Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c973f3f1-7a54-345d-ae12-df23ea13c78e.roa
File:                     c973f3f1-7a54-345d-ae12-df23ea13c78e.roa (raw, json)
Hash identifier:          xtb12ah63sBeUGhwy8ykvLNwE5+khhTuIAxzM+AhpD0=
Subject key identifier:   D8:88:90:31:3F:4B:5C:22:F8:5F:22:31:52:3F:E1:C6:62:24:61:1E
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584BAD627C658543D11E6E604D00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c973f3f1-7a54-345d-ae12-df23ea13c78e.roa
Signing time:             Wed 29 Oct 2025 01:00:31 +0000
ROA not before:           Wed 29 Oct 2025 01:00:31 +0000
ROA not after:            Tue 27 Jan 2026 02:00:31 +0000
asID:                     20172
IP address blocks:        199.7.71.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:ad:62:7c:65:85:43:d1:1e:6e:60:4d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 29 01:00:31 2025 GMT
            Not After : Jan 27 02:00:31 2026 GMT
        Subject: CN=27dca4d8-4071-4b85-b259-8b9c01cd64d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:cd:d7:63:27:e0:60:17:f1:6a:c2:86:c5:4c:
                    80:34:e5:3d:ce:a0:d7:5d:e1:4c:c3:89:d1:58:6d:
                    f1:70:be:d5:46:bc:20:f4:6b:f7:a6:3b:9f:f1:45:
                    1f:d2:02:72:2e:20:68:c2:c2:36:75:af:40:2b:f1:
                    08:c4:1a:cd:59:92:21:8f:31:23:ca:f9:84:79:58:
                    c4:22:e9:39:19:50:80:1d:6e:e5:19:6d:10:4e:cb:
                    2b:e0:97:47:e8:ee:6f:8a:54:66:13:6d:6c:fc:94:
                    e0:a9:d0:cc:cd:65:6a:bb:21:79:a4:34:36:dc:13:
                    d6:d7:d1:0e:68:03:bf:06:54:e6:59:82:df:04:78:
                    ae:73:20:31:11:3a:3f:6d:84:8a:c8:a3:64:4e:e2:
                    89:c0:f5:93:59:6e:49:aa:1c:8e:77:97:59:e2:c8:
                    3c:1a:4c:5a:81:e3:c8:db:f1:f4:f3:24:03:39:bd:
                    6e:d7:30:c7:0f:c4:b8:e2:a1:33:89:24:e2:66:cf:
                    50:1b:e6:56:f7:6a:b2:ae:f2:83:be:af:01:fb:b9:
                    f9:f5:d0:56:a8:d1:e0:fe:0d:4a:72:e4:90:3c:db:
                    2e:76:82:fd:82:86:25:05:58:af:aa:10:59:7c:7f:
                    fd:98:45:32:6f:d8:fc:ca:69:b7:68:71:ce:ba:5b:
                    7a:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:88:90:31:3F:4B:5C:22:F8:5F:22:31:52:3F:E1:C6:62:24:61:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c973f3f1-7a54-345d-ae12-df23ea13c78e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.71.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:e9:d5:bf:f1:1f:2e:65:b4:54:77:82:1f:4a:71:10:07:cc:
         e1:4e:04:67:7a:68:c6:2c:37:26:29:45:c6:cb:30:e1:4e:08:
         71:e7:86:9c:a0:58:0f:a3:22:15:4d:0b:92:bd:a9:81:78:73:
         41:c8:aa:9b:53:a6:cd:e2:88:02:78:11:e2:3d:73:e1:bd:3f:
         c6:25:0b:02:7d:97:4b:61:4a:49:b7:28:c3:a7:90:13:a1:ce:
         44:0b:96:71:38:d2:f7:3a:c0:9d:6b:2e:26:b3:f1:77:81:1d:
         aa:86:1c:78:5a:ff:fe:2d:6a:80:70:79:c2:11:12:95:eb:46:
         ae:90:cc:98:d3:0a:8f:9c:4f:51:20:10:58:ce:63:ab:db:d1:
         07:9b:d5:93:15:31:bd:e5:2c:08:ad:77:85:14:e7:cc:0e:35:
         da:e8:c5:6e:fd:6a:4c:50:a3:94:1e:44:27:a1:e2:0b:20:ca:
         69:e7:95:73:1e:b1:11:aa:1b:11:1c:0c:e3:5e:2c:95:44:8a:
         e3:8d:2d:83:17:27:97:34:c1:1c:ca:7e:7f:11:bc:70:4b:43:
         6e:97:ec:eb:57:b1:5c:05:f6:a1:59:d0:7e:65:43:77:1e:0c:
         df:4d:d7:09:7d:73:fd:8d:ed:5b:6d:03:a7:42:c7:13:b2:cb:
         ad:15:3a:ad
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEutYnxlhUPRHm5gTQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MTAyOTAxMDAzMVoXDTI2MDEyNzAyMDAzMVowLzEtMCsGA1UEAxMk
MjdkY2E0ZDgtNDA3MS00Yjg1LWIyNTktOGI5YzAxY2Q2NGQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApM3XYyfgYBfxasKGxUyANOU9zqDXXeFMw4nR
WG3xcL7VRrwg9Gv3pjuf8UUf0gJyLiBowsI2da9AK/EIxBrNWZIhjzEjyvmEeVjE
Iuk5GVCAHW7lGW0QTssr4JdH6O5vilRmE21s/JTgqdDMzWVquyF5pDQ23BPW19EO
aAO/BlTmWYLfBHiucyAxETo/bYSKyKNkTuKJwPWTWW5JqhyOd5dZ4sg8GkxagePI
2/H08yQDOb1u1zDHD8S44qEziSTiZs9QG+ZW92qyrvKDvq8B+7n59dBWqNHg/g1K
cuSQPNsudoL9goYlBVivqhBZfH/9mEUyb9j8ymm3aHHOult60QIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFNiIkDE/S1wi+F8iMVI/4cZiJGEeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYzk3M2YzZjEtN2E1NC0z
NDVkLWFlMTItZGYyM2VhMTNjNzhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxwdHHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQB36dW/8R8uZbRUd4IfSnEQB8zhTgRnemjGLDcmKUXGyzDhTghx54ac
oFgPoyIVTQuSvamBeHNByKqbU6bN4ogCeBHiPXPhvT/GJQsCfZdLYUpJtyjDp5AT
oc5EC5ZxONL3OsCday4ms/F3gR2qhhx4Wv/+LWqAcHnCERKV60aukMyY0wqPnE9R
IBBYzmOr29EHm9WTFTG95SwIrXeFFOfMDjXa6MVu/WpMUKOUHkQnoeILIMpp55Vz
HrERqhsRHAzjXiyVRIrjjS2DFyeXNMEcyn5/EbxwS0Nul+zrV7FcBfahWdB+ZUN3
HgzfTdcJfXP9je1bbQOnQscTssutFTqt
-----END CERTIFICATE-----
Generated at Wed Oct 29 09:00:30 2025 by rpki-client