Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9864cb86-ae3e-38ba-8357-10a24e1c0c02.roa
File:                     9864cb86-ae3e-38ba-8357-10a24e1c0c02.roa (raw, json)
Hash identifier:          pCBzpGoT5oDdfGYZ/Adt9F6EE08vxoog2YhCcIllbBw=
Subject key identifier:   D1:2C:10:D5:6D:0A:E8:63:85:25:E8:85:78:B3:F5:67:DE:B8:D6:C9
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E4F1F5352622E6EBBD37B5440
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9864cb86-ae3e-38ba-8357-10a24e1c0c02.roa
Signing time:             Sat 27 Jun 2026 09:00:12 +0000
ROA not before:           Sat 27 Jun 2026 09:00:12 +0000
ROA not after:            Fri 25 Sep 2026 09:00:12 +0000
asID:                     396583
IP address blocks:        199.7.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 30 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4f:1f:53:52:62:2e:6e:bb:d3:7b:54:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 27 09:00:12 2026 GMT
            Not After : Sep 25 09:00:12 2026 GMT
        Subject: CN=edb4a1a1-86f8-4fcd-8981-00bc1a781ad9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:5a:47:52:63:86:b4:82:5b:24:d9:89:ec:9d:
                    76:50:30:3a:35:5b:c2:77:e1:3d:04:06:f3:ed:66:
                    49:1b:97:f0:07:5c:9d:8f:f4:0b:fd:3f:c0:90:a1:
                    23:37:02:72:7f:98:1a:5c:b8:e8:4a:be:ca:70:83:
                    d5:e2:e0:da:71:93:ee:a5:72:3b:0a:37:96:7d:56:
                    6f:02:54:b1:71:f8:36:2e:8a:34:04:c6:71:b9:3e:
                    c2:6a:1d:4b:48:d6:c4:d6:6f:a2:63:9b:e5:16:0f:
                    4f:9d:ad:b3:58:97:bc:85:b6:38:a5:c7:bb:eb:9e:
                    bb:29:b0:84:ea:10:22:0d:6a:b3:3b:fa:bf:0f:72:
                    67:5f:05:f6:d3:8e:d9:5e:c8:09:7f:40:0b:25:7c:
                    5f:37:49:42:34:92:67:ef:fb:94:ea:c4:1e:6c:12:
                    82:f8:16:11:d4:ec:5c:95:6d:85:4d:f5:af:3c:ea:
                    89:66:58:a6:14:97:a9:db:78:e8:4e:d7:ac:1d:e4:
                    17:26:ed:df:13:7d:d3:21:0b:90:f0:db:ac:bb:66:
                    7a:b9:89:c4:c4:ca:dc:85:05:0c:9c:3b:ae:49:58:
                    62:e7:80:c5:6e:da:ab:3f:35:3f:56:97:6e:29:b9:
                    90:74:44:14:27:db:dc:bc:cb:a1:01:46:d8:a4:60:
                    52:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:2C:10:D5:6D:0A:E8:63:85:25:E8:85:78:B3:F5:67:DE:B8:D6:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9864cb86-ae3e-38ba-8357-10a24e1c0c02.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:99:b0:25:ce:91:15:4d:94:ef:5f:a7:b8:e2:19:b4:c8:ff:
         fb:2e:f9:c6:01:22:ba:71:74:4b:ff:cd:85:af:cc:fe:18:4b:
         6a:5b:87:bd:e4:3a:dd:c0:0e:13:be:46:c8:2a:df:db:cb:9e:
         2a:d9:ba:9f:14:87:ee:c0:ff:ed:38:59:1b:68:53:4a:c6:15:
         3d:73:36:2f:a7:5a:f5:d7:13:04:d0:66:72:72:0b:3c:76:0f:
         5f:90:5b:85:d3:b7:ab:76:50:59:b9:2d:85:fe:6a:ee:8d:cc:
         ad:74:a4:d2:be:67:05:ab:d2:bd:bb:b9:59:94:52:b6:7c:f9:
         78:34:e2:80:3b:58:06:6b:a2:85:bc:7b:a1:e6:f3:73:12:a0:
         0e:a2:74:7a:4d:f8:b0:8a:c1:f3:83:38:83:ba:74:44:24:36:
         0a:81:8a:09:13:d6:d3:0f:85:fa:51:60:bb:42:53:13:99:d3:
         cf:a8:30:76:80:af:2d:13:b2:57:b2:83:f4:a7:17:a6:a1:1d:
         9d:55:66:9a:e5:61:f2:79:11:93:76:95:aa:93:89:67:4d:6e:
         41:5f:c3:bf:e3:90:24:0c:2b:35:ad:f9:96:05:cb:8d:34:cd:
         fa:04:ad:03:a2:f6:e7:8b:b9:0b:ae:00:d4:1f:84:31:8b:e5:
         15:f1:85:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 28 21:53:15 2026 by rpki-client