Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c0ccf2b9-4423-37a9-8976-8471aa5353b0.roa
File:                     c0ccf2b9-4423-37a9-8976-8471aa5353b0.roa (raw, json)
Hash identifier:          8xM7drOkmuE6DOwR9DGbsy0cNAKWQ/+8eEBiFx9lPns=
Subject key identifier:   36:06:92:F4:BC:30:31:AC:FD:6A:7E:EA:34:79:20:89:5D:62:15:6E
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584BAD626F52089DF2797E5D4480
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c0ccf2b9-4423-37a9-8976-8471aa5353b0.roa
Signing time:             Wed 29 Oct 2025 01:00:31 +0000
ROA not before:           Wed 29 Oct 2025 01:00:31 +0000
ROA not after:            Tue 27 Jan 2026 02:00:31 +0000
asID:                     396575
IP address blocks:        199.7.71.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:ad:62:6f:52:08:9d:f2:79:7e:5d:44:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 29 01:00:31 2025 GMT
            Not After : Jan 27 02:00:31 2026 GMT
        Subject: CN=573ea0d5-9127-4788-94f6-85a5732293f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:f6:09:59:d7:5c:62:19:78:94:5a:a3:c3:4e:
                    82:a9:b1:3d:3c:1b:95:6b:4a:3f:33:e1:e1:6d:58:
                    df:fa:2f:84:9e:60:b0:4e:b9:8f:ae:46:16:f2:4a:
                    1e:b8:cc:b7:86:b4:99:e4:23:87:b6:46:40:98:08:
                    af:63:1f:7e:e5:07:f4:2a:8f:73:da:1c:52:bd:13:
                    28:82:76:b1:c1:fb:cf:42:0b:1f:5c:d1:1d:03:ee:
                    c4:58:0a:33:13:7d:a7:c9:0a:a3:5e:a3:fa:4d:aa:
                    5a:75:31:da:87:3d:71:43:f0:70:01:bf:90:fb:73:
                    99:52:43:3e:b7:b1:59:07:af:8d:40:f0:9f:fa:df:
                    7b:d5:99:5c:89:53:2e:81:e7:75:46:fe:d3:56:63:
                    22:7a:ae:00:5a:ae:fd:07:13:0b:5f:b3:4a:9d:ed:
                    4b:94:f6:94:27:93:48:8d:93:97:73:fb:4c:f4:d5:
                    3e:a6:06:29:b3:50:13:e2:a6:56:e8:75:07:da:aa:
                    37:3e:ec:19:ab:0b:41:67:e6:64:8f:30:48:bb:ff:
                    c5:05:02:93:3e:0a:3a:c6:eb:67:7c:8e:ab:2b:e7:
                    e5:c8:61:c9:84:12:14:2b:6f:a8:50:fc:b3:fb:5c:
                    77:4f:b9:ed:38:62:9e:41:73:b5:34:90:7b:f0:ac:
                    4c:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:06:92:F4:BC:30:31:AC:FD:6A:7E:EA:34:79:20:89:5D:62:15:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c0ccf2b9-4423-37a9-8976-8471aa5353b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.71.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:68:5f:80:7f:1a:a4:26:90:7a:54:2d:e3:c7:a3:d2:98:97:
         c7:14:d1:1d:9e:a7:4e:60:9e:3e:6c:4f:86:03:57:11:5e:80:
         3d:2b:ef:e2:80:57:8a:c0:88:38:9b:4a:39:fb:6f:81:7a:68:
         f6:49:cb:4b:95:6a:db:86:d7:e3:79:10:d1:02:ad:8c:e3:e3:
         55:62:ac:aa:d5:6c:44:c4:2c:6b:fa:9d:68:38:94:7d:30:94:
         da:46:7c:9d:89:32:3b:72:13:e6:06:88:5d:a0:91:5f:4b:9b:
         0b:78:7a:19:0d:2e:31:f9:bd:65:09:be:89:c8:78:63:70:c5:
         92:e0:df:19:fe:77:a6:f0:6c:bd:b1:fe:a0:cd:6f:ec:23:3c:
         80:86:d8:1e:66:5a:83:62:0a:82:d0:e5:f5:e3:d9:4b:d4:b2:
         76:87:a1:bf:52:54:43:13:f3:c8:08:b2:2f:99:81:1b:fb:a5:
         41:83:fd:61:f5:4e:89:11:75:d4:a5:e6:a0:01:95:9e:29:11:
         92:88:b1:ca:57:9d:e7:3e:8f:52:1d:2a:fd:ef:42:5a:03:48:
         91:0f:e6:12:be:f2:54:94:d4:28:35:f7:08:fd:05:57:33:45:
         06:2b:b0:23:ce:c1:d2:13:28:75:f4:f4:8d:d9:80:2a:b4:ca:
         a1:e4:1d:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 09:21:31 2025 by rpki-client