Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/db9250b4-4ec8-3dfb-8d9b-0528986bdde6.roa
File:                     db9250b4-4ec8-3dfb-8d9b-0528986bdde6.roa (raw, json)
Hash identifier:          EXaNzX7dU2LOW6fDKm86FsC3jxQGbxAazLDB2/0F77s=
Subject key identifier:   3B:34:84:53:20:0A:EF:6B:6C:0A:2F:A2:34:5A:AC:16:F1:2D:7D:C6
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584BAD626A04A033356C0A0B2A80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/db9250b4-4ec8-3dfb-8d9b-0528986bdde6.roa
Signing time:             Wed 29 Oct 2025 01:00:31 +0000
ROA not before:           Wed 29 Oct 2025 01:00:31 +0000
ROA not after:            Tue 27 Jan 2026 02:00:31 +0000
asID:                     36622
IP address blocks:        199.7.71.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:ad:62:6a:04:a0:33:35:6c:0a:0b:2a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 29 01:00:31 2025 GMT
            Not After : Jan 27 02:00:31 2026 GMT
        Subject: CN=abb78bd4-0932-4b87-bd20-37574c145f7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:e4:1e:16:a6:d4:eb:f5:51:cc:82:ae:bb:ca:
                    0b:af:92:a0:48:35:03:3d:07:82:ec:2d:c6:ae:7c:
                    fe:47:5d:a2:50:3c:45:d0:93:9a:ab:b6:53:1f:e6:
                    0e:17:86:20:d6:67:ac:66:b7:04:6b:e1:3b:74:14:
                    aa:23:fb:0f:a4:01:1f:34:a8:e5:82:f4:92:63:73:
                    50:dd:7e:38:76:a8:36:78:c3:62:f5:f7:16:45:48:
                    ea:54:f5:b6:cc:3b:b8:33:0b:85:06:82:c7:c3:0a:
                    6d:6c:96:4e:eb:0e:f7:7b:e7:74:cb:1a:08:30:f8:
                    19:7a:9c:ab:84:a1:c6:7e:d0:fa:0c:32:0d:27:f1:
                    9c:5d:da:dd:87:29:8a:51:b2:93:45:a8:f4:40:99:
                    12:06:79:97:bb:23:a6:46:aa:a4:ef:ed:a9:0e:ec:
                    3e:4f:4f:3c:f0:ab:17:eb:cf:bd:8c:8d:ca:48:a9:
                    45:a5:c6:85:2a:ea:f2:d0:c8:63:20:f4:d1:5d:ef:
                    e7:f8:6c:09:86:db:a5:7d:23:40:61:9b:77:a6:52:
                    ff:8b:4d:0d:0c:30:8f:a2:02:ca:0d:4a:12:1d:01:
                    2b:80:77:33:bb:de:b2:ce:38:eb:38:4b:bb:db:56:
                    2c:29:76:e4:ff:62:bb:47:96:20:fb:71:5d:fb:c0:
                    46:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:34:84:53:20:0A:EF:6B:6C:0A:2F:A2:34:5A:AC:16:F1:2D:7D:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/db9250b4-4ec8-3dfb-8d9b-0528986bdde6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.71.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:73:52:8b:c7:32:6d:3e:f1:c9:7f:86:ae:a9:ad:47:04:0f:
         bc:75:ae:03:8c:f3:95:29:9d:cd:01:e9:38:39:8e:c2:5e:41:
         0c:54:b9:f4:f3:47:ff:6c:3d:63:16:b5:fa:4c:74:37:2b:62:
         cd:95:f2:6b:7e:bf:48:ba:05:1f:29:91:4c:a3:86:a5:12:20:
         15:93:3c:e9:a8:8f:0b:81:89:f4:a2:8b:13:6e:a6:5c:fb:a5:
         10:72:12:b5:bd:b8:bc:d2:ea:26:30:aa:9b:27:a1:db:50:14:
         72:79:40:e8:71:74:af:e7:c9:2c:3d:c2:3d:ac:5e:5f:9b:40:
         6f:41:d7:8e:6f:ca:36:24:98:fc:81:89:99:98:bf:fb:91:69:
         28:d5:86:e6:26:3a:32:bd:b5:cd:c5:03:8e:c6:0b:31:14:ef:
         ca:df:19:7e:f2:7f:c6:3d:61:75:2a:2e:5c:9c:86:8b:88:cb:
         2f:92:af:e9:0b:d1:a5:81:95:60:9f:c6:64:a0:5a:6d:d6:ce:
         5e:d5:66:bf:14:5f:5d:44:7b:6f:bf:61:23:0b:00:e8:dc:f3:
         97:83:02:c8:69:93:43:f6:8a:7f:86:66:9f:a3:6f:f7:08:b6:
         80:71:13:80:bf:8b:bb:7b:c1:39:e6:2d:f9:ba:1e:74:02:03:
         4a:36:e6:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 09:20:47 2025 by rpki-client