Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8731bf22-4260-32aa-a589-db0dff4e97a7.roa
File:                     8731bf22-4260-32aa-a589-db0dff4e97a7.roa (raw, json)
Hash identifier:          6JWBcqmTxvuCEXVeVidhh8C+qFoM7t0TYVb7Zql/IAQ=
Subject key identifier:   CB:D4:6F:14:5C:CD:32:C7:00:C3:5D:3B:1F:99:09:AE:D0:DC:05:73
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285849EBEA6B4E203304734B853900
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8731bf22-4260-32aa-a589-db0dff4e97a7.roa
Signing time:             Wed 21 May 2025 01:00:49 +0000
ROA not before:           Wed 21 May 2025 01:00:49 +0000
ROA not after:            Tue 19 Aug 2025 01:00:49 +0000
asID:                     396617
IP address blocks:        199.7.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:eb:ea:6b:4e:20:33:04:73:4b:85:39:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 21 01:00:49 2025 GMT
            Not After : Aug 19 01:00:49 2025 GMT
        Subject: CN=e2c54f64-1e05-4c5f-8f00-16311abff802
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d7:16:6f:8a:7c:ef:5b:72:df:46:74:31:93:
                    e2:a7:d9:b8:38:91:1c:df:48:31:ed:a8:3f:84:6c:
                    53:b4:08:97:fb:73:4c:4e:14:a5:69:3f:0b:b0:4c:
                    83:5f:0e:84:85:16:4a:50:c0:d1:56:b1:fb:f0:1c:
                    69:dd:91:34:ce:a4:df:22:9f:0b:0d:28:7f:aa:00:
                    f9:12:f2:d5:5d:6f:40:d9:12:61:c9:db:26:d6:de:
                    df:60:8b:a6:2c:d5:b2:c7:a1:f9:2b:8a:dd:0c:5d:
                    35:ba:ae:98:42:4b:b3:0e:5a:53:61:d5:8a:12:22:
                    92:1b:0b:86:8d:34:39:f8:98:6d:56:99:04:b6:45:
                    c6:61:f4:76:65:a6:34:67:83:37:94:b6:69:d0:00:
                    37:02:18:46:b0:5b:29:f1:7d:87:85:72:ab:9e:53:
                    75:3d:7c:cf:17:d6:22:2a:e3:d9:f0:7b:b6:bd:55:
                    64:5a:b3:39:3f:4b:91:45:53:d0:1e:0b:02:d3:01:
                    17:ed:67:18:6e:b3:c8:56:5e:cb:0a:ae:66:ec:25:
                    71:50:1c:c1:1e:ab:2f:e1:25:f9:04:8f:5c:dc:a0:
                    19:37:3c:f8:0b:e6:af:15:15:2b:fc:bf:7d:59:6b:
                    dd:e7:14:aa:5b:66:5c:27:f0:f0:ff:5b:46:64:d5:
                    86:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:D4:6F:14:5C:CD:32:C7:00:C3:5D:3B:1F:99:09:AE:D0:DC:05:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8731bf22-4260-32aa-a589-db0dff4e97a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:a9:b6:ea:01:f1:45:c0:1b:81:a0:60:f9:80:64:63:6b:3e:
         45:d7:9c:2a:4c:98:6f:bc:4c:dd:aa:3d:00:94:81:e2:c3:d4:
         14:8b:7a:80:1a:91:84:4c:79:9b:de:7f:94:de:86:20:48:a6:
         31:52:64:cf:ea:74:d3:fb:11:09:0b:a0:ad:27:06:d1:c6:4b:
         7b:01:63:8d:c8:47:45:6b:c0:c2:0d:4f:5c:8a:3b:45:74:16:
         d6:54:e5:29:64:ea:db:39:03:94:1a:c9:e5:98:a8:96:59:9b:
         88:fa:4c:0e:a5:05:c4:a0:91:bf:c3:4f:b5:58:70:c0:3f:5a:
         80:20:92:21:4c:d2:ac:9e:bd:96:d3:f4:92:19:b5:03:f3:b7:
         d1:0f:29:cc:be:c3:fe:68:ef:ad:e2:2a:89:c1:b7:5b:73:d6:
         bf:4c:ca:8d:81:18:22:bf:95:01:83:07:6d:fd:42:48:7f:97:
         f7:0a:4a:e4:e5:11:1e:84:ac:6d:5f:8a:c3:ea:aa:cc:f1:3c:
         4f:07:1e:ea:7b:87:7d:66:ad:92:a7:25:a6:25:3a:29:b8:ec:
         08:e0:2b:b6:80:3f:4c:fe:39:c9:0d:35:27:ab:0f:47:4c:55:
         b7:30:be:da:58:43:4d:fc:0d:5c:5f:73:2b:07:45:36:fa:0a:
         53:a6:fe:cd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnr6mtOIDMEc0uFOQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDUyMTAxMDA0OVoXDTI1MDgxOTAxMDA0OVowLzEtMCsGA1UEAxMk
ZTJjNTRmNjQtMWUwNS00YzVmLThmMDAtMTYzMTFhYmZmODAyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9cWb4p871ty30Z0MZPip9m4OJEc30gx7ag/
hGxTtAiX+3NMThSlaT8LsEyDXw6EhRZKUMDRVrH78Bxp3ZE0zqTfIp8LDSh/qgD5
EvLVXW9A2RJhydsm1t7fYIumLNWyx6H5K4rdDF01uq6YQkuzDlpTYdWKEiKSGwuG
jTQ5+JhtVpkEtkXGYfR2ZaY0Z4M3lLZp0AA3AhhGsFsp8X2HhXKrnlN1PXzPF9Yi
KuPZ8Hu2vVVkWrM5P0uRRVPQHgsC0wEX7WcYbrPIVl7LCq5m7CVxUBzBHqsv4SX5
BI9c3KAZNzz4C+avFRUr/L99WWvd5xSqW2ZcJ/Dw/1tGZNWGfwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMvUbxRczTLHAMNdOx+ZCa7Q3AVzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvODczMWJmMjItNDI2MC0z
MmFhLWE1ODktZGIwZGZmNGU5N2E3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwdHMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJSptuoB8UXAG4GgYPmAZGNrPkXXnCpMmG+8TN2qPQCUgeLD1BSLeoAa
kYRMeZvef5TehiBIpjFSZM/qdNP7EQkLoK0nBtHGS3sBY43IR0VrwMINT1yKO0V0
FtZU5Slk6ts5A5QayeWYqJZZm4j6TA6lBcSgkb/DT7VYcMA/WoAgkiFM0qyevZbT
9JIZtQPzt9EPKcy+w/5o763iKonBt1tz1r9Myo2BGCK/lQGDB239Qkh/l/cKSuTl
ER6ErG1fisPqqszxPE8HHup7h31mrZKnJaYlOim47AjgK7aAP0z+OckNNSerD0dM
VbcwvtpYQ038DVxfcysHRTb6ClOm/s0=
-----END CERTIFICATE-----
Generated at Fri Jun 6 19:35:26 2025 by rpki-client