Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/61fa0924-d464-38ff-90ba-1dd9c5b237ec.roa
File:                     61fa0924-d464-38ff-90ba-1dd9c5b237ec.roa (raw, json)
Hash identifier:          7XMeBn86nCongTEe+sDzMFQMxZQwFTUV+3odAN6Ky4E=
Subject key identifier:   66:A4:36:4C:CC:BF:F7:17:14:DC:F0:4F:A8:AD:7B:68:4B:C8:51:FE
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584BAD6275044465D192D3612A40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/61fa0924-d464-38ff-90ba-1dd9c5b237ec.roa
Signing time:             Wed 29 Oct 2025 01:00:31 +0000
ROA not before:           Wed 29 Oct 2025 01:00:31 +0000
ROA not after:            Tue 27 Jan 2026 02:00:31 +0000
asID:                     397193
IP address blocks:        199.7.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:ad:62:75:04:44:65:d1:92:d3:61:2a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 29 01:00:31 2025 GMT
            Not After : Jan 27 02:00:31 2026 GMT
        Subject: CN=46c558c2-4842-49c1-baae-c616000cfe09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:33:5a:eb:2f:30:45:f3:9e:5d:1d:85:3b:41:
                    55:f1:bc:1b:a0:50:79:e0:4e:d0:66:7b:de:7d:47:
                    a0:9a:3e:af:0e:94:fa:77:a3:3a:30:d2:6f:22:a5:
                    e5:40:2e:5a:ed:ea:33:8c:74:af:f9:10:49:71:79:
                    f5:e9:2b:26:83:89:df:96:27:40:10:6f:e7:4d:54:
                    53:44:92:f9:8a:ea:07:f9:f9:8a:ae:12:ba:31:92:
                    da:32:81:f8:8b:ee:3d:57:38:ad:61:a3:d3:8c:aa:
                    e6:c7:2b:79:37:99:aa:26:33:10:76:d2:e8:01:dc:
                    8b:44:00:2d:8d:fb:31:21:20:e8:b1:00:62:52:08:
                    96:06:4c:3f:d2:a1:d8:c2:30:28:34:c1:29:24:e8:
                    65:f6:ff:9e:a4:4f:39:cb:08:f0:8d:31:bf:c0:6e:
                    90:66:92:b6:c0:ab:8d:95:31:a9:82:0d:c0:d4:a7:
                    31:71:7d:a5:e4:7a:76:6c:cd:be:7f:ce:31:20:46:
                    51:70:1e:a0:a3:3c:f2:a3:a8:6a:c2:dd:e8:64:62:
                    66:e5:97:6c:c4:61:6d:bd:46:49:ce:d5:6f:84:62:
                    53:f1:77:44:b0:db:b0:87:e2:d9:86:9f:67:1c:0f:
                    73:05:63:f6:b1:77:e5:77:6f:db:44:d2:7f:ac:e8:
                    97:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:A4:36:4C:CC:BF:F7:17:14:DC:F0:4F:A8:AD:7B:68:4B:C8:51:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/61fa0924-d464-38ff-90ba-1dd9c5b237ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:f6:4b:f1:35:f6:ee:97:39:ab:67:72:4d:ff:b6:d2:a6:e2:
         a1:46:df:30:54:b6:aa:f3:57:fc:5e:9f:3b:2b:ac:6a:d2:62:
         c0:35:2b:6f:49:88:87:40:30:a0:b3:3a:55:44:1d:99:52:8c:
         06:d0:e5:fc:09:48:71:eb:13:26:c4:94:6e:fd:fa:68:e0:d6:
         2f:59:e2:74:11:8d:3d:94:2b:40:0f:aa:72:a6:65:42:67:ad:
         11:24:8c:61:1f:79:3c:1d:ae:71:41:ec:82:84:2c:15:6b:ae:
         c1:90:91:67:37:f8:71:af:6f:ae:4e:6e:59:f3:97:6d:5f:7b:
         da:fb:c1:b2:df:e6:09:df:7f:79:21:ee:4c:66:d0:22:1d:02:
         13:ab:36:e4:46:0b:49:86:ed:31:22:8a:22:fc:f0:0e:df:ea:
         9c:3d:8f:63:e4:16:98:0f:23:59:4c:07:b0:c9:b0:ac:af:13:
         12:66:05:83:46:af:29:88:56:b5:80:26:fc:59:ec:c6:e8:a0:
         dc:9d:3c:fb:f6:14:40:f0:ed:f2:c7:39:c6:ed:b7:6b:3f:08:
         a2:73:c2:32:67:a5:87:df:50:b3:27:69:e3:f8:9b:2c:80:e7:
         af:5e:85:70:2d:90:8e:04:89:75:0f:9d:b0:00:96:ab:61:94:
         90:84:08:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 07:04:56 2025 by rpki-client