Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/acbdfff7-9cfe-353a-9089-084d28a8d366.roa
File:                     acbdfff7-9cfe-353a-9089-084d28a8d366.roa (raw, json)
Hash identifier:          2avYKQvoXSu1HjnqyQLusGmUquMT+9PNXM8evCF8hok=
Subject key identifier:   8F:4F:51:C5:89:08:65:7C:4B:C8:61:E3:B0:1B:77:A9:69:F6:D2:F4
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285849EBEA808B61436E55A6009C00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/acbdfff7-9cfe-353a-9089-084d28a8d366.roa
Signing time:             Wed 21 May 2025 01:00:49 +0000
ROA not before:           Wed 21 May 2025 01:00:49 +0000
ROA not after:            Tue 19 Aug 2025 01:00:49 +0000
asID:                     396608
IP address blocks:        199.7.71.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:eb:ea:80:8b:61:43:6e:55:a6:00:9c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 21 01:00:49 2025 GMT
            Not After : Aug 19 01:00:49 2025 GMT
        Subject: CN=ae6d7365-0e63-4087-9995-f2379f58bc28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:6c:59:5f:4c:00:11:33:86:20:21:1c:2b:fa:
                    61:2b:d1:07:d5:a3:36:29:23:85:5a:d4:b4:4c:28:
                    0c:ed:99:51:75:8c:0d:18:db:bc:3e:51:2a:d5:17:
                    7e:0f:04:4d:26:89:db:33:48:ca:34:0e:fe:29:d9:
                    59:bf:d4:7a:c7:f3:f2:04:0e:b0:00:0e:ae:92:65:
                    24:55:0c:fd:a0:33:4e:58:80:b3:cb:a1:f4:0a:76:
                    5f:4b:de:91:8b:af:7b:c2:4a:cb:c6:8c:bc:4d:8f:
                    40:5f:64:c5:de:54:5b:b9:b9:77:9e:e9:a3:97:9e:
                    d2:47:c5:ad:b1:c6:f5:19:c0:05:0e:f5:e2:b5:d8:
                    5f:74:ef:38:39:75:93:18:ef:91:ad:7b:22:77:6c:
                    41:b9:bc:10:48:ee:68:b3:ec:a3:15:16:22:3c:96:
                    35:00:fd:37:b2:fb:dd:3a:4f:76:f9:21:28:e7:9d:
                    21:2a:51:3e:79:7b:59:52:f4:a1:a7:ce:2a:87:53:
                    bb:ae:9d:34:20:f4:d5:a1:2f:b0:61:73:f7:68:72:
                    57:7c:44:aa:3b:ce:bb:c6:6d:f5:34:7b:a6:44:6e:
                    54:97:1a:d1:61:4a:fa:7a:9d:a6:64:1c:a3:db:51:
                    23:59:e4:3a:97:e7:70:2b:dd:2f:fe:bb:21:bf:42:
                    5b:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:4F:51:C5:89:08:65:7C:4B:C8:61:E3:B0:1B:77:A9:69:F6:D2:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/acbdfff7-9cfe-353a-9089-084d28a8d366.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.71.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:9b:b0:4e:22:d5:c2:5d:e9:85:e2:82:22:1b:39:d8:ee:68:
         00:33:bb:ed:fe:77:c6:5f:b1:16:4a:ca:03:1d:5d:8a:3d:e0:
         c1:70:17:e0:79:8c:c8:c9:ad:df:fc:56:bb:8c:38:0c:48:82:
         4a:d6:c3:cb:52:2a:4d:ee:27:80:37:e5:aa:b9:37:ba:d4:b5:
         3e:27:6b:8e:6e:14:91:45:ff:e0:e1:27:0f:1c:fb:49:fa:59:
         71:c6:59:98:de:16:0a:0a:03:79:2d:da:47:3f:11:42:3d:9b:
         4b:f8:34:63:41:31:65:81:0f:aa:78:e6:43:82:f7:17:6d:42:
         31:8d:5c:83:05:7f:40:44:30:25:da:1a:15:5a:61:04:7a:d1:
         40:7f:5f:2c:92:9f:50:2f:bd:c9:5a:0f:81:d5:d2:7b:e3:a6:
         04:c0:7e:80:8e:7b:dc:40:14:66:a2:47:a1:95:f4:0c:e9:bf:
         f2:6d:83:34:69:5b:5c:73:ce:d4:7b:a4:1b:dc:5f:0b:93:a2:
         c6:b7:b8:77:5e:85:91:25:56:3b:98:34:3f:2b:8b:fd:07:17:
         a7:9e:db:d5:a5:88:77:5c:2b:5d:0d:d6:27:77:ed:26:c9:a3:
         13:a4:87:e3:35:ff:2e:d5:d5:18:3f:3c:fa:79:23:10:66:71:
         02:f1:25:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 19:29:47 2025 by rpki-client