Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fbf1563f-0334-3081-9822-989c671ad98d.roa
File:                     fbf1563f-0334-3081-9822-989c671ad98d.roa (raw, json)
Hash identifier:          8n3SPKWN4jKYdAZOHvfMt67hXEPCgU3IY3cpYB9FlnA=
Subject key identifier:   47:25:3D:D3:72:5D:FC:AB:C2:3E:63:F8:89:46:A7:4B:85:8D:04:CA
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285849EBEA697ACB2C629E9670A800
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fbf1563f-0334-3081-9822-989c671ad98d.roa
Signing time:             Wed 21 May 2025 01:00:49 +0000
ROA not before:           Wed 21 May 2025 01:00:49 +0000
ROA not after:            Tue 19 Aug 2025 01:00:49 +0000
asID:                     396562
IP address blocks:        199.7.71.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:eb:ea:69:7a:cb:2c:62:9e:96:70:a8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 21 01:00:49 2025 GMT
            Not After : Aug 19 01:00:49 2025 GMT
        Subject: CN=fdb5c3b2-227f-4589-b3e7-cb811c06825b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:41:d7:79:eb:b6:04:21:97:2d:48:44:2c:fe:
                    9f:a6:c2:14:b3:5e:98:4b:c3:72:b0:dc:c9:22:21:
                    16:d1:08:c2:ec:c9:cb:8c:27:b3:a5:db:b2:d7:0c:
                    7f:fd:7e:9d:00:9b:6d:c7:c1:c2:c6:9d:7a:2a:44:
                    ce:66:09:ea:8e:1f:36:fb:55:17:8d:18:e8:2c:6a:
                    66:ab:e0:ae:a7:3d:48:c3:02:b3:a6:2b:00:70:1a:
                    82:81:f1:41:95:0f:8a:10:fd:c9:a4:02:af:6b:42:
                    50:f2:f0:6c:8b:5b:1e:4c:a5:33:19:78:7e:26:5d:
                    17:3a:67:eb:ed:f1:f7:2f:d8:88:a4:1b:35:5a:8d:
                    10:a3:90:7e:b3:2a:15:ca:93:f8:eb:7b:b9:5b:ec:
                    a2:35:49:56:92:62:fc:92:6b:44:de:55:6b:c2:30:
                    4d:35:cb:38:d4:ec:40:c1:bb:3d:1c:09:85:91:2c:
                    2c:c8:9c:c0:1e:13:84:04:9b:5b:19:04:d1:f8:33:
                    bd:23:4a:7e:be:76:19:9f:0a:62:b2:02:8f:22:03:
                    78:9f:51:52:9e:1c:c8:df:c0:9f:20:1e:54:8f:2d:
                    b7:cb:25:9a:79:c6:04:4f:a5:13:be:d1:fd:63:c1:
                    ab:50:9d:0c:c3:b8:e4:9a:36:68:37:3f:a1:d0:14:
                    c0:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:25:3D:D3:72:5D:FC:AB:C2:3E:63:F8:89:46:A7:4B:85:8D:04:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fbf1563f-0334-3081-9822-989c671ad98d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.71.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:af:33:f5:77:db:29:27:6a:76:e5:4f:0d:c5:2c:56:e8:4a:
         24:c1:43:0f:f4:6a:38:ff:c3:55:09:99:7f:a5:f0:fd:03:e1:
         bd:b8:ec:cf:fa:65:f2:28:95:4e:bf:dc:26:31:41:44:af:0c:
         d9:59:7e:e3:31:b9:79:56:91:08:66:3a:79:df:9c:6f:d0:ef:
         e9:60:2f:4b:a4:3b:05:d4:85:cf:b8:63:90:40:76:ce:35:4e:
         90:96:5f:b8:81:08:a4:87:3b:15:ac:cb:6e:23:f4:83:30:e7:
         eb:60:07:02:02:0b:bf:6f:cf:32:62:39:b8:8a:f1:1c:94:4e:
         a3:b9:96:6d:dd:fb:5e:b1:bc:39:07:77:0c:f8:c0:66:ff:d5:
         43:7c:2b:7b:52:7e:10:3c:3d:4f:ad:88:e9:95:2e:84:d8:23:
         35:2a:c3:59:02:78:03:f7:82:aa:5d:6c:52:9b:f3:d4:3a:13:
         a8:68:a1:be:79:a0:cb:31:fc:fb:68:f3:06:be:e4:ac:de:42:
         83:e6:ea:0f:d0:1f:43:d2:3d:27:6b:26:30:8b:8e:09:c6:d6:
         b4:77:a0:d5:11:86:f3:ee:b6:c6:bc:ea:15:e8:04:22:b6:c7:
         16:d0:e2:96:c4:22:0e:3d:01:c6:f7:a6:cf:27:51:c3:30:aa:
         fc:42:ad:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 06:05:44 2025 by rpki-client