Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b46661b7-7fd4-3c78-9058-5c71ab9f9ad8.roa
File:                     b46661b7-7fd4-3c78-9058-5c71ab9f9ad8.roa (raw, json)
Hash identifier:          LU6Msf3nrA0oVCYCD4yXYwhCv6GQREW1iaFwxDIsVFU=
Subject key identifier:   72:83:D0:62:29:09:1E:30:C8:F1:DA:BB:38:C4:A0:4E:B9:22:70:82
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584BAD6272B8A0B7041247119F40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b46661b7-7fd4-3c78-9058-5c71ab9f9ad8.roa
Signing time:             Wed 29 Oct 2025 01:00:31 +0000
ROA not before:           Wed 29 Oct 2025 01:00:31 +0000
ROA not after:            Tue 27 Jan 2026 02:00:31 +0000
asID:                     397212
IP address blocks:        199.7.71.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:ad:62:72:b8:a0:b7:04:12:47:11:9f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 29 01:00:31 2025 GMT
            Not After : Jan 27 02:00:31 2026 GMT
        Subject: CN=6c0bad9a-d4d6-466f-95ef-1068dbc8662d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:3e:85:d8:b1:57:8b:2a:b5:2c:b4:f7:7d:2e:
                    e3:2e:31:09:e8:76:c5:95:d9:66:d2:68:5e:97:29:
                    f7:65:a8:f6:bc:ad:39:2e:f6:83:45:30:9c:14:77:
                    5a:bc:fb:07:62:85:fb:dc:b6:2a:c8:39:ec:88:65:
                    13:57:f1:bb:8e:91:15:e4:05:32:25:bb:aa:1d:5d:
                    db:24:fd:a7:b4:c8:9e:dd:3f:fd:1f:2e:0e:92:58:
                    77:0b:e2:22:bb:25:d7:3c:1c:96:5b:78:36:2b:82:
                    b2:9f:b2:76:fd:eb:57:1a:b3:10:4c:65:ed:d8:c0:
                    a4:d6:a7:db:6c:64:55:d5:20:38:dc:64:44:3e:d7:
                    cf:35:fc:cf:98:ef:17:a6:ee:da:a2:32:82:c8:00:
                    fe:7d:eb:5f:79:3b:55:22:33:c2:a0:b4:ea:b6:1f:
                    1f:11:78:70:00:90:0a:85:52:19:ba:e8:8d:8e:f3:
                    16:3b:48:fc:39:90:2e:f7:26:a3:f3:42:dd:18:91:
                    b3:77:1e:2f:6c:57:9e:ed:cd:ce:ef:e2:dc:81:72:
                    2a:24:6d:b2:48:44:01:ae:97:ff:f6:95:3f:fa:c6:
                    c9:37:65:43:23:51:63:f3:aa:b2:7a:13:09:c4:83:
                    f4:8e:92:19:96:4b:59:0a:c2:6e:6f:43:43:4d:8c:
                    0c:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:83:D0:62:29:09:1E:30:C8:F1:DA:BB:38:C4:A0:4E:B9:22:70:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b46661b7-7fd4-3c78-9058-5c71ab9f9ad8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.71.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:50:cd:4b:d7:36:7c:de:11:bc:0d:83:a8:73:9d:78:cf:26:
         91:0b:9f:80:da:0c:7d:27:55:58:69:e8:5c:1e:c3:28:6f:48:
         ea:02:0c:76:06:57:6d:45:6a:55:f6:98:86:6e:bb:9d:c9:b0:
         a6:ee:b6:29:10:31:8f:36:7c:2a:5c:91:14:1b:1c:94:e6:e4:
         d1:40:dd:63:0f:df:b0:6f:e6:0e:5f:5f:95:7c:f9:09:ce:8c:
         b1:56:4e:b5:89:e7:e0:4c:96:5a:dd:7f:64:19:48:9c:ff:5c:
         d9:17:03:47:80:e9:b6:42:25:65:ed:33:84:ac:51:a3:47:19:
         ec:e8:b8:47:d0:c1:6c:15:68:7b:03:76:6f:64:65:9c:87:62:
         fe:ba:ca:15:29:38:14:5d:3f:dc:3f:f1:00:c6:a5:5b:f4:3f:
         66:af:38:4c:86:bd:9f:bd:86:6e:0c:08:5c:eb:a5:09:ac:d3:
         93:68:6c:07:65:82:bb:e7:64:cd:1b:40:76:e2:76:b2:6f:6e:
         37:fa:b0:99:fd:91:29:43:c0:15:29:bc:55:0d:0c:7f:4a:7f:
         21:3d:31:a5:a4:d6:b2:81:7c:35:7a:bf:8b:31:d0:6e:51:64:
         0c:85:b5:fa:c4:69:96:ba:bc:ea:84:17:ec:57:37:e1:c2:48:
         6d:d2:92:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 09:11:42 2025 by rpki-client