Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b46661b7-7fd4-3c78-9058-5c71ab9f9ad8.roa
File:                     b46661b7-7fd4-3c78-9058-5c71ab9f9ad8.roa (raw, json)
Hash identifier:          T0AZQ4XX2sPNPrk0fE50MqF2D2QKfbR4/NhH96zTmw4=
Subject key identifier:   1A:B2:52:4D:80:B6:EE:34:EE:EE:BC:C0:B5:91:C6:75:A2:21:32:76
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E4F1F506E64B9483B883A70C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b46661b7-7fd4-3c78-9058-5c71ab9f9ad8.roa
Signing time:             Sat 27 Jun 2026 09:00:12 +0000
ROA not before:           Sat 27 Jun 2026 09:00:12 +0000
ROA not after:            Fri 25 Sep 2026 09:00:12 +0000
asID:                     397212
IP address blocks:        199.7.71.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 30 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4f:1f:50:6e:64:b9:48:3b:88:3a:70:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 27 09:00:12 2026 GMT
            Not After : Sep 25 09:00:12 2026 GMT
        Subject: CN=e3eb7f84-0356-4451-ba78-e776e45ea56d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:ef:2a:21:51:60:b5:88:9f:09:36:1c:6c:fa:
                    2b:bc:71:76:48:6c:d8:56:b5:79:08:52:56:1e:18:
                    f8:31:70:b5:39:24:14:6e:c2:fd:6e:15:ef:45:65:
                    5f:6f:df:9e:5b:b3:c9:7b:02:3f:0e:ca:22:6a:7e:
                    fc:cc:72:20:fd:64:f6:bb:70:0e:04:64:33:c0:a2:
                    d7:8a:7c:34:9d:b1:0a:ca:26:71:d4:b3:ff:fd:6f:
                    82:ab:84:98:2f:92:89:e2:4a:3e:4b:4e:d2:68:20:
                    0e:bb:21:09:41:86:a6:a6:7b:1b:7f:fe:1c:c2:6d:
                    ec:ef:88:18:26:25:32:4c:42:12:49:68:83:37:ef:
                    e7:1a:e3:a1:1c:62:ea:3a:68:62:02:83:9d:89:b9:
                    30:49:27:45:15:08:23:8c:02:89:77:33:dc:a6:31:
                    29:a7:68:d1:bf:7b:a6:65:a1:50:4f:51:fa:4f:d5:
                    01:2f:ba:8a:dc:a7:d8:74:12:42:4f:94:55:f5:15:
                    77:c6:3f:ae:66:e4:bf:dd:13:16:ad:69:3c:85:b7:
                    b5:ee:9a:87:f4:f4:fc:a8:00:b2:90:19:33:2e:7d:
                    1a:e2:02:a7:84:b4:18:a0:35:dd:51:98:d4:0d:2b:
                    20:14:f6:93:a7:a1:41:fc:c8:ca:33:dd:3f:e2:54:
                    d1:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:B2:52:4D:80:B6:EE:34:EE:EE:BC:C0:B5:91:C6:75:A2:21:32:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b46661b7-7fd4-3c78-9058-5c71ab9f9ad8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.71.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:e6:64:69:02:2c:19:23:1c:c4:99:5f:6d:95:ec:43:b4:70:
         ab:d7:52:8f:37:69:b7:dd:96:b6:24:a0:5c:2c:ec:7c:4a:93:
         c7:46:08:54:32:d5:72:b5:10:ec:73:7e:82:50:62:6a:0a:2b:
         14:93:a9:a7:55:42:cd:f6:38:1b:c2:a0:13:97:2d:f4:bd:85:
         5e:74:1f:1d:89:78:d8:4f:9b:a9:88:d2:37:8f:c8:c1:0f:85:
         03:8a:bd:fa:2d:a6:63:24:f4:f5:06:43:b1:fa:91:28:e4:4c:
         53:d9:94:f8:ef:89:24:fb:a8:17:5d:71:36:69:59:2f:7a:8c:
         9f:fc:e7:ae:cc:39:ec:eb:56:ee:2a:b7:3f:da:fb:0a:94:b0:
         ef:6e:c4:6b:2d:c0:1d:21:02:56:70:09:90:42:42:9c:53:83:
         8a:21:65:0d:15:f3:de:68:c2:4a:dd:53:c2:27:31:a3:99:6e:
         5c:0d:61:e5:09:ac:ed:dc:fb:bd:b8:49:f6:0a:7e:d5:5d:25:
         fb:38:79:eb:28:39:60:f9:0a:59:3a:ca:32:82:5e:50:1c:6b:
         1e:e1:c8:a8:c7:9a:aa:6f:37:c2:1f:a2:f4:18:b9:08:af:82:
         cf:c0:a0:d9:88:59:ba:37:2d:fc:8b:de:85:7c:c2:2f:ff:7d:
         47:76:07:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 28 19:42:14 2026 by rpki-client