Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e3ccfca7-9e0c-31bf-9c11-7e8acf95f556.roa
File:                     e3ccfca7-9e0c-31bf-9c11-7e8acf95f556.roa (raw, json)
Hash identifier:          1YSkAEQCviJXzJQjcB6jdEbFqd5ItvcTiyZMS0CLXIY=
Subject key identifier:   E1:8C:35:4B:FB:7B:AF:00:B7:DB:7F:98:37:5F:B2:E4:EA:A0:2A:6A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B0B76BA2D8B640825970B4380
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e3ccfca7-9e0c-31bf-9c11-7e8acf95f556.roa
Signing time:             Mon 01 Sep 2025 01:00:33 +0000
ROA not before:           Mon 01 Sep 2025 01:00:33 +0000
ROA not after:            Sun 30 Nov 2025 02:00:33 +0000
asID:                     0
IP address blocks:        199.7.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Sep 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0b:76:ba:2d:8b:64:08:25:97:0b:43:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep  1 01:00:33 2025 GMT
            Not After : Nov 30 02:00:33 2025 GMT
        Subject: CN=55bb77f9-859d-4c5c-9fa4-9db555e8cbfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:ef:d9:e1:31:64:d0:a9:36:72:1a:29:45:a8:
                    50:27:2e:c1:c0:78:31:e4:6b:e2:a3:6a:81:6e:5d:
                    36:90:7a:df:53:1e:27:bf:13:eb:2c:1f:91:be:d4:
                    3f:52:3b:46:05:27:e4:95:85:0f:df:4f:fd:f5:50:
                    f8:2d:44:d7:2e:01:f8:86:f4:6b:f9:c7:a5:62:ad:
                    97:ac:8f:13:bc:c8:0e:1d:6f:f4:5e:af:15:ec:ad:
                    17:0e:9e:bb:41:09:c4:74:8e:91:c6:7e:83:b5:63:
                    d6:b4:9f:ac:e0:d1:cd:d6:52:69:d7:7b:dd:97:fc:
                    1c:d0:c8:a1:a2:b8:29:c6:61:6f:61:e1:a1:2f:65:
                    95:0d:06:e5:a0:39:57:4f:ed:bf:82:79:77:f1:f7:
                    d7:11:e4:7c:b3:8f:2c:61:0b:3a:90:70:6a:3a:12:
                    0d:b7:34:b1:ff:5f:d5:72:43:3a:dd:53:71:2c:c3:
                    a9:6e:b5:d1:02:da:ab:37:8b:0f:6e:72:00:71:9b:
                    e9:f1:5f:1c:4c:4d:7c:d2:70:a6:d7:d3:fd:21:0a:
                    a1:e8:b4:66:c3:d2:f9:7e:a6:df:9c:29:4e:e7:06:
                    5b:59:c3:a4:8a:2e:b8:93:21:6f:56:fa:06:79:b8:
                    b6:f1:c2:f3:c0:bc:64:25:cd:74:4d:18:40:bd:dc:
                    11:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:8C:35:4B:FB:7B:AF:00:B7:DB:7F:98:37:5F:B2:E4:EA:A0:2A:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e3ccfca7-9e0c-31bf-9c11-7e8acf95f556.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.62.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:2b:e5:25:99:6b:3f:fb:20:1e:95:ab:78:26:43:0b:d8:a0:
         04:60:a8:d0:15:41:3f:9c:b4:39:7a:2b:f0:54:6f:56:8e:c5:
         1e:65:6f:77:90:03:a8:ab:82:b5:c1:6e:87:87:59:b5:5c:23:
         53:25:d4:03:98:e6:38:48:c4:30:98:c1:3d:48:9c:87:fc:f1:
         72:3b:39:e8:03:63:ba:a4:28:44:45:2d:11:81:5f:7f:68:71:
         eb:d0:4f:b1:d8:9f:06:79:37:ea:bc:89:30:0b:b4:6d:e7:f3:
         6f:eb:fa:d5:8a:0e:90:47:c7:02:00:38:05:e0:33:99:e4:01:
         7c:f7:55:2f:8a:31:71:61:6b:8d:4f:3e:46:46:35:4e:7e:67:
         dc:92:4c:54:40:42:66:c1:aa:1d:08:c5:c1:6a:1b:e4:ef:33:
         e0:0f:9a:48:03:72:b4:23:65:c2:b9:39:61:89:9f:ee:88:e9:
         af:69:b8:b0:7c:42:40:07:c3:3c:45:67:58:bf:a7:11:6c:1a:
         58:49:24:87:d2:ec:e8:a9:24:ec:52:86:27:c8:99:51:99:9f:
         2f:d9:40:f8:18:aa:57:f0:1f:cb:cc:02:eb:b4:20:8a:32:a2:
         ea:92:a7:9d:9c:c7:55:41:b0:31:9a:f4:64:8a:64:c9:8c:40:
         18:03:6c:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 17:49:54 2025 by rpki-client