qjgVVyHlCVOXLMg31wBucU92seEm7q58SvBrmB+BHeu+CGU
3e/mWYhk9pH/HomGkIeWUVAYkmoRxJo=
-----END CERTIFICATE-----
Generated at Wed Oct 29 07:08:01 2025 by rpki-client