Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/efbe50ce-5f9a-3f1c-b434-ec626cbfa27d.roa
File:                     efbe50ce-5f9a-3f1c-b434-ec626cbfa27d.roa (raw, json)
Hash identifier:          +taDMAIYywfneJ6+GusYYQOvrDVtf3kiJLIVxzuYMYk=
Subject key identifier:   63:0E:CA:04:1F:69:EF:14:4B:75:E2:96:F7:A7:1A:28:32:7F:71:93
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E4F1F49A83AF9E5DAE2A09080
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/efbe50ce-5f9a-3f1c-b434-ec626cbfa27d.roa
Signing time:             Sat 27 Jun 2026 09:00:12 +0000
ROA not before:           Sat 27 Jun 2026 09:00:12 +0000
ROA not after:            Fri 25 Sep 2026 09:00:12 +0000
asID:                     36618
IP address blocks:        199.7.71.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 30 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4f:1f:49:a8:3a:f9:e5:da:e2:a0:90:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 27 09:00:12 2026 GMT
            Not After : Sep 25 09:00:12 2026 GMT
        Subject: CN=541dde8b-f5b1-41b0-896d-eb0f6d5c9654
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:95:ae:3b:79:62:a5:16:51:ab:0f:72:df:be:
                    26:d2:7c:f3:66:54:6a:7b:09:5d:90:25:dc:45:c4:
                    db:f2:28:ef:4e:45:e7:07:ec:f3:fb:0f:07:67:a1:
                    3a:77:2d:4c:59:8e:da:b1:c2:87:0f:77:d3:63:7c:
                    71:36:c9:52:80:1a:65:8b:e7:f3:4f:dd:08:c4:9b:
                    c5:9e:9a:2e:f2:5c:b1:0f:64:c8:c9:db:e7:75:50:
                    12:a1:a1:f5:07:3e:97:ba:fc:54:b4:e5:de:5f:89:
                    9a:e2:df:fd:d9:e6:49:aa:f6:8a:61:8e:f0:73:2f:
                    79:bb:9e:94:68:d8:b7:0d:be:4b:b5:fd:3c:f8:71:
                    e2:8c:54:01:59:84:83:79:ac:64:5d:89:d8:7c:b4:
                    29:04:02:9a:8f:92:ba:c0:04:dc:7a:53:83:42:f5:
                    b3:c0:fd:bb:60:b2:6c:cd:5f:77:e1:88:df:94:b5:
                    67:c4:f8:b6:f7:81:f3:63:4d:0f:1a:c9:18:73:93:
                    4f:38:61:4f:83:9a:ac:8f:f3:d8:e8:4c:3a:45:a8:
                    44:d6:c8:f2:cd:60:ee:83:09:ad:81:f3:29:08:08:
                    71:0f:36:dc:c1:2b:6e:3b:50:f0:c2:10:5c:d9:49:
                    e8:d8:2f:d5:04:e8:0c:da:48:57:17:81:fb:ee:44:
                    db:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:0E:CA:04:1F:69:EF:14:4B:75:E2:96:F7:A7:1A:28:32:7F:71:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/efbe50ce-5f9a-3f1c-b434-ec626cbfa27d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.71.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:fa:2b:b7:4f:04:78:98:40:5e:da:ac:53:51:83:e4:c9:f0:
         98:41:d0:dc:c5:65:fd:f2:b6:9f:b3:ef:8e:44:18:19:f6:e8:
         04:a3:41:d0:dd:2f:ed:4c:60:11:76:65:8c:bb:b0:e0:38:92:
         0d:56:cb:1c:02:f4:86:28:bf:35:ac:1a:7c:52:39:c4:e7:43:
         71:37:2e:e0:0e:f0:85:34:f4:be:c7:8f:25:20:dc:af:65:eb:
         76:f4:35:bb:30:bb:a7:92:cd:f2:b3:df:5d:58:ac:45:f4:87:
         44:d4:18:cf:fc:07:4b:d8:ee:39:3a:70:88:92:ad:4c:3f:66:
         cc:6f:ad:96:41:d7:ef:b5:d2:14:78:ce:be:14:f5:a2:9d:34:
         77:2b:1e:88:38:15:d0:a0:72:a0:26:38:b5:3b:36:b2:23:7a:
         ee:3f:7f:51:69:b3:69:b2:3b:4e:1a:86:6f:f6:7f:27:b6:30:
         64:7f:8c:96:1c:8a:6b:14:77:45:7a:5d:5c:65:5a:8f:23:6b:
         7c:1d:e4:3b:8a:5a:a2:6a:b1:b3:f2:f1:19:e8:44:f5:29:07:
         42:6c:58:44:fc:20:34:8b:34:fc:68:c1:a5:a7:0a:c0:98:a7:
         59:d1:fc:89:99:95:1c:c4:17:d1:8a:b2:9f:ad:29:b2:d1:a0:
         50:15:a3:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 28 20:37:34 2026 by rpki-client