Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/afca4bf6-fd4d-3dbf-963a-682925148d0e.roa
File:                     afca4bf6-fd4d-3dbf-963a-682925148d0e.roa (raw, json)
Hash identifier:          pGIBdULANm0aXYVV+7hdDjtRu0EvJ9U5sQPEFO9dbaA=
Subject key identifier:   D6:E0:FD:65:A2:6E:FC:53:67:DA:04:83:6C:C3:F9:AD:42:C0:64:68
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285849EBEA650BA81F8D28336B7500
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/afca4bf6-fd4d-3dbf-963a-682925148d0e.roa
Signing time:             Wed 21 May 2025 01:00:49 +0000
ROA not before:           Wed 21 May 2025 01:00:49 +0000
ROA not after:            Tue 19 Aug 2025 01:00:49 +0000
asID:                     32651
IP address blocks:        199.7.71.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:eb:ea:65:0b:a8:1f:8d:28:33:6b:75:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 21 01:00:49 2025 GMT
            Not After : Aug 19 01:00:49 2025 GMT
        Subject: CN=f9fd4342-4c3d-47c1-85d7-325a002bc9ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:12:26:1b:38:6c:ef:4b:f2:1f:72:de:52:cb:
                    16:72:05:19:89:50:1b:77:72:bc:01:06:80:92:6c:
                    d9:8b:b5:3c:e4:b7:5c:1b:ad:7f:2b:e0:75:8e:0d:
                    d2:e6:9d:18:86:03:cb:ee:75:a6:0b:84:ea:47:de:
                    de:e9:52:a4:94:b9:7b:93:d5:99:b4:e8:f5:45:20:
                    05:19:9b:8a:6f:49:5f:f5:02:10:05:3b:17:ee:80:
                    82:72:c5:16:a6:d8:5d:37:c2:eb:f6:02:12:67:5f:
                    05:20:a8:80:18:57:7d:27:35:df:b3:fc:3f:da:ae:
                    d5:0d:01:49:2a:63:c0:d2:fe:ae:8d:69:25:be:e9:
                    14:c4:fc:d5:bf:a2:a7:11:cf:bd:68:b1:8c:13:50:
                    a4:0d:d4:bc:e0:72:89:9e:db:75:9c:60:b2:2b:49:
                    86:f0:b6:09:46:1a:d4:c8:90:3b:98:5a:85:6b:fb:
                    76:d4:0c:ba:2f:0c:3e:39:3c:68:a1:68:24:5f:fa:
                    cc:90:35:44:1c:c4:b7:62:07:18:05:98:10:89:4c:
                    c2:d0:7f:e9:8d:6c:91:9f:b8:73:04:49:b1:fc:de:
                    46:3b:c2:4f:61:3b:38:3b:92:50:d1:7c:fc:cf:5c:
                    71:a3:5d:09:14:d3:38:c2:bf:80:e8:8e:09:af:e5:
                    c0:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:E0:FD:65:A2:6E:FC:53:67:DA:04:83:6C:C3:F9:AD:42:C0:64:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/afca4bf6-fd4d-3dbf-963a-682925148d0e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.71.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:8e:ca:55:b8:c3:96:f9:33:6b:d8:47:a3:7f:eb:e6:ea:7b:
         7c:0f:51:60:31:07:e8:2f:c4:b0:af:21:c9:71:92:ea:4a:21:
         b9:90:13:d9:b5:40:4e:87:bf:cb:2e:43:79:4e:09:0f:32:4e:
         e0:9a:09:a1:b6:6a:4b:3b:5b:d1:11:f2:73:21:3e:39:f6:b6:
         84:68:a2:3a:57:50:78:89:7a:44:9e:80:51:62:cb:94:5a:a9:
         d9:91:b6:ff:e0:ad:21:00:71:4c:f4:78:32:9e:3f:1a:32:1d:
         51:dc:83:d7:c7:11:97:ac:84:55:45:69:e7:d1:51:7b:74:ed:
         03:f4:ba:b6:7b:67:0b:14:0e:a5:e8:db:3f:8c:1f:34:49:27:
         34:06:ce:04:5b:12:17:26:5a:7a:3b:a5:ad:9b:4b:75:80:2f:
         75:6e:3b:d5:26:db:ad:45:c7:8a:6c:a2:f2:9d:91:73:ce:06:
         20:0c:44:5e:fc:18:92:07:6d:81:38:a5:52:7f:ca:e0:2c:05:
         8e:ef:c4:f3:82:1b:03:9d:c2:b4:51:8b:aa:b4:ef:98:78:1f:
         65:d5:76:98:ad:c8:12:d1:8c:19:36:7a:bf:a6:63:ed:bc:13:
         d3:36:5a:19:08:88:6d:cb:60:6d:db:70:90:cb:69:41:73:20:
         9f:55:46:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 19:33:34 2025 by rpki-client