Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fdca01e9-81e7-3210-98f0-00a4f2706b84.roa
File:                     fdca01e9-81e7-3210-98f0-00a4f2706b84.roa (raw, json)
Hash identifier:          geLyhoumF+8cfY1UFgEg8lQ/qPuXRi/ajbyYIIfTBEo=
Subject key identifier:   DA:DC:8A:64:24:87:47:8D:AD:E4:80:0F:87:44:C5:34:4D:71:AA:E5
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B0B76BA1985E566CD15BEA680
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fdca01e9-81e7-3210-98f0-00a4f2706b84.roa
Signing time:             Mon 01 Sep 2025 01:00:33 +0000
ROA not before:           Mon 01 Sep 2025 01:00:33 +0000
ROA not after:            Sun 30 Nov 2025 02:00:33 +0000
asID:                     0
IP address blocks:        199.7.58.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Sep 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0b:76:ba:19:85:e5:66:cd:15:be:a6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep  1 01:00:33 2025 GMT
            Not After : Nov 30 02:00:33 2025 GMT
        Subject: CN=0d6efafd-c6c6-4cd7-9c61-66b31e4c4c76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:24:35:27:b9:b6:01:0f:c2:94:53:00:5d:03:
                    e5:df:7e:32:a4:f8:1d:9e:27:37:cf:1c:fb:8d:c4:
                    04:e9:56:d4:32:38:ce:2c:16:b2:5b:42:54:5b:48:
                    6b:88:e4:55:2a:55:fa:5d:dc:a8:d5:83:4f:35:40:
                    c2:64:48:a5:3d:e0:2b:dd:e4:a1:d7:67:9b:89:67:
                    c5:cc:e6:01:7f:e8:33:fd:de:6c:3b:b3:42:50:53:
                    d5:85:96:70:c6:cf:49:f8:44:b4:3d:59:f6:1f:7c:
                    c2:02:89:64:3e:6e:78:9c:a7:fd:a9:56:df:97:b7:
                    05:5f:83:22:43:8c:1f:a9:7a:75:6b:27:3d:e6:f9:
                    6a:c6:b1:d4:16:66:da:3f:23:6a:9a:34:5b:c2:d1:
                    53:1f:ce:46:19:bb:29:68:30:ee:70:d8:d3:cd:94:
                    59:ac:b3:d2:60:f1:02:4e:43:9a:8a:d9:ee:b6:06:
                    23:60:3f:af:9a:9e:3f:d8:71:6c:ce:4f:9e:7a:ff:
                    87:9e:26:53:5f:c7:30:ac:4b:da:44:95:14:d9:d4:
                    06:e6:3e:23:e7:65:e3:24:8e:2a:10:9c:fc:30:e3:
                    e2:d4:c5:ee:f8:4b:7b:e9:9d:af:8b:ef:1c:e9:1a:
                    40:bf:7f:1b:13:f8:92:52:19:93:cb:71:2e:47:e2:
                    1d:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:DC:8A:64:24:87:47:8D:AD:E4:80:0F:87:44:C5:34:4D:71:AA:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fdca01e9-81e7-3210-98f0-00a4f2706b84.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.58.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:8e:a2:5f:e3:eb:33:77:5c:72:70:e4:7b:79:a9:b8:bc:a3:
         4d:71:4d:e4:5d:c2:c4:e5:0a:63:24:92:97:bb:66:9e:2e:a6:
         b9:9e:0a:21:46:45:99:60:3a:fd:92:2f:ef:c5:26:61:a0:8e:
         9c:8c:ae:0b:a6:52:b5:85:20:31:dd:ee:86:ab:21:a6:cb:83:
         30:b7:f2:2a:eb:dc:1b:a6:6a:6b:2b:29:8c:90:e1:a3:bc:cc:
         0d:7e:47:b9:de:26:24:b3:e1:93:7d:fa:d8:cc:64:2f:72:c5:
         5f:e5:cf:ac:f4:c7:dd:d3:d3:de:be:ab:4d:10:5a:e3:a0:45:
         c3:5b:18:cd:32:5d:06:1d:bb:f9:d7:ec:3f:ac:45:b6:62:5d:
         97:99:1d:2d:c1:dd:c6:0f:c7:b0:37:08:31:ed:7b:f5:d8:47:
         28:7b:3b:ef:2a:57:b7:99:ac:38:0f:51:d1:91:3f:58:d8:5e:
         e3:53:0b:55:34:c6:55:35:5a:9a:fa:53:c2:ac:f8:fc:69:d3:
         87:3c:9f:24:77:56:4a:49:2d:dd:5f:3f:e1:69:01:59:a6:48:
         5c:88:bc:05:93:72:ab:f1:ce:6e:d6:5c:93:a7:24:1e:86:85:
         69:7b:42:fd:eb:1f:19:d8:f5:da:2a:ba:7d:fb:03:da:5b:8b:
         23:7e:8a:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 20:37:56 2025 by rpki-client