Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/11751b7f-d42a-3a86-9736-7cdbfd001a85.roa
File:                     11751b7f-d42a-3a86-9736-7cdbfd001a85.roa (raw, json)
Hash identifier:          AUfp6Ig6TGE1IG2E24m5HtLfQAQQWdOz8NXl1bJjkqQ=
Subject key identifier:   75:F1:79:F1:19:96:62:EF:59:20:AF:9E:0A:16:4A:41:06:9C:6D:A6
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D8128592B2B4E2AFB21A92D00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/11751b7f-d42a-3a86-9736-7cdbfd001a85.roa
Signing time:             Tue 14 Apr 2026 14:22:09 +0000
ROA not before:           Tue 14 Apr 2026 14:22:09 +0000
ROA not after:            Mon 13 Jul 2026 14:22:09 +0000
asID:                     21313
IP address blocks:        199.7.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:81:28:59:2b:2b:4e:2a:fb:21:a9:2d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 14 14:22:09 2026 GMT
            Not After : Jul 13 14:22:09 2026 GMT
        Subject: CN=4beaa237-3dda-40f5-98ff-e60e2bf10068
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:82:90:e2:05:1f:79:98:2d:3e:02:2b:8c:45:
                    72:c3:91:a4:84:b0:60:9c:29:1e:bf:58:f6:8c:24:
                    ab:9d:cd:95:60:36:fb:99:2b:27:00:3b:a8:e3:fe:
                    55:b0:fb:ed:a8:36:08:75:69:66:78:97:b6:ac:e0:
                    90:81:22:0e:35:d3:65:17:f6:1e:8c:12:63:46:31:
                    c1:fd:a4:51:86:63:3d:6d:0e:89:ff:2c:d7:35:95:
                    dc:87:b0:81:31:08:be:1a:d7:07:14:78:42:fc:74:
                    b6:c9:58:9f:ea:72:e9:53:4c:f8:53:d3:b5:86:f5:
                    de:c2:75:44:e2:84:24:d2:a9:31:6d:a9:9e:04:e8:
                    b8:9e:1b:bf:58:b1:0e:30:e2:44:b9:76:fc:14:2a:
                    70:87:86:c5:b1:e9:fd:e0:e9:6b:4d:86:9f:9c:f2:
                    b4:da:cc:db:10:1b:14:d4:40:7e:b0:72:d1:1d:47:
                    ab:57:e0:aa:f4:6f:94:3d:f2:60:d6:53:f4:3b:4c:
                    1b:17:ef:e7:33:f2:71:39:d1:66:5c:34:ef:d8:4d:
                    33:37:9e:85:eb:4a:88:34:68:1d:dd:fc:d9:55:88:
                    1d:e2:e0:ff:e8:e6:75:75:71:9c:70:32:2c:13:1f:
                    e8:ad:05:eb:a8:af:94:a2:a8:29:33:30:ad:6e:25:
                    9c:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:F1:79:F1:19:96:62:EF:59:20:AF:9E:0A:16:4A:41:06:9C:6D:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/11751b7f-d42a-3a86-9736-7cdbfd001a85.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.76.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:a7:7d:2c:c2:97:e9:a8:b8:92:bc:71:f8:7d:6b:a6:c3:88:
         90:50:b9:7b:ae:59:4b:13:66:73:cd:26:2d:0e:e2:db:7b:39:
         cf:2b:9d:f6:77:d4:28:8b:ba:ef:83:42:84:4d:fa:03:dd:9b:
         50:7c:28:6b:b2:bb:b0:ac:7a:ec:48:85:9f:3d:2b:11:69:59:
         c6:f6:1a:27:e2:7d:60:e8:9a:79:6a:c6:13:e3:38:21:c8:9a:
         6e:36:4c:fc:e3:dc:58:1b:12:9c:a8:33:33:b1:47:f2:e6:62:
         9b:a8:b8:f7:de:01:d8:fc:26:2b:14:bf:b8:b1:1f:8f:d7:d9:
         3f:ab:20:c1:36:48:7c:ba:02:f1:82:5f:2c:08:09:0d:fe:1f:
         e7:fd:08:ac:e4:f9:55:44:18:82:6c:e1:26:03:bb:98:57:fe:
         8d:7d:41:59:9c:05:5e:7e:ea:ad:72:02:60:e8:de:01:f7:28:
         31:8a:78:6a:bc:a0:60:64:4f:2f:b8:63:a0:1e:c4:c4:cc:c0:
         93:b4:67:65:ed:3b:38:e4:44:e8:19:10:d3:a8:09:fa:e8:72:
         ed:20:16:45:f1:32:fd:d8:99:b4:70:14:7e:ed:0e:80:b9:b2:
         ec:09:8c:a7:a1:b9:3a:00:c0:52:c4:08:24:3b:e7:ec:7c:44:
         ea:3f:f1:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:41:41 2026 by rpki-client