Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1f6628fa-f719-325f-b9e4-2b3394534feb.roa
File:                     1f6628fa-f719-325f-b9e4-2b3394534feb.roa (raw, json)
Hash identifier:          ETiFAUMgREqHNG3DHQCofWCm4lHruJDplhj6Co0n7x4=
Subject key identifier:   7E:52:44:5A:59:5A:68:8C:9E:BA:A0:2A:7F:40:15:05:56:C2:85:9A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D81286F9184A3D4236D76BDC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1f6628fa-f719-325f-b9e4-2b3394534feb.roa
Signing time:             Tue 14 Apr 2026 14:22:20 +0000
ROA not before:           Tue 14 Apr 2026 14:22:20 +0000
ROA not after:            Mon 13 Jul 2026 14:22:20 +0000
asID:                     396614
IP address blocks:        199.7.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:81:28:6f:91:84:a3:d4:23:6d:76:bd:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 14 14:22:20 2026 GMT
            Not After : Jul 13 14:22:20 2026 GMT
        Subject: CN=6b71539c-ef1f-494a-b719-87af4ab67440
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:3b:45:69:98:0e:57:7d:dc:a5:a0:c0:01:21:
                    dc:ac:0e:e6:20:70:a8:98:e5:06:b1:41:e6:27:0f:
                    eb:6a:92:c9:1d:5e:ed:90:3d:3f:30:97:5e:f0:2a:
                    3a:2d:f5:d2:ba:48:6d:ff:28:0d:a0:c1:86:2a:da:
                    cc:0e:83:82:a9:6a:b9:22:b5:51:7b:3c:fb:0a:69:
                    9b:3e:cc:23:f5:1c:ae:5e:37:97:65:17:f3:44:ce:
                    96:b6:ac:0d:31:55:f3:b9:47:e9:40:85:96:fa:bd:
                    c1:0a:4b:cf:40:de:80:b3:40:f8:0a:19:2c:79:9f:
                    4e:59:3e:5e:d8:e6:8b:9b:f2:b2:3a:f2:52:8c:b5:
                    13:aa:34:f8:43:04:28:d5:41:98:a9:6e:54:2e:35:
                    ea:ee:36:2e:02:97:7e:84:5d:18:e6:24:5d:fe:b0:
                    46:b1:69:30:df:72:2d:98:9c:72:ae:a4:ac:e5:c1:
                    2d:bc:21:e1:6b:4a:bf:eb:60:17:29:ff:20:3b:a1:
                    3e:43:01:1a:d3:10:3e:8e:b4:50:a7:55:5f:ba:4f:
                    20:06:3f:7d:2f:a9:b1:86:8e:4d:ab:3e:37:c3:a9:
                    7c:76:55:dc:19:7d:ee:da:cd:28:9d:42:c1:f2:c5:
                    fa:da:4c:d9:f4:3d:a6:d3:07:55:e6:da:04:f9:6f:
                    c4:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:52:44:5A:59:5A:68:8C:9E:BA:A0:2A:7F:40:15:05:56:C2:85:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1f6628fa-f719-325f-b9e4-2b3394534feb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.76.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:b1:bc:37:fd:f8:c5:93:61:fc:51:88:33:91:40:7f:15:ec:
         75:f7:a1:b5:bb:24:d8:af:22:cf:e6:f4:b4:99:56:96:0e:40:
         5a:96:e3:4c:18:15:4d:db:c1:ef:23:96:d6:a0:e6:b0:02:a4:
         c9:00:8d:10:fc:45:81:db:6d:e6:5f:5b:51:b8:21:aa:82:35:
         17:6f:1a:9e:74:3f:77:56:e4:5a:ed:b1:a5:68:58:1c:d5:ba:
         f4:bc:96:a0:4d:b2:97:42:47:77:63:9d:f5:8f:38:0d:ab:4c:
         02:92:8f:99:5c:12:f0:2b:92:17:80:a2:f8:a5:87:bc:21:2e:
         b4:d5:55:a1:21:37:f9:b9:bd:20:ce:58:52:a1:3b:c7:06:3c:
         d5:30:46:2a:63:60:82:59:6d:07:29:1d:8a:f6:7d:e3:cc:58:
         cc:65:1c:1c:cb:13:dd:2d:8c:d2:29:91:f2:bb:50:ca:0a:2d:
         53:98:6f:a3:fe:41:c8:f4:33:3c:ac:09:12:64:64:e1:98:03:
         31:17:9e:94:8a:e0:6f:a6:cf:cb:f2:a0:d9:15:ef:db:05:1a:
         1c:43:4b:65:f4:92:c2:31:2d:57:0b:69:4d:2a:83:5b:f8:22:
         e4:7d:a6:ed:90:7e:3a:f9:5c:20:65:be:8d:d2:a9:8b:a2:9d:
         a5:ef:29:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:45:44 2026 by rpki-client