Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8c0c1a48-c528-30e8-800d-1f37f2f7baf8.roa
File:                     8c0c1a48-c528-30e8-800d-1f37f2f7baf8.roa (raw, json)
Hash identifier:          NmCdWpykiKBQRZpZvtNIY/M8I7nG8rJitiwnVrng43Y=
Subject key identifier:   39:5C:2B:F8:00:3C:B4:E7:79:EC:EC:C0:E1:21:9E:F1:DB:3F:48:3E
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285849EBEA7ACFEA26A6B1C59260C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8c0c1a48-c528-30e8-800d-1f37f2f7baf8.roa
Signing time:             Wed 21 May 2025 01:00:49 +0000
ROA not before:           Wed 21 May 2025 01:00:49 +0000
ROA not after:            Tue 19 Aug 2025 01:00:49 +0000
asID:                     396610
IP address blocks:        199.7.71.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:eb:ea:7a:cf:ea:26:a6:b1:c5:92:60:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 21 01:00:49 2025 GMT
            Not After : Aug 19 01:00:49 2025 GMT
        Subject: CN=28f55ff7-41da-4985-8c9e-b50cbc79e131
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:f1:c2:45:70:3a:0d:43:b8:b9:a8:44:80:fc:
                    3e:b3:d3:e4:1f:0b:f4:2f:12:10:3b:65:72:42:19:
                    f0:71:bf:98:4d:a2:e7:84:f6:79:b8:69:25:c0:a6:
                    04:4d:7d:bd:9d:9e:23:34:a7:eb:21:4e:03:51:67:
                    8b:5e:e3:4e:34:14:21:dd:ac:3a:f7:36:ed:ff:32:
                    b6:f3:94:39:4d:8c:7f:86:f3:fd:de:6c:d5:e6:7d:
                    98:70:6d:da:8b:52:a8:55:10:8d:37:4e:50:7d:8d:
                    9f:52:5b:95:5b:1b:03:1d:8d:b5:37:e2:c2:47:48:
                    26:c3:80:cd:d8:6f:b9:16:94:bb:3f:86:d3:df:e1:
                    55:b4:ae:43:01:f5:59:e3:07:26:75:1c:47:13:67:
                    a4:b4:21:0c:ff:7f:c1:0e:ba:fa:a4:56:a5:43:5e:
                    7a:56:f4:75:7e:6c:30:a4:2b:73:06:db:df:cb:05:
                    5e:9e:b8:80:40:b1:cd:1e:ca:1f:5f:5c:6b:1b:6a:
                    9c:fc:dc:6d:a5:02:f9:7a:39:a9:7c:e6:cb:78:69:
                    0a:14:53:92:76:25:bd:8a:8a:d7:54:5c:cf:d5:53:
                    4e:6b:1e:d3:31:72:3c:ee:0b:4c:0a:b6:b2:5d:95:
                    30:01:03:c0:63:9e:0a:b5:53:43:f7:e3:c8:24:ea:
                    37:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:5C:2B:F8:00:3C:B4:E7:79:EC:EC:C0:E1:21:9E:F1:DB:3F:48:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8c0c1a48-c528-30e8-800d-1f37f2f7baf8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.71.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:99:d1:14:65:02:63:e7:cc:66:02:06:c9:b0:97:1d:b3:b1:
         64:c3:6d:2f:b8:ef:f4:e6:f3:bb:5b:17:19:1a:6d:5e:85:75:
         3e:5a:47:b0:d7:8a:69:87:9a:29:f4:70:00:db:28:46:04:69:
         7a:9c:61:ac:c9:12:ed:83:53:1f:0f:68:a0:9e:dd:9f:39:f5:
         56:fa:ba:b6:9f:2e:71:f4:14:18:8b:86:10:4d:6a:d8:a7:5a:
         31:fc:0c:fe:11:6d:7a:91:89:bc:7c:58:9a:86:96:38:62:64:
         92:eb:e4:84:e2:f9:c2:f2:d9:22:2d:9d:ba:0c:d9:bf:fb:21:
         d2:5b:1d:4e:67:01:32:0e:c2:30:6b:5d:32:3b:0a:ed:d0:ef:
         3a:ac:71:ec:f7:8b:44:27:e3:91:e4:44:8a:fb:46:94:9a:b4:
         e2:4d:5a:e9:2c:57:6b:b5:89:07:0c:d7:f7:9a:d1:7b:c9:9c:
         a7:70:27:90:28:ec:cb:75:f2:81:2b:a8:70:60:24:d0:6a:74:
         e0:eb:5a:de:1e:3a:33:b7:81:62:39:24:5e:0c:81:eb:07:ad:
         1e:93:3c:31:58:e2:a6:c8:9d:14:a3:95:bf:27:82:69:6e:fd:
         bf:76:05:af:4b:0c:99:ac:5a:de:52:93:3e:6d:a4:df:02:b7:
         ba:15:45:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 04:19:44 2025 by rpki-client