Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d3373558-7557-3321-8e02-d507cd86127e.roa
File:                     d3373558-7557-3321-8e02-d507cd86127e.roa (raw, json)
Hash identifier:          knAGXI2Jtti84T/HIpUC74CnfHazCFiVRFXFeysMHFo=
Subject key identifier:   F5:E0:C8:72:9C:54:CC:31:37:58:F6:15:82:51:4F:A1:02:4E:53:3D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285849EBEA792F9310E8C6B8275740
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d3373558-7557-3321-8e02-d507cd86127e.roa
Signing time:             Wed 21 May 2025 01:00:49 +0000
ROA not before:           Wed 21 May 2025 01:00:49 +0000
ROA not after:            Tue 19 Aug 2025 01:00:49 +0000
asID:                     396581
IP address blocks:        199.7.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:eb:ea:79:2f:93:10:e8:c6:b8:27:57:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 21 01:00:49 2025 GMT
            Not After : Aug 19 01:00:49 2025 GMT
        Subject: CN=64d7491f-82d7-4d0e-a8f3-110730eb30de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:33:9e:20:7f:d0:48:d5:0b:15:bb:1a:64:73:
                    2d:c2:8f:11:cf:2b:b4:c5:7e:b2:99:cc:8d:0e:8c:
                    6e:83:11:98:8f:f2:e6:e5:29:ad:eb:f0:42:85:6f:
                    37:a1:6c:4c:38:4f:5e:f0:61:ef:ad:7c:c8:69:31:
                    de:bd:ce:5a:17:e3:d4:dd:92:4a:aa:42:04:96:8a:
                    53:a2:ab:60:15:ac:ab:02:67:c6:02:8a:e7:04:e9:
                    f1:20:78:03:bd:a5:bd:5b:94:f3:26:dc:6a:4d:1c:
                    ab:13:5f:75:af:3f:53:06:8a:11:71:72:08:cf:cf:
                    30:2f:e2:b3:22:89:55:b2:1a:41:f2:bd:a4:0f:87:
                    c4:d2:46:6e:b3:74:f0:c8:8d:79:2e:d5:6e:0e:4b:
                    92:9e:a7:2d:6b:89:ec:ba:94:93:d0:4b:2d:9a:80:
                    c2:b1:da:0d:76:5b:fc:00:05:cb:29:31:d7:91:ba:
                    a1:6a:8e:8b:4e:b3:31:76:2c:09:2b:d6:de:dc:b3:
                    ef:39:02:5d:9c:a0:a2:7a:1f:d4:2e:99:7b:bd:3b:
                    7e:e8:3b:72:7a:77:61:8d:a7:d5:ea:49:fa:23:fb:
                    cd:34:62:8d:7f:0f:fb:55:49:48:e1:53:a0:92:11:
                    ed:be:be:0e:65:78:67:89:13:3c:ee:38:4d:f1:f1:
                    72:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:E0:C8:72:9C:54:CC:31:37:58:F6:15:82:51:4F:A1:02:4E:53:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d3373558-7557-3321-8e02-d507cd86127e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:69:bf:27:e7:95:18:0d:ba:27:78:5e:b6:e4:15:a2:db:b2:
         14:7a:7e:78:52:bc:13:0d:90:a7:16:01:fd:13:42:02:5a:63:
         85:cc:c1:1d:46:ed:e6:a4:44:27:4b:61:73:97:98:c8:ea:bf:
         48:75:ba:d5:82:cd:34:c0:e8:09:61:0c:a1:8d:92:1f:e0:e6:
         cc:ef:28:8a:d6:55:54:06:ed:58:b8:7d:4b:29:1d:14:8b:ce:
         1b:71:75:84:20:99:03:8b:d4:fa:a4:fd:af:ea:e3:a7:5c:bc:
         45:19:0d:66:6b:05:f3:c8:8c:a6:df:06:bc:ca:b2:cc:12:7a:
         fb:13:dd:d7:94:29:9f:9d:51:46:30:e6:69:56:dd:74:d9:10:
         81:e5:55:a4:76:87:b5:23:00:f7:63:24:f8:d4:30:80:9a:bf:
         1d:42:4e:2b:39:80:d5:6b:7b:31:ff:b8:9c:60:27:5c:74:84:
         55:18:b0:43:ed:b0:25:19:9b:63:33:bf:08:f2:73:f6:5a:01:
         ec:19:c1:34:a9:22:69:3f:43:32:e9:6c:17:15:a9:79:87:20:
         a8:7f:c6:16:1b:f9:75:3f:80:4d:13:2f:97:91:d0:6a:d6:08:
         a0:b7:d3:b5:c5:53:6b:e8:1e:28:4a:51:54:10:21:c7:c8:90:
         b3:3f:41:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 19:45:49 2025 by rpki-client