Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/25454904-929f-34d1-8726-90e1216268b5.roa
File:                     25454904-929f-34d1-8726-90e1216268b5.roa (raw, json)
Hash identifier:          tUjSWMJZq+HRrIB7RL6WaTC02ehKP6P6u0+gWntmAAU=
Subject key identifier:   8A:0B:A7:DA:C6:36:EF:6B:64:D9:0A:14:4F:63:5D:68:16:F3:5D:8A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F03A8453F5222A27E58CD5900
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/25454904-929f-34d1-8726-90e1216268b5.roa
Signing time:             Mon 31 Aug 2026 01:00:12 +0000
ROA not before:           Mon 31 Aug 2026 01:00:12 +0000
ROA not after:            Sun 29 Nov 2026 02:00:12 +0000
asID:                     36623
IP address blocks:        199.7.76.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:03:a8:45:3f:52:22:a2:7e:58:cd:59:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 31 01:00:12 2026 GMT
            Not After : Nov 29 02:00:12 2026 GMT
        Subject: CN=00a1bd86-a198-4bdf-8162-e3ba183b2e1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:20:e4:3d:47:d1:8c:ff:d1:31:e4:32:29:43:
                    ee:b5:c5:43:24:66:14:da:99:ad:72:13:c6:40:77:
                    d7:c5:30:f6:a6:57:39:a2:a9:30:40:8b:02:39:76:
                    92:a8:53:ec:c4:ad:47:39:0e:39:63:ac:84:c5:70:
                    02:39:b6:5b:3b:16:d7:a3:db:bd:63:db:5c:e8:31:
                    8d:f0:e6:0c:0a:ad:c2:c1:88:d9:ec:6b:6a:e9:46:
                    8d:2d:5f:f4:b3:cf:b5:08:07:db:b1:59:1f:04:3a:
                    2e:34:26:61:90:7e:3a:ee:58:f8:b9:a3:17:fd:1e:
                    f1:3e:5d:bc:65:4a:3a:94:8f:c6:51:f3:fa:59:73:
                    25:62:de:0c:c1:e9:f3:98:8e:56:9a:60:34:7f:41:
                    b5:ea:3c:5a:33:25:bc:78:81:54:75:bc:7a:ae:72:
                    a8:a4:90:ef:1e:a5:ea:19:06:40:11:80:04:48:95:
                    fb:c4:1a:7b:ca:a9:ab:4f:5c:26:20:d7:38:95:da:
                    f0:ce:fe:b1:2c:ad:89:e4:ff:d8:04:60:20:f7:4b:
                    d3:45:dd:c1:e6:83:0e:78:08:2e:14:64:52:37:46:
                    25:1f:2b:32:e8:8d:9e:2a:4e:a4:18:9a:22:d8:7b:
                    38:d2:a0:05:91:ec:b6:cf:85:9b:6c:a1:28:09:28:
                    f4:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:0B:A7:DA:C6:36:EF:6B:64:D9:0A:14:4F:63:5D:68:16:F3:5D:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/25454904-929f-34d1-8726-90e1216268b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.76.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:48:0c:6f:8d:0c:80:0b:d9:28:a8:a2:f9:b3:ba:2a:28:03:
         79:b4:8a:77:2d:95:fa:63:8f:0b:cc:24:2c:60:94:73:e1:3b:
         f1:b1:76:26:94:6c:a4:b6:ed:9b:7f:34:8b:f0:15:90:e9:af:
         03:3c:83:c5:8a:db:22:88:4d:d4:bf:d5:84:19:58:61:c1:bb:
         a2:8f:f6:a4:1d:6b:fd:3d:68:1c:ba:fe:fa:5b:35:97:14:98:
         b2:24:d4:a2:cc:cd:c4:a2:5c:6f:f2:a5:d9:de:f2:a3:47:ef:
         6b:01:5a:1d:fa:52:d5:8d:e2:78:fd:4a:b5:d8:d2:89:02:f0:
         44:6b:43:7c:15:67:67:e7:2d:94:18:67:ef:67:3a:bf:1e:4f:
         0f:9c:27:b1:4c:7d:b2:a9:2d:de:10:8d:98:54:1a:2f:c7:2c:
         52:22:26:2a:c0:d5:95:15:2a:58:93:f9:94:b3:db:e7:98:6b:
         ed:d4:47:6e:77:47:da:22:65:af:37:1a:eb:b8:64:30:dd:48:
         c2:89:c1:0b:80:f7:ca:61:5f:b8:cc:f5:82:2f:2a:5c:aa:53:
         4f:eb:13:92:b8:94:c2:ef:16:0e:bb:7e:a9:ee:a6:14:9e:03:
         2e:82:07:c9:c3:c3:ed:2d:b7:3e:a2:c2:d5:a7:23:56:cb:fa:
         24:c9:1b:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 00:41:49 2026 by rpki-client