Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/974c2192-c59c-3fff-b629-b9a8fdf3b787.roa
File:                     974c2192-c59c-3fff-b629-b9a8fdf3b787.roa (raw, json)
Hash identifier:          gEUYx89E7zfCSlyjgDnJenB+WkFuePBNNOGlkfHTAcw=
Subject key identifier:   CD:5E:4E:EE:F6:CB:C2:92:7D:26:AE:CD:73:40:17:D6:CC:90:DF:31
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285849EBEA6BA7910B760251D8BB80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/974c2192-c59c-3fff-b629-b9a8fdf3b787.roa
Signing time:             Wed 21 May 2025 01:00:49 +0000
ROA not before:           Wed 21 May 2025 01:00:49 +0000
ROA not after:            Tue 19 Aug 2025 01:00:49 +0000
asID:                     396597
IP address blocks:        199.7.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:eb:ea:6b:a7:91:0b:76:02:51:d8:bb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 21 01:00:49 2025 GMT
            Not After : Aug 19 01:00:49 2025 GMT
        Subject: CN=a506f718-ee97-4e2e-ad30-fc77a90ab0f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:06:84:f6:42:92:e5:2d:02:a4:04:2f:a5:4c:
                    1f:92:59:ff:35:5b:bd:83:ca:ce:41:e1:fd:af:3d:
                    71:ff:8e:3c:04:d1:e3:4b:90:d1:42:58:fb:0d:1e:
                    c2:01:ce:90:e1:52:85:cd:09:f5:76:c6:5b:78:6f:
                    db:8e:85:30:ab:9c:a3:95:7e:1a:7c:3c:59:c8:a8:
                    bd:fa:3f:47:5f:a4:9e:a6:1e:b1:a1:a5:d5:82:32:
                    5d:31:94:51:a0:b0:c2:ee:a8:c3:5f:88:7d:77:b0:
                    55:05:a6:4c:dd:12:7c:31:7d:9e:d5:69:e6:16:aa:
                    bd:da:41:4a:a6:a2:ef:3b:a2:b1:2c:6b:6c:bb:3e:
                    4f:8b:4d:1f:38:4c:32:e1:d0:12:e3:a6:0d:d7:57:
                    a8:7f:65:d7:a1:50:c1:ae:14:87:20:53:ea:19:de:
                    2f:3f:43:15:05:a1:1f:eb:4c:36:57:ae:07:02:03:
                    36:83:40:2c:c6:9f:c2:3d:66:fc:28:32:09:60:1e:
                    75:4e:e7:17:9f:c2:68:26:2f:4d:21:50:d2:71:3c:
                    e4:a0:f6:31:62:2c:50:46:2c:b1:b4:fe:f9:be:33:
                    84:9a:96:b4:16:35:e2:16:eb:88:70:19:0a:fb:85:
                    74:c9:7f:5b:9f:d8:79:ae:cb:d2:50:a4:5b:7e:01:
                    d7:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:5E:4E:EE:F6:CB:C2:92:7D:26:AE:CD:73:40:17:D6:CC:90:DF:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/974c2192-c59c-3fff-b629-b9a8fdf3b787.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:91:33:db:56:d1:03:22:8f:f2:16:6a:db:0b:17:3b:d0:d6:
         31:0e:98:de:33:82:54:74:d5:04:5c:88:1b:9c:88:ec:6b:84:
         8c:5e:31:8f:eb:6e:d8:73:4c:69:24:e5:00:66:38:48:21:35:
         a0:8c:b6:ee:8b:99:bb:2c:0a:d7:28:a0:84:94:2f:41:11:f9:
         c2:04:f8:5f:0f:a1:e6:69:7e:06:24:74:bc:88:e5:ee:be:d6:
         23:40:a0:30:3c:9e:21:9b:46:54:46:79:52:a5:3e:fa:cc:2a:
         8e:cf:c4:ff:20:c6:55:18:42:ab:da:67:0b:5b:92:91:dc:4b:
         d7:b2:4e:01:59:06:ae:64:6b:44:54:a3:60:d2:fc:9a:8c:a2:
         74:17:58:4b:92:4b:7b:c0:fd:20:6d:a1:36:91:86:1a:9c:f2:
         12:f9:83:a6:3e:54:95:98:e1:f3:f2:2c:9e:15:ee:f4:74:cf:
         bf:50:8c:77:45:7d:83:8d:f6:6f:00:fc:d4:a9:a4:f6:21:e8:
         b5:2e:75:d7:f4:c0:fe:a9:e5:45:76:5a:df:33:10:37:01:34:
         17:c1:46:ee:75:cb:8e:be:7e:45:71:a3:03:49:8f:5a:c5:ef:
         91:32:12:8f:65:81:eb:9a:af:e6:31:ca:21:b2:b3:b1:e2:9c:
         39:64:62:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 19:38:34 2025 by rpki-client