Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f1cb0954-1849-3cc9-802b-245a53c17568.roa
File:                     f1cb0954-1849-3cc9-802b-245a53c17568.roa (raw, json)
Hash identifier:          9OybuGFPgIVTHJuDFgic6YHZ2x41gO1sPJor1HxZZ1M=
Subject key identifier:   D4:D7:E8:37:8D:7C:0C:A8:47:AA:53:EE:F5:86:DB:BE:0F:1C:DC:48
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285849EBEA742FAA14587353337CE0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f1cb0954-1849-3cc9-802b-245a53c17568.roa
Signing time:             Wed 21 May 2025 01:00:49 +0000
ROA not before:           Wed 21 May 2025 01:00:49 +0000
ROA not after:            Tue 19 Aug 2025 01:00:49 +0000
asID:                     36621
IP address blocks:        199.7.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:eb:ea:74:2f:aa:14:58:73:53:33:7c:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 21 01:00:49 2025 GMT
            Not After : Aug 19 01:00:49 2025 GMT
        Subject: CN=51353b5b-271e-4bdb-8278-0b1c5f2eb5a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:0b:53:6e:56:67:7d:cb:92:b0:32:95:9f:d3:
                    a2:ee:b9:38:9b:d6:b4:6c:18:8b:4e:81:a6:e5:b0:
                    47:9c:74:f0:2d:aa:12:2c:1e:ad:51:03:18:96:79:
                    6c:c2:32:e9:89:22:eb:93:36:5b:b6:a2:b1:30:18:
                    08:3d:3f:01:32:36:4a:1c:03:8a:76:d8:64:69:6c:
                    f7:5e:32:0d:79:2e:82:8e:7a:0c:7a:a4:9d:86:c2:
                    7e:ec:21:2f:15:a7:a4:2c:42:1e:0a:73:87:81:37:
                    cb:d6:28:60:e3:29:48:4a:35:6f:29:b9:ab:a3:cb:
                    f8:87:01:00:c5:6a:bc:3b:af:69:6c:9b:19:ef:b1:
                    f4:0e:40:a4:60:8e:ac:e6:66:bc:36:15:57:4b:08:
                    33:6e:c7:8c:9a:7e:0a:e0:61:9f:f8:62:24:70:30:
                    3e:e0:e7:b1:0b:8f:1c:c0:68:fb:1f:f9:63:a4:71:
                    b3:48:b4:8c:5f:d8:3f:04:4d:ce:86:8b:47:53:88:
                    08:8f:4a:1c:c3:ab:3a:38:bb:4b:39:11:07:b2:00:
                    cf:d5:cd:d0:a2:2e:c5:c7:6e:69:01:ef:ad:2f:10:
                    19:60:a1:f0:ee:ba:1a:e2:17:e5:60:ba:3c:6f:3e:
                    b3:1d:19:25:ed:52:4b:53:d4:a4:76:77:a1:46:a0:
                    2c:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:D7:E8:37:8D:7C:0C:A8:47:AA:53:EE:F5:86:DB:BE:0F:1C:DC:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f1cb0954-1849-3cc9-802b-245a53c17568.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:82:ed:b4:3c:94:a2:63:6b:a0:bd:0e:99:85:10:b7:ae:39:
         c3:5c:27:76:f4:33:4d:d1:7d:ea:53:38:31:0d:46:b5:91:08:
         2d:c3:c7:65:51:7e:c3:68:05:97:9c:3f:d0:35:31:d1:aa:56:
         ea:50:70:7a:0e:05:39:56:49:bc:ca:b1:b1:62:df:8a:78:1d:
         81:85:ce:e4:50:35:c2:40:c7:84:db:2e:19:95:b0:05:fd:6e:
         89:0e:a8:a8:8d:46:42:52:f0:52:c5:33:f3:fc:cb:33:ca:f9:
         43:2a:f8:40:02:f3:da:bc:d7:dc:61:42:e7:e2:07:0c:c2:92:
         29:66:ee:cc:ad:72:06:25:8f:00:b7:35:1b:59:7f:c2:3d:72:
         0f:b6:46:e7:97:38:2e:12:70:fb:7d:76:8a:56:4e:1e:44:77:
         ee:c4:bb:d8:b3:14:78:f8:28:1b:33:cd:2c:b5:17:e4:e9:67:
         10:17:1a:74:66:28:47:c9:18:b4:a4:19:38:4f:d6:fc:52:1b:
         4f:03:75:34:ef:c0:18:c6:e3:5c:a3:f1:4c:ce:2b:78:89:c6:
         6e:70:d4:91:b3:03:0f:01:e0:c6:9d:29:82:2a:8d:56:93:f3:
         0b:f3:21:15:2e:99:32:75:54:97:13:f7:64:f8:0a:a1:cd:3b:
         8b:07:98:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 06:07:16 2025 by rpki-client