Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6e7346c6-ff1a-383c-a6eb-53e7de68dba2.roa
File:                     6e7346c6-ff1a-383c-a6eb-53e7de68dba2.roa (raw, json)
Hash identifier:          191G16wFglh+I63QHmHYAGrjyg9s2XJsoMT447n3+78=
Subject key identifier:   D3:B4:DD:C2:0C:2E:1F:C8:99:C5:9E:CE:70:ED:37:02:79:8E:DC:25
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285849EBEA757098114A48ED9E5740
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6e7346c6-ff1a-383c-a6eb-53e7de68dba2.roa
Signing time:             Wed 21 May 2025 01:00:49 +0000
ROA not before:           Wed 21 May 2025 01:00:49 +0000
ROA not after:            Tue 19 Aug 2025 01:00:49 +0000
asID:                     397212
IP address blocks:        199.7.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:eb:ea:75:70:98:11:4a:48:ed:9e:57:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 21 01:00:49 2025 GMT
            Not After : Aug 19 01:00:49 2025 GMT
        Subject: CN=b8e6df1e-989e-4f61-930d-0b59bf278653
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a5:a5:7e:27:2f:74:68:27:16:03:28:2c:3d:
                    c0:a3:14:3e:72:59:52:67:d3:b4:b3:53:52:f6:b6:
                    1a:e2:94:22:62:7e:5b:5f:44:36:83:db:5d:0d:f8:
                    9e:ae:97:be:44:5d:44:41:81:15:39:09:6a:6f:46:
                    4a:3e:5a:77:27:66:e5:b9:36:a0:ed:89:18:a8:8a:
                    d4:75:5d:c3:12:79:88:58:e1:62:8f:86:19:25:9f:
                    ff:02:5d:b3:b7:b6:a3:97:61:14:28:cf:1b:e2:b8:
                    5b:59:da:7e:ca:92:d2:09:83:29:a1:dc:f2:6e:22:
                    9c:3f:0c:3e:9a:a6:67:e5:db:77:80:f7:10:27:87:
                    d9:8d:89:5a:f3:8c:d0:d4:5a:d9:34:e9:cd:5e:e5:
                    28:19:41:d7:06:0b:1a:cb:46:64:68:d9:09:b2:aa:
                    9b:60:85:d5:42:fd:13:38:8c:fa:74:49:ac:b5:66:
                    1d:4f:12:2c:bd:ba:64:40:36:c0:be:43:3e:6f:cf:
                    49:27:82:5e:4c:1d:8e:4e:cb:93:59:07:94:e7:1f:
                    8e:67:55:70:cb:1a:5a:ed:99:da:44:e0:02:3a:f4:
                    77:76:f9:04:3a:ad:d0:43:8c:e0:08:a7:30:ea:bb:
                    9d:5e:b6:40:ab:43:7d:40:74:de:0e:7e:2b:72:a0:
                    64:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:B4:DD:C2:0C:2E:1F:C8:99:C5:9E:CE:70:ED:37:02:79:8E:DC:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6e7346c6-ff1a-383c-a6eb-53e7de68dba2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bf:8f:d4:ce:6f:3a:69:6b:23:f2:2e:cb:e3:ad:34:12:8c:0d:
         65:7f:e3:a6:2a:b2:3d:d7:01:c4:cc:c8:c0:6e:9a:86:e6:25:
         3a:24:01:21:5e:3f:86:ce:28:a6:79:68:50:c1:82:66:39:35:
         bf:2d:03:28:99:13:41:15:a9:a1:10:ae:04:81:7f:e1:94:5f:
         8b:7f:14:db:23:cc:99:8e:9c:aa:c0:a6:0a:f9:be:32:a2:3e:
         0a:00:21:cc:e3:6e:a0:7c:d4:c4:58:8b:fe:9b:13:d5:7a:10:
         3f:39:e6:63:7e:d7:6d:be:8e:8c:75:f4:42:c1:85:a5:64:7d:
         db:60:f7:b6:da:ef:ab:7b:51:ca:b1:c3:13:ff:9f:96:2c:df:
         c9:a1:30:b1:93:f7:ee:90:7f:3f:70:64:9b:56:25:c6:e4:c2:
         d0:e6:72:ab:7f:a3:b2:cf:bf:ca:7e:8b:51:c7:b6:42:57:0b:
         e6:68:0f:f7:83:5b:03:38:b3:5f:f7:5c:19:8d:91:2a:91:06:
         9b:a7:c4:1d:e6:68:79:d4:da:88:cd:9f:63:fd:f9:b2:eb:61:
         92:2c:dc:67:db:7b:6a:a8:1c:68:b0:c3:f2:90:37:a7:3b:f9:
         f9:e4:25:fd:ed:68:db:14:02:d9:4b:d0:c2:9f:85:07:ae:a8:
         7b:ef:17:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 04:01:20 2025 by rpki-client