Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8769c54a-e3b1-34e6-b084-6bcda1804211.roa
File:                     8769c54a-e3b1-34e6-b084-6bcda1804211.roa (raw, json)
Hash identifier:          WOR/CaUdoZhqc0U1ynfTu6r6OHWmSVd++lgotQ+2/E4=
Subject key identifier:   DA:9E:63:B7:D8:FB:0A:C6:75:5A:8F:C0:2A:CA:A5:8C:A8:B2:5E:DD
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584BAD62712898F495C09A724680
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8769c54a-e3b1-34e6-b084-6bcda1804211.roa
Signing time:             Wed 29 Oct 2025 01:00:31 +0000
ROA not before:           Wed 29 Oct 2025 01:00:31 +0000
ROA not after:            Tue 27 Jan 2026 02:00:31 +0000
asID:                     396565
IP address blocks:        199.7.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:ad:62:71:28:98:f4:95:c0:9a:72:46:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 29 01:00:31 2025 GMT
            Not After : Jan 27 02:00:31 2026 GMT
        Subject: CN=e1e4756d-88b5-4a5e-a1eb-e2f571c9b362
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:a6:c6:6c:aa:48:c2:4b:2e:8f:01:20:c7:f6:
                    e1:4a:dd:5a:05:a6:de:28:a6:d9:f0:ae:be:00:21:
                    39:f2:e4:9f:1e:49:a7:df:f0:f8:79:fe:54:fd:78:
                    c4:7e:e2:40:d1:5a:ac:9a:1d:52:77:fc:9a:59:63:
                    94:f4:c3:22:b5:c6:46:e8:0a:61:f1:63:a1:6c:76:
                    9b:4d:fc:67:db:3b:ed:af:6f:5d:9f:df:84:1e:7c:
                    37:e1:54:28:a1:45:c6:f0:ea:a4:d3:9c:f1:14:2d:
                    88:cd:10:fe:22:18:2e:da:53:49:b5:54:ce:40:5b:
                    2b:0d:82:30:a9:46:0a:8e:04:2f:5f:26:12:9e:7a:
                    d3:26:22:73:ac:31:21:85:b3:bf:54:2c:21:be:e2:
                    4d:bc:69:a2:ae:47:b0:4a:55:32:0b:2c:e8:53:58:
                    60:ca:83:e0:1a:35:0f:8a:13:56:9e:aa:c1:8d:fa:
                    c8:92:e0:82:fb:c2:0e:44:88:e7:45:8b:2c:b0:24:
                    3c:70:da:8f:36:ee:45:52:6e:ad:62:a2:68:50:92:
                    49:db:d8:1c:bc:e3:34:e7:18:97:b3:23:c0:81:a1:
                    b1:0f:07:b4:63:b2:27:30:11:73:5a:3f:99:2b:67:
                    85:9e:b3:6c:13:d7:3f:5c:54:af:c7:4c:d4:30:35:
                    b7:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:9E:63:B7:D8:FB:0A:C6:75:5A:8F:C0:2A:CA:A5:8C:A8:B2:5E:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8769c54a-e3b1-34e6-b084-6bcda1804211.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:b3:c4:f6:8c:c3:14:a5:45:36:e3:87:71:af:5c:9d:b9:be:
         37:d8:45:11:cd:5e:ae:a1:75:4f:b2:5d:40:30:e6:fb:ed:7e:
         de:83:55:08:43:d0:76:8c:48:ce:51:d2:ee:e9:3a:66:28:ef:
         4c:79:9d:2c:1e:44:fb:2c:a2:55:89:f9:09:28:02:52:d8:7f:
         77:e5:a4:6f:67:2a:f2:f5:99:f2:b5:60:c3:a3:69:9a:0c:32:
         ff:80:e9:e2:1b:5e:c8:35:2a:51:40:27:46:67:2c:d6:c1:69:
         ea:5b:43:46:bc:cf:b6:eb:09:2a:47:ba:75:99:98:8f:6a:ec:
         f2:7b:6c:21:12:0d:0e:6d:8f:27:38:bc:72:69:a8:28:85:2e:
         68:5d:df:b8:3f:48:51:f8:81:58:87:95:53:ed:53:e0:f2:4c:
         4f:d8:8b:ca:ed:a0:fa:1d:11:f7:82:6c:df:54:99:ec:28:7b:
         b0:7f:6e:b1:75:5d:11:f0:be:c3:cc:fd:25:69:1b:6a:91:2f:
         bf:2e:64:c3:10:14:8a:3a:6b:b2:dc:88:10:cd:74:dd:b2:c1:
         2c:bc:21:94:d0:14:47:0a:60:62:cb:df:d2:be:1d:05:b2:31:
         40:a6:2e:ad:47:de:b9:97:50:f4:fd:30:48:79:eb:44:2d:42:
         dc:37:b1:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 07:04:50 2025 by rpki-client