Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/886fac1b-0905-3db0-8a39-117c258c4907.roa
File:                     886fac1b-0905-3db0-8a39-117c258c4907.roa (raw, json)
Hash identifier:          Axd4af1dG73dSybdc4S8gT2zkSJz6gv054Ciya5BMjA=
Subject key identifier:   0D:D7:E5:38:47:C4:D8:C8:0A:75:73:21:00:D2:39:3B:61:39:3A:75
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584BAD626670FF299F124D99A840
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/886fac1b-0905-3db0-8a39-117c258c4907.roa
Signing time:             Wed 29 Oct 2025 01:00:31 +0000
ROA not before:           Wed 29 Oct 2025 01:00:31 +0000
ROA not after:            Tue 27 Jan 2026 02:00:31 +0000
asID:                     396547
IP address blocks:        199.7.71.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:ad:62:66:70:ff:29:9f:12:4d:99:a8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 29 01:00:31 2025 GMT
            Not After : Jan 27 02:00:31 2026 GMT
        Subject: CN=2944ffbf-b9cb-4116-835d-46a1c2ef861b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:85:46:e8:6e:5a:19:e0:27:ff:bd:2c:88:2a:
                    f1:ee:ae:e3:2d:19:40:b4:f8:68:50:66:6b:8c:65:
                    88:7d:6a:47:64:81:d3:92:4b:eb:40:b2:9b:43:62:
                    fd:64:98:7f:d0:57:c3:ba:e6:ef:e0:01:6c:dd:7d:
                    c4:4a:47:f4:4d:c6:09:29:da:b6:c0:7e:76:3a:5e:
                    5c:9b:4e:29:39:d2:d9:c0:7c:0f:cb:a0:09:5d:17:
                    eb:4b:d0:98:d3:fa:fa:ae:2d:54:55:a1:a3:de:32:
                    fa:d6:5d:aa:5a:15:e6:0e:51:91:d3:8a:e7:44:bf:
                    b2:1d:68:91:1d:51:12:f5:53:b1:4a:27:ba:9e:62:
                    f0:26:9f:39:6d:f0:df:dc:4a:54:a0:44:0c:46:05:
                    c6:4d:ce:bf:a6:a0:04:5b:2a:67:f2:79:5e:d2:e5:
                    f4:87:85:be:65:5d:b0:ba:cd:53:53:8c:28:c8:fc:
                    d8:67:37:33:cd:34:a6:b3:5f:0a:c8:dc:2e:4c:67:
                    c6:6f:fb:85:14:1b:f7:bf:cd:c0:8f:08:75:e9:df:
                    de:a2:74:9f:03:1b:25:76:b9:92:e9:e6:64:f8:f4:
                    a7:7b:d7:01:de:b8:2d:ba:f8:8c:8e:0b:54:72:d2:
                    7b:a1:df:ff:40:d1:ed:1d:75:cb:8a:67:10:e7:91:
                    50:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:D7:E5:38:47:C4:D8:C8:0A:75:73:21:00:D2:39:3B:61:39:3A:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/886fac1b-0905-3db0-8a39-117c258c4907.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.71.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:80:3a:60:ec:66:28:47:7a:47:ac:70:7a:3a:c3:ee:87:79:
         ce:a7:71:ff:a8:c8:e3:06:87:72:28:5a:7a:82:5c:36:a7:5a:
         9a:af:8a:4c:f3:30:24:75:8c:79:22:5d:bd:d9:5e:ce:60:c1:
         db:46:8a:7c:c7:e8:ab:28:6f:ce:f5:4d:d2:b9:6d:15:b4:dd:
         d8:22:60:17:c4:af:42:3a:2f:7b:05:de:24:35:58:15:aa:3c:
         8d:4d:a9:1e:cb:f7:08:3b:aa:22:dd:b9:d8:d7:a1:62:e1:5f:
         04:1e:f1:61:15:be:44:e1:86:d4:f4:b4:8b:e7:32:9e:7f:61:
         f7:da:5a:87:f7:4c:65:7e:5a:0e:5d:a9:b3:73:db:5b:14:1e:
         f8:f5:e3:36:19:97:6f:07:3c:42:d2:08:89:5a:8f:68:aa:31:
         38:42:5e:33:e2:16:66:39:60:94:13:63:e5:35:9f:ed:dc:30:
         4c:5d:eb:20:7f:a2:3b:14:5f:38:ca:61:96:f4:ca:ad:ec:36:
         de:69:75:b6:a3:a8:49:1b:08:fb:4e:8e:d2:07:bc:d5:d1:05:
         71:9c:c9:2a:60:37:08:03:fd:4a:d0:3c:0b:5e:18:8e:a6:e2:
         2d:cf:00:d6:db:03:77:60:06:65:1f:91:7c:ea:bb:05:25:c7:
         7c:95:6a:2a
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEutYmZw/ymfEk2ZqEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MTAyOTAxMDAzMVoXDTI2MDEyNzAyMDAzMVowLzEtMCsGA1UEAxMk
Mjk0NGZmYmYtYjljYi00MTE2LTgzNWQtNDZhMWMyZWY4NjFiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh4VG6G5aGeAn/70siCrx7q7jLRlAtPhoUGZr
jGWIfWpHZIHTkkvrQLKbQ2L9ZJh/0FfDuubv4AFs3X3ESkf0TcYJKdq2wH52Ol5c
m04pOdLZwHwPy6AJXRfrS9CY0/r6ri1UVaGj3jL61l2qWhXmDlGR04rnRL+yHWiR
HVES9VOxSie6nmLwJp85bfDf3EpUoEQMRgXGTc6/pqAEWypn8nle0uX0h4W+ZV2w
us1TU4woyPzYZzczzTSms18KyNwuTGfGb/uFFBv3v83Ajwh16d/eonSfAxsldrmS
6eZk+PSne9cB3rgtuviMjgtUctJ7od//QNHtHXXLimcQ55FQ3QIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFA3X5ThHxNjICnVzIQDSOTthOTp1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvODg2ZmFjMWItMDkwNS0z
ZGIwLThhMzktMTE3YzI1OGM0OTA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxwdHHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCigDpg7GYoR3pHrHB6OsPuh3nOp3H/qMjjBodyKFp6glw2p1qar4pM
8zAkdYx5Il292V7OYMHbRop8x+irKG/O9U3SuW0VtN3YImAXxK9COi97Bd4kNVgV
qjyNTakey/cIO6oi3bnY16Fi4V8EHvFhFb5E4YbU9LSL5zKef2H32lqH90xlfloO
Xamzc9tbFB749eM2GZdvBzxC0giJWo9oqjE4Ql4z4hZmOWCUE2PlNZ/t3DBMXesg
f6I7FF84ymGW9Mqt7DbeaXW2o6hJGwj7To7SB7zV0QVxnMkqYDcIA/1K0DwLXhiO
puItzwDW2wN3YAZlH5F86rsFJcd8lWoq
-----END CERTIFICATE-----
Generated at Wed Oct 29 09:21:27 2025 by rpki-client