Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1b827b62-105b-3922-9887-3acb6e4e05d5.roa
File:                     1b827b62-105b-3922-9887-3acb6e4e05d5.roa (raw, json)
Hash identifier:          EW/Hfp00u4uk/4qI3MLrlLcipHnNRny/jY5rHiVubzI=
Subject key identifier:   AF:12:0E:85:7C:1F:25:25:2A:DB:2C:66:0A:6F:62:9A:02:F4:0F:57
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D812863646A2B0A7C466A13A0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1b827b62-105b-3922-9887-3acb6e4e05d5.roa
Signing time:             Tue 14 Apr 2026 14:22:14 +0000
ROA not before:           Tue 14 Apr 2026 14:22:14 +0000
ROA not after:            Mon 13 Jul 2026 14:22:14 +0000
asID:                     396550
IP address blocks:        199.7.76.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:81:28:63:64:6a:2b:0a:7c:46:6a:13:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 14 14:22:14 2026 GMT
            Not After : Jul 13 14:22:14 2026 GMT
        Subject: CN=fa3cffa1-ce46-46d0-bd3a-f27ae9b43a77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:f3:52:fd:22:c2:d1:ea:2e:00:2d:c8:0a:f0:
                    7c:8d:f8:8c:8e:69:e9:c8:87:88:26:69:3b:5e:3a:
                    fc:39:39:1d:23:a0:4b:78:50:76:67:73:99:f7:a2:
                    89:d4:0c:8f:f3:e1:d1:36:04:cf:dd:a3:2f:f8:88:
                    61:3d:a1:a0:73:50:63:0a:1f:f0:d9:3a:94:d3:37:
                    ff:47:b6:78:dc:30:34:00:8c:89:df:b8:59:3b:42:
                    d3:61:c7:f4:05:57:d1:32:c0:d7:05:a3:44:19:d3:
                    5d:69:7f:bd:0f:62:c6:32:a1:46:c3:c0:2d:d5:f4:
                    98:e0:93:a9:80:29:83:e0:01:0f:8b:bb:14:b3:44:
                    47:e7:2b:05:36:91:d7:24:d7:e0:8c:93:79:9a:10:
                    4d:e0:56:bd:8f:25:35:80:28:d0:d5:15:a0:76:ea:
                    81:34:92:56:95:6f:0f:cc:e0:8e:59:82:ae:0b:7e:
                    b5:ae:5a:0f:eb:1c:cb:8e:1f:32:41:5c:e8:16:92:
                    63:40:89:d0:de:2d:d8:21:ee:a5:a1:89:65:3e:62:
                    4e:f6:82:e1:7c:79:39:b5:3e:6b:04:52:4a:29:56:
                    63:4f:6c:8a:f3:61:51:07:86:e6:10:0c:24:c5:f2:
                    54:b1:bd:14:c8:20:55:a3:96:9c:d3:be:07:d0:0a:
                    92:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:12:0E:85:7C:1F:25:25:2A:DB:2C:66:0A:6F:62:9A:02:F4:0F:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1b827b62-105b-3922-9887-3acb6e4e05d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.76.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:9d:46:e4:13:b3:0b:35:ae:55:0e:42:4e:fe:43:80:1d:28:
         21:53:0a:f7:05:cc:77:71:b9:4b:ac:07:84:5c:17:44:39:8b:
         ac:b0:80:7f:96:38:3d:41:92:48:1d:19:a1:df:b2:87:9f:df:
         53:12:4f:14:cc:b2:bf:cb:c4:1f:a7:70:cf:03:2c:0c:5a:12:
         f7:ed:31:71:22:7f:7c:3f:9c:83:c0:9b:c3:49:a4:42:0d:22:
         85:81:cd:7c:de:98:50:f1:30:59:36:86:7b:99:b6:8a:96:48:
         b0:89:15:a0:d3:93:f3:17:54:01:25:ba:2b:cb:c6:b3:d7:51:
         37:4c:6e:fc:ad:11:79:c5:f3:c0:d5:7c:69:14:4a:f3:a6:9d:
         b5:86:0d:bd:c6:76:b4:69:d6:f2:91:94:5d:96:24:17:3f:76:
         29:fd:b9:20:0d:52:84:10:70:d2:2e:f2:19:fc:41:78:1f:6c:
         2e:cd:07:6c:ea:d5:de:96:c3:ea:7c:3f:27:49:3f:4a:2e:98:
         ff:57:16:bf:10:f9:39:ff:fc:03:65:8a:03:21:5b:26:80:66:
         d9:c2:49:a5:66:37:2f:37:c8:e6:36:7a:97:8b:56:d9:e9:da:
         3d:12:4e:19:b9:47:22:38:be:a8:02:4d:5f:dd:73:df:00:40:
         4d:15:9b:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:11:13 2026 by rpki-client