Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c973f3f1-7a54-345d-ae12-df23ea13c78e.roa
File:                     c973f3f1-7a54-345d-ae12-df23ea13c78e.roa (raw, json)
Hash identifier:          faIBmoSQ3gypb6ue9G+rsIQ7USsVg/K/jKFuy4KRp5s=
Subject key identifier:   EC:0F:AF:9B:4C:0D:B7:2B:26:96:69:71:65:54:3C:13:A6:E4:8D:DA
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285849EBEA7BC122ABBC61A5C09840
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c973f3f1-7a54-345d-ae12-df23ea13c78e.roa
Signing time:             Wed 21 May 2025 01:00:49 +0000
ROA not before:           Wed 21 May 2025 01:00:49 +0000
ROA not after:            Tue 19 Aug 2025 01:00:49 +0000
asID:                     20172
IP address blocks:        199.7.71.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:eb:ea:7b:c1:22:ab:bc:61:a5:c0:98:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 21 01:00:49 2025 GMT
            Not After : Aug 19 01:00:49 2025 GMT
        Subject: CN=4d69f573-9dbe-4c9d-b2a9-6fd901ded2de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:fa:7c:86:bd:e7:e0:b0:b7:5e:30:99:24:ea:
                    7f:cf:b8:c8:23:c2:cc:65:cf:72:ce:02:30:a2:57:
                    24:c0:20:b7:46:4d:69:e7:fc:81:4e:1d:4a:80:fd:
                    fa:23:16:38:8f:a0:3b:9c:98:61:6d:11:73:74:94:
                    f4:48:d2:53:d6:11:77:04:3e:7a:3a:13:6f:4f:ad:
                    4c:52:8d:69:b2:e9:00:d9:10:04:1c:d7:98:f1:2d:
                    41:4d:af:93:69:6e:a4:0f:e6:48:93:e7:c0:2e:65:
                    34:3e:8a:4c:2c:12:25:34:93:f7:ce:24:72:5b:bb:
                    68:30:c3:a0:5f:b2:a3:f6:b2:ac:e6:46:c6:d1:dc:
                    72:09:d9:bb:7d:c3:4d:eb:57:58:36:03:4b:8c:e9:
                    5f:4b:4e:92:68:88:21:82:c6:da:5e:f3:c3:1f:87:
                    a7:c4:a6:5d:7b:1a:64:60:1b:9f:cb:58:dd:56:8f:
                    a9:34:04:bd:cf:92:96:3c:10:a5:cd:98:15:07:42:
                    79:af:f2:e7:96:c0:bd:8a:22:6a:6b:ef:e2:9b:4d:
                    b0:d7:34:fc:09:db:21:c4:7b:56:70:68:62:ad:ea:
                    ad:ef:6f:44:e5:2b:ea:db:c9:b6:98:1d:5a:7a:6a:
                    2b:47:67:c7:00:4f:94:5f:a8:cd:c7:04:61:0c:8a:
                    3a:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:0F:AF:9B:4C:0D:B7:2B:26:96:69:71:65:54:3C:13:A6:E4:8D:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c973f3f1-7a54-345d-ae12-df23ea13c78e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.71.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:01:4e:81:43:d2:61:01:11:97:fb:45:fb:04:30:e0:f8:43:
         58:33:b6:9d:1b:32:af:87:e6:e2:19:9e:c1:23:50:cf:e3:4b:
         61:d8:5b:03:0d:cf:80:cc:fa:c7:12:ae:d8:a7:83:4b:25:1d:
         31:20:6b:00:b5:e6:37:9e:7e:f0:96:22:d6:97:24:e5:c8:04:
         00:65:79:cb:a2:04:d6:d4:5b:88:4b:6d:06:e9:da:2b:5c:20:
         75:87:06:96:90:9c:fa:f4:fc:1e:65:2a:90:9c:b2:de:e6:35:
         94:2b:14:a1:82:d8:7e:31:c8:a4:09:70:ad:a2:85:37:28:5e:
         95:fa:2f:f1:33:ac:d7:34:05:7e:e5:87:1c:09:9a:5e:2b:ec:
         0b:3c:81:56:b9:96:7e:73:cd:5b:06:4c:40:85:52:40:b6:5e:
         46:05:1c:92:15:a9:49:57:93:4a:cd:b8:3b:ab:d9:55:d0:59:
         7d:e0:9b:03:aa:4f:7f:64:08:95:f9:3f:9c:63:f8:7f:f7:47:
         1d:4f:df:cf:d2:3c:fb:9f:ac:80:c1:c9:a9:31:28:67:e7:10:
         e1:10:e6:37:09:c4:ab:49:3c:46:44:55:5d:08:e8:1c:4f:e5:
         e7:1f:e2:b6:b2:64:59:dd:f9:02:52:02:4e:93:37:27:05:d2:
         29:de:32:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 04:23:30 2025 by rpki-client