Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6834039f-c461-3144-a6bb-95213067102c.roa
File:                     6834039f-c461-3144-a6bb-95213067102c.roa (raw, json)
Hash identifier:          qxHgjssG+5uZee983nv+OrWg4NyaJDrogEdVRHbsR9U=
Subject key identifier:   35:30:A8:45:89:9C:2A:63:3F:1D:D7:2A:AF:EB:A4:FC:CC:DE:BD:C7
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858490CB16370523785A689EC0F80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6834039f-c461-3144-a6bb-95213067102c.roa
Signing time:             Sun 02 Mar 2025 02:00:40 +0000
ROA not before:           Sun 02 Mar 2025 02:00:40 +0000
ROA not after:            Sat 31 May 2025 01:00:40 +0000
asID:                     396611
IP address blocks:        199.7.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:0c:b1:63:70:52:37:85:a6:89:ec:0f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar  2 02:00:40 2025 GMT
            Not After : May 31 01:00:40 2025 GMT
        Subject: CN=765db1a6-51b9-46d7-a2c1-9c741daf4532
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:56:52:00:bb:a6:80:11:9c:35:f0:e9:ae:d9:
                    c2:44:2f:e9:2d:d5:79:6c:cb:bb:7e:0e:7f:30:c5:
                    36:a0:7a:b1:1f:e4:9e:71:0d:93:05:e3:d8:fe:70:
                    20:a1:da:e2:39:87:ae:66:17:c3:69:4b:7b:93:45:
                    f8:fa:a1:bb:2f:63:fd:1f:a9:f8:4e:29:d5:30:79:
                    9d:58:17:87:1d:b0:49:4a:ad:24:dc:c6:e7:d0:3f:
                    26:ef:fb:71:6d:15:96:2b:89:2b:be:85:cc:37:fe:
                    6c:1d:db:7a:04:f4:9c:17:fb:56:b9:2e:c2:8b:a8:
                    f7:08:85:6d:3d:f2:b8:d2:a4:32:f2:69:e4:80:ed:
                    e7:88:a1:42:8c:1a:9e:ac:09:13:c5:4f:2f:30:ef:
                    a6:97:b4:25:f2:5b:33:d8:fd:fc:91:60:51:82:b4:
                    dd:05:52:b4:06:e3:fc:41:fd:5a:13:17:d7:08:a0:
                    37:9a:83:ad:aa:57:3d:71:47:90:35:ed:83:44:bd:
                    ef:87:23:e6:58:e8:9d:6c:9d:cf:ed:15:93:7f:fb:
                    93:52:de:5f:32:c4:f1:8d:9b:54:41:59:08:0f:e7:
                    90:08:62:dd:65:9d:8c:27:fc:a9:34:2e:1e:31:64:
                    04:f3:c3:84:90:be:57:49:ad:e3:0a:2b:f4:c3:c4:
                    06:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:30:A8:45:89:9C:2A:63:3F:1D:D7:2A:AF:EB:A4:FC:CC:DE:BD:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6834039f-c461-3144-a6bb-95213067102c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:d8:aa:1e:14:1b:7b:6c:3c:fd:5f:f1:4c:b9:11:51:a4:c3:
         8a:c5:f5:18:38:64:b1:54:20:e9:94:2a:ea:2b:2d:a9:ec:3b:
         69:3f:dd:14:01:52:a9:61:8e:7a:5b:98:30:69:96:b0:46:c1:
         ad:d4:4c:6b:f4:d8:47:b5:ed:e0:5f:c5:dd:df:da:fe:e4:5e:
         49:df:87:56:e3:a7:1f:68:1e:d1:9c:ab:cf:b9:8f:af:7d:53:
         d0:cd:5b:27:c9:a3:f3:0e:1a:d1:03:51:e5:d4:76:3c:18:fc:
         d7:cb:03:c9:c9:56:e5:96:24:d4:ae:f6:a8:58:10:46:b2:9b:
         2b:a2:a1:f0:ee:45:d4:3e:54:ad:1f:5b:a4:95:7f:1f:92:59:
         b8:d5:30:c2:06:cf:fc:15:66:15:22:86:77:5f:35:ca:c8:16:
         37:67:74:63:08:98:e9:e4:87:d6:5a:7e:c8:10:d2:01:93:c1:
         f9:50:f3:22:ab:43:01:73:74:b9:03:7d:bf:14:b2:e5:50:ee:
         a6:44:81:f7:60:b1:58:d1:f3:67:f2:65:7e:99:b9:f9:e5:a4:
         24:72:ea:22:1e:63:90:d6:01:3d:66:d0:e6:51:d8:98:af:c5:
         ff:67:d5:f2:38:86:c4:25:0f:27:c0:55:6f:b3:60:9d:2e:34:
         65:27:e7:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:27:48 2025 by rpki-client