Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f23dee3f-5652-31a4-8003-36198655d5c7.roa
File:                     f23dee3f-5652-31a4-8003-36198655d5c7.roa (raw, json)
Hash identifier:          AR7hmrQ1pvLZ8WVeA714B7m0uuAeXj3R1jB98cWJwCQ=
Subject key identifier:   54:74:08:F6:74:44:70:15:61:9A:68:9B:8B:80:C5:5A:8C:4E:04:29
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E4F1F4A27112A84D7367915D0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f23dee3f-5652-31a4-8003-36198655d5c7.roa
Signing time:             Sat 27 Jun 2026 09:00:12 +0000
ROA not before:           Sat 27 Jun 2026 09:00:12 +0000
ROA not after:            Fri 25 Sep 2026 09:00:12 +0000
asID:                     36628
IP address blocks:        199.7.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 30 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4f:1f:4a:27:11:2a:84:d7:36:79:15:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 27 09:00:12 2026 GMT
            Not After : Sep 25 09:00:12 2026 GMT
        Subject: CN=25630e8c-2310-43c3-8b9b-2b4f3c049df1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:59:92:3b:01:9f:85:13:2c:f7:3b:af:e9:a3:
                    82:90:8a:2b:e2:2a:18:7c:9f:a4:f6:d8:3d:59:8e:
                    bb:ec:10:a5:db:63:de:74:90:eb:75:97:2f:91:55:
                    61:4b:2b:d0:dd:4a:c8:b5:26:d1:2e:e5:c6:ba:5e:
                    f5:47:ef:b2:c3:45:6c:c9:d7:23:8c:f0:08:bd:1a:
                    84:ab:14:d9:1b:4a:dd:f0:b9:4e:a2:2e:98:97:5e:
                    25:61:98:73:86:47:28:4d:f5:c2:75:0e:67:47:07:
                    68:5d:50:04:fd:c2:19:61:7a:96:bd:b9:6f:01:b0:
                    60:77:fe:45:54:ee:60:54:33:11:ba:f8:3e:e7:ff:
                    50:1a:e9:e6:ef:6a:6b:cc:c7:8f:3c:2a:53:12:4c:
                    36:a7:7b:f2:7a:17:cb:8e:ed:37:27:23:b6:9b:b7:
                    49:ae:86:89:02:14:aa:e8:a9:fb:75:f3:33:5b:11:
                    32:eb:b7:08:80:16:6c:e3:4d:e7:6e:a8:e2:9e:c3:
                    be:ff:6a:31:6a:6a:a7:db:0a:3c:38:4e:ef:32:d3:
                    15:61:6d:fc:31:90:0f:8c:de:a0:f5:11:fd:ff:c2:
                    54:30:49:4f:2a:8e:d1:19:3d:db:16:26:4d:c6:5e:
                    f1:31:d9:c6:e7:44:d6:fb:c9:32:2a:81:7e:8d:45:
                    06:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:74:08:F6:74:44:70:15:61:9A:68:9B:8B:80:C5:5A:8C:4E:04:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f23dee3f-5652-31a4-8003-36198655d5c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:ed:3d:26:c5:7d:36:44:fc:b2:d0:cb:5a:4a:5b:9f:52:cc:
         f2:82:6f:45:9f:45:d6:c2:42:13:3e:6e:02:70:57:d6:f8:d1:
         b4:83:c6:21:97:e3:70:44:10:b0:62:97:b7:bb:d4:de:18:dc:
         b9:54:ea:34:cb:f5:1f:cd:4f:c4:26:0f:93:50:57:63:21:72:
         44:6c:7d:e6:fc:d4:19:ba:a9:6b:de:eb:11:47:99:8d:a3:bd:
         ca:ce:15:b0:b3:9e:22:2b:9a:42:29:4b:3d:96:a9:cb:00:57:
         78:b0:6b:85:7e:d5:10:0a:d2:9c:ea:4f:93:76:5d:97:6e:37:
         ff:20:c4:63:ce:c1:a0:a9:80:81:91:43:a4:36:57:57:2a:b6:
         1c:74:40:55:27:31:9c:7f:78:30:9e:8c:23:2c:2b:a1:73:94:
         fc:d1:6e:70:5b:e1:e7:54:44:ce:83:75:69:5b:ab:f0:9d:8d:
         e5:61:55:33:7d:8d:4a:04:31:1e:fb:52:ff:ab:78:01:ee:82:
         c6:5c:85:d5:fb:18:1f:c4:88:fc:b5:0c:be:c0:ae:a1:90:57:
         0e:5b:d9:de:4c:7e:d3:76:3c:ad:03:fd:8a:7e:40:17:49:0c:
         8d:0e:1c:cd:44:9d:43:22:04:ad:69:de:c6:ed:74:04:2b:a4:
         77:06:9c:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 28 23:07:13 2026 by rpki-client