Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/153bd085-3044-3ab6-9114-002f1cc63c37.roa
File:                     153bd085-3044-3ab6-9114-002f1cc63c37.roa (raw, json)
Hash identifier:          EboI5Ysr/HXOAwxkZKRIrU6OueD5GMY2FlVSePudV7Q=
Subject key identifier:   0F:5A:DE:0D:FA:90:5A:6D:EF:A9:C8:F1:CD:06:A8:E4:1A:92:F4:03
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D812860C54EB3FC66FB3D4A40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/153bd085-3044-3ab6-9114-002f1cc63c37.roa
Signing time:             Tue 14 Apr 2026 14:22:13 +0000
ROA not before:           Tue 14 Apr 2026 14:22:13 +0000
ROA not after:            Mon 13 Jul 2026 14:22:13 +0000
asID:                     36619
IP address blocks:        199.7.76.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:81:28:60:c5:4e:b3:fc:66:fb:3d:4a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 14 14:22:13 2026 GMT
            Not After : Jul 13 14:22:13 2026 GMT
        Subject: CN=6a5b3d79-9fac-4333-8e7c-58929b42d10b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:85:57:d0:95:9d:13:1b:7e:d8:50:93:bb:17:
                    26:34:07:a3:3d:9f:67:82:a7:83:12:e2:a0:35:6d:
                    d1:fe:97:7e:9a:e1:0f:dc:ea:bf:82:36:03:cd:31:
                    16:d8:b6:1c:c7:17:4c:0d:d6:b7:12:3c:51:c9:2c:
                    3a:86:9d:ea:76:11:91:ac:bf:7b:3c:8f:9e:72:bc:
                    de:d8:2f:9d:40:5c:ad:67:a7:9b:44:68:02:fb:84:
                    72:db:bc:51:db:7e:d1:e8:b5:26:d6:8f:a7:37:24:
                    81:0a:8c:72:20:54:2d:ff:1d:1f:3c:0e:50:7e:4b:
                    f9:ef:39:d5:27:65:26:80:e0:73:92:92:5a:bb:ad:
                    8a:97:1c:54:2a:50:98:62:06:97:5c:7a:b5:b6:8a:
                    cc:50:b0:a3:24:da:72:6d:e1:db:c9:24:f3:7d:c3:
                    da:3e:76:7a:71:1f:9e:71:48:63:63:db:da:86:b1:
                    28:21:70:d7:9e:ab:92:ea:cd:a1:84:90:ed:07:2e:
                    f7:09:35:24:4e:d6:6e:df:0f:aa:81:8d:a0:ae:8c:
                    72:e2:d7:c5:6c:10:a8:ac:a8:4c:d8:88:f0:3a:1f:
                    a1:fe:63:52:31:e3:e0:e0:3e:c0:f8:5a:ba:bf:1b:
                    00:c2:cd:6c:a6:1d:36:06:49:2f:b5:16:32:90:29:
                    ba:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:5A:DE:0D:FA:90:5A:6D:EF:A9:C8:F1:CD:06:A8:E4:1A:92:F4:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/153bd085-3044-3ab6-9114-002f1cc63c37.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.76.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:a9:4a:61:73:05:4c:dc:52:23:2e:1d:40:42:e5:20:9c:48:
         3f:95:88:4d:c5:e0:d2:9b:3d:f1:f7:2b:e4:01:1c:f2:c9:8a:
         71:c7:d0:71:78:4a:b5:b9:71:3d:de:57:9e:48:30:d8:03:6a:
         70:6c:8e:21:cf:6f:68:9d:82:3c:d1:74:50:70:b0:95:f6:c1:
         a1:10:e4:80:c3:31:89:a8:94:b2:f2:0d:44:8d:3d:06:0a:89:
         af:87:53:a9:ae:e9:8f:4c:41:7d:ef:61:0b:78:e0:4b:ba:e0:
         41:27:70:52:8b:9a:e0:58:a5:4c:54:87:3d:a3:83:5b:3f:a1:
         c0:5b:e2:e8:c1:f2:df:04:29:ee:9f:95:0a:7e:82:62:61:02:
         1d:dd:b8:34:2a:9d:4c:92:da:33:f7:07:ac:6d:a2:c2:c4:d9:
         4a:e3:1c:a3:30:9e:5a:17:b1:77:6f:b2:ff:6c:d8:53:9d:95:
         00:7f:e3:22:e8:fa:22:6d:67:40:c9:bb:d0:d7:c5:1d:de:d8:
         32:a8:6c:94:a9:de:00:0d:63:c7:88:c5:66:90:d3:ee:cf:37:
         2f:d3:66:a1:0b:01:3f:42:8b:80:df:10:93:49:85:c2:d1:7c:
         36:de:7a:ad:d0:8c:76:3e:c2:9c:90:60:ff:2e:4a:ed:af:bd:
         f4:d3:37:de
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE2BKGDFTrP8Zvs9SkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDQxNDE0MjIxM1oXDTI2MDcxMzE0MjIxM1owLzEtMCsGA1UEAxMk
NmE1YjNkNzktOWZhYy00MzMzLThlN2MtNTg5MjliNDJkMTBiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh4VX0JWdExt+2FCTuxcmNAejPZ9ngqeDEuKg
NW3R/pd+muEP3Oq/gjYDzTEW2LYcxxdMDda3EjxRySw6hp3qdhGRrL97PI+ecrze
2C+dQFytZ6ebRGgC+4Ry27xR237R6LUm1o+nNySBCoxyIFQt/x0fPA5Qfkv57znV
J2UmgOBzkpJau62KlxxUKlCYYgaXXHq1torMULCjJNpybeHbySTzfcPaPnZ6cR+e
cUhjY9vahrEoIXDXnquS6s2hhJDtBy73CTUkTtZu3w+qgY2groxy4tfFbBCorKhM
2IjwOh+h/mNSMePg4D7A+Fq6vxsAws1sph02BkkvtRYykCm6YQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFA9a3g36kFpt76nI8c0GqOQakvQDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMTUzYmQwODUtMzA0NC0z
YWI2LTkxMTQtMDAyZjFjYzYzYzM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxwdMHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBlqUphcwVM3FIjLh1AQuUgnEg/lYhNxeDSmz3x9yvkARzyyYpxx9Bx
eEq1uXE93leeSDDYA2pwbI4hz29onYI80XRQcLCV9sGhEOSAwzGJqJSy8g1EjT0G
Comvh1OprumPTEF972ELeOBLuuBBJ3BSi5rgWKVMVIc9o4NbP6HAW+LowfLfBCnu
n5UKfoJiYQId3bg0Kp1Mktoz9wesbaLCxNlK4xyjMJ5aF7F3b7L/bNhTnZUAf+Mi
6PoibWdAybvQ18Ud3tgyqGyUqd4ADWPHiMVmkNPuzzcv02ahCwE/QouA3xCTSYXC
0Xw23nqt0Ix2PsKckGD/Lkrtr7300zfe
-----END CERTIFICATE-----
Generated at Fri Apr 17 01:48:48 2026 by rpki-client