Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f09b24b1-190e-3973-9d51-a153b6bf3ca6.roa
File:                     f09b24b1-190e-3973-9d51-a153b6bf3ca6.roa (raw, json)
Hash identifier:          inLUbpuBn8gQVZqsVKkBxGgTujQegqnnONutf6DK++o=
Subject key identifier:   6F:24:90:88:77:3D:AA:50:E1:EA:20:27:D7:A4:78:10:78:F8:38:88
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584BAD627AB7981F2D781575D588
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f09b24b1-190e-3973-9d51-a153b6bf3ca6.roa
Signing time:             Wed 29 Oct 2025 01:00:31 +0000
ROA not before:           Wed 29 Oct 2025 01:00:31 +0000
ROA not after:            Tue 27 Jan 2026 02:00:31 +0000
asID:                     10515
IP address blocks:        199.7.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:ad:62:7a:b7:98:1f:2d:78:15:75:d5:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 29 01:00:31 2025 GMT
            Not After : Jan 27 02:00:31 2026 GMT
        Subject: CN=601b04a3-926d-48b4-9e73-2eda3a55065b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b5:c5:c3:36:b1:0b:50:00:c3:0a:17:0e:a7:
                    dc:92:65:22:82:11:9c:d7:da:d5:aa:42:db:f9:75:
                    ee:4f:3e:57:c8:c7:de:1e:e9:d3:be:ca:8a:86:1a:
                    d5:5d:fe:ea:1c:47:3e:1c:21:f2:2b:ba:f5:d5:7f:
                    fe:b1:1a:03:af:7e:7b:48:e6:80:3e:7f:73:ff:d9:
                    24:81:87:75:fd:ed:78:03:29:13:c7:14:83:1d:dd:
                    5c:54:2e:d1:dd:0b:ef:2b:e8:26:7b:06:af:69:21:
                    49:f5:5f:ba:23:fd:a9:bf:bf:86:76:b7:e8:42:9b:
                    a3:2a:f6:c0:d8:f1:ee:38:e3:a6:bc:00:ca:d8:78:
                    80:11:c9:2b:b0:8c:f2:b2:33:2b:9f:fb:23:fd:68:
                    6f:00:4c:42:bf:d1:50:64:14:72:a4:f6:c4:17:f7:
                    e1:cd:25:97:d6:c2:7d:a1:e5:59:3d:fe:6e:63:01:
                    86:d8:0e:f6:47:ab:55:c7:b5:a2:59:2f:1a:bf:5b:
                    7c:e8:df:48:d6:f4:21:0c:23:ee:af:7b:fd:27:56:
                    62:9c:bb:1f:78:5a:60:dd:a5:61:e6:e4:85:27:fb:
                    6e:9a:77:e8:64:0a:f4:9b:56:9f:1f:29:71:5a:31:
                    44:77:f8:41:3a:89:4d:d6:37:5e:a7:fa:28:a3:df:
                    57:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:24:90:88:77:3D:AA:50:E1:EA:20:27:D7:A4:78:10:78:F8:38:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f09b24b1-190e-3973-9d51-a153b6bf3ca6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:2d:cb:a6:8d:49:d8:79:7a:fc:69:ee:67:40:c4:1a:ad:d9:
         c6:2a:79:a2:83:74:e3:1c:d9:08:99:c1:63:db:3b:03:e2:3b:
         6d:f6:e3:3f:2c:66:40:de:8b:55:45:42:21:b9:21:7d:17:93:
         c3:70:1f:e9:ef:48:ed:b7:e4:f2:a2:28:94:c3:6d:25:19:85:
         74:6e:76:eb:89:17:6b:01:31:ff:f9:ac:c3:c1:04:00:1d:1c:
         b9:27:c6:7b:b0:93:e7:dc:0a:c9:e1:4b:c6:81:4f:aa:cc:2d:
         86:1a:e1:3f:b3:da:54:ce:c4:0e:ee:ed:40:a7:86:15:c3:f9:
         55:b5:a6:4c:f7:8f:06:75:28:01:86:dd:ed:9d:d8:99:76:f0:
         5a:a3:e8:b3:4b:0d:e4:fb:c2:00:f8:41:91:5b:3d:db:af:23:
         3c:26:a2:e9:11:3d:c4:49:68:78:30:75:6b:57:a3:55:4b:82:
         27:58:d2:6d:31:64:55:37:c9:60:52:a0:39:7a:96:09:89:8c:
         cc:d3:cb:84:e3:25:fe:1a:ca:fd:6c:0f:b7:54:3e:c1:02:dc:
         43:39:18:93:b0:d4:00:b2:0f:92:49:63:d4:67:4f:13:93:98:
         72:d8:46:35:30:17:df:71:66:3d:2d:cb:14:45:e5:97:d4:5f:
         a7:11:0c:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 07:03:05 2025 by rpki-client