Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f4ee5012-a5c2-3b0c-8b46-d483967a460f.roa
File:                     f4ee5012-a5c2-3b0c-8b46-d483967a460f.roa (raw, json)
Hash identifier:          AdzIgULythKzaxxH/YxUfRhMgZSSZw4O7rnDsI//TUA=
Subject key identifier:   71:B1:BA:07:12:29:51:BC:8A:A1:37:03:57:A5:C4:73:DF:1B:E7:D8
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858490CB14C5EADA420CEECF63580
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f4ee5012-a5c2-3b0c-8b46-d483967a460f.roa
Signing time:             Sun 02 Mar 2025 02:00:40 +0000
ROA not before:           Sun 02 Mar 2025 02:00:40 +0000
ROA not after:            Sat 31 May 2025 01:00:40 +0000
asID:                     396715
IP address blocks:        199.7.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:0c:b1:4c:5e:ad:a4:20:ce:ec:f6:35:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar  2 02:00:40 2025 GMT
            Not After : May 31 01:00:40 2025 GMT
        Subject: CN=327b3741-0d15-460e-9bc0-fc83b6ab24e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:e1:b0:f4:60:cd:60:07:ed:53:df:e8:26:66:
                    01:47:fe:ea:0a:ff:8c:a1:5a:cd:8e:0c:36:66:6c:
                    0a:a4:b4:15:ca:16:53:a7:bc:a4:76:83:7d:51:14:
                    a6:4d:fa:6e:11:b3:df:2d:8b:b8:6d:c3:45:76:51:
                    70:db:bd:09:2a:00:71:d1:d0:cc:61:c9:04:73:06:
                    9f:45:f8:b2:c7:29:87:f9:ab:e6:3f:a7:79:ad:01:
                    c1:36:e6:05:f5:55:85:6c:03:e9:f9:1c:13:a7:45:
                    39:10:d3:b1:48:a9:34:fc:21:16:4d:d1:1a:58:20:
                    3f:00:98:cb:94:f3:77:d1:a7:5a:0c:2a:e7:55:43:
                    2b:b0:2c:f4:5b:8e:02:9a:7a:28:66:0b:c0:14:88:
                    a3:5c:d6:90:42:4f:0c:21:35:cf:b0:db:e8:51:05:
                    f5:b3:46:2f:97:df:20:f7:3c:43:40:4d:a7:c1:5b:
                    44:ac:60:55:6d:64:34:7e:b2:17:ad:c8:b3:fc:b0:
                    eb:ab:f8:a4:2f:7f:f8:29:18:ba:d7:1f:77:d3:0f:
                    53:c3:a3:b9:f4:06:b0:c8:80:3c:90:5f:63:f7:3f:
                    88:fa:5b:64:59:9f:f2:14:74:c4:78:86:12:40:52:
                    21:7a:d1:53:a1:32:e4:b1:45:a0:ee:98:d5:f1:e7:
                    9d:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:B1:BA:07:12:29:51:BC:8A:A1:37:03:57:A5:C4:73:DF:1B:E7:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f4ee5012-a5c2-3b0c-8b46-d483967a460f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:e5:26:07:d3:08:42:24:9d:ac:f8:2f:a4:5b:2d:e6:0d:48:
         94:3b:ae:1e:65:0e:f3:b7:f8:3c:b0:41:92:87:5a:ed:cb:df:
         40:07:99:7e:fc:4f:61:11:38:d2:36:b0:74:83:d7:aa:c4:64:
         f8:d3:80:83:e0:bb:f3:cf:07:89:92:dd:52:8b:bc:55:b9:eb:
         a6:30:ac:4a:cc:4a:c3:87:6e:37:2c:85:9d:9b:26:ad:1b:e6:
         83:d0:d5:81:62:31:75:cd:d2:f9:b9:53:5b:08:99:38:98:2a:
         4c:14:3d:7e:0e:ef:0f:dc:61:49:a2:eb:8f:bc:1a:fe:a3:d7:
         42:cc:03:cd:f5:f5:c7:29:b8:58:00:53:65:3c:69:12:5a:7a:
         9e:49:e1:2f:74:d6:8e:a1:02:6c:ae:e4:9f:f3:a8:da:06:46:
         dc:f9:1c:ba:20:5d:59:78:1d:55:5a:cc:76:51:8f:c8:f4:61:
         a2:9c:8e:9e:a7:e5:fe:07:3d:84:a0:b3:7c:9d:f9:7c:7b:e9:
         18:9d:19:e0:fa:9f:4b:2b:58:0b:f8:3a:31:0b:09:86:11:b1:
         7b:0f:21:37:c7:0b:f5:8c:19:5c:f2:68:56:81:08:84:23:0e:
         85:2b:a9:3c:70:c8:9f:7b:0d:58:22:5d:7c:8b:5e:58:7e:9b:
         54:19:5b:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:48:55 2025 by rpki-client