Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/27c6005b-80e6-35e9-8514-b90cafea7985.roa
File:                     27c6005b-80e6-35e9-8514-b90cafea7985.roa (raw, json)
Hash identifier:          wEy1ilzr5aGQ6D4moQzmsx+Tg3fjHYVu7S9egN958GI=
Subject key identifier:   65:A0:E1:08:44:24:17:1C:B7:40:17:10:B5:6A:B1:7D:D5:73:EB:D7
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D812870246CC7B1DCAE1901C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/27c6005b-80e6-35e9-8514-b90cafea7985.roa
Signing time:             Tue 14 Apr 2026 14:22:20 +0000
ROA not before:           Tue 14 Apr 2026 14:22:20 +0000
ROA not after:            Mon 13 Jul 2026 14:22:20 +0000
asID:                     396597
IP address blocks:        199.7.76.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:81:28:70:24:6c:c7:b1:dc:ae:19:01:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 14 14:22:20 2026 GMT
            Not After : Jul 13 14:22:20 2026 GMT
        Subject: CN=a29944a6-ac1c-4a7c-94a0-702fb98e2ace
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:30:74:b8:a7:8c:16:84:7c:2b:ee:01:a2:aa:
                    8a:6c:b8:1b:cd:f1:d5:8c:41:9d:87:f3:ac:f2:d3:
                    73:2d:86:4b:3b:02:25:28:d0:c6:6e:de:ab:df:fb:
                    f8:80:cb:91:20:e1:c7:e9:0b:2b:56:17:2a:94:03:
                    d3:32:b2:cd:49:85:85:32:48:b8:4b:99:0b:0e:e5:
                    13:97:9c:41:21:f6:89:9d:8e:c8:88:28:c5:76:29:
                    1d:40:8d:1b:a6:31:4a:bc:10:02:cb:d3:4d:7a:16:
                    15:cd:8e:af:3f:e1:6a:d9:e3:80:8d:e1:78:92:52:
                    7e:4e:d8:77:56:6e:04:40:17:3c:42:4c:32:04:ee:
                    51:05:9b:a5:cd:3c:de:52:a2:9b:ad:e1:6c:0c:fe:
                    bb:c2:a9:1d:10:b0:08:e7:5f:3d:44:5b:e3:c0:23:
                    ad:3e:01:da:34:e8:e1:01:09:4e:75:4c:ef:d5:66:
                    6b:bc:ed:89:21:39:8e:51:03:56:a4:c0:a8:d7:65:
                    c2:3b:80:1b:db:07:8e:bf:0a:29:d3:48:4d:e6:c9:
                    b4:bc:30:36:8e:8c:81:3c:90:90:94:51:80:17:fd:
                    46:6f:68:60:1e:18:7f:41:fc:56:df:f9:a7:97:0a:
                    ec:6a:07:57:ee:b7:32:a1:9b:c8:5d:96:61:16:44:
                    d2:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:A0:E1:08:44:24:17:1C:B7:40:17:10:B5:6A:B1:7D:D5:73:EB:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/27c6005b-80e6-35e9-8514-b90cafea7985.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.76.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b9:52:3f:7e:74:3f:57:0a:ec:c6:d4:36:f9:63:e1:3c:1f:d7:
         81:6c:45:8c:2a:9a:be:62:0e:4b:bf:e1:27:9d:5c:25:1b:85:
         8a:a8:88:5f:7d:ee:e1:fe:a2:df:25:cf:03:ed:86:ae:91:f2:
         b6:97:ad:5b:6e:c8:f1:44:b1:ef:f2:cd:a0:dd:ec:5e:be:5e:
         16:26:86:11:21:10:50:b1:c5:57:46:5d:23:fe:7c:87:5f:12:
         f8:d1:57:ca:72:93:08:f0:9e:f7:f9:08:d7:30:06:96:a3:ac:
         cc:18:bd:2c:8f:40:ec:88:ca:70:97:75:10:1d:5b:8d:f0:65:
         af:1b:ac:11:79:4c:8c:66:02:bb:13:67:3f:d2:2c:61:d4:40:
         d6:07:6a:8a:de:31:49:55:6e:f6:99:d4:1f:1b:36:9e:63:25:
         15:d9:b1:34:dc:93:8b:67:37:0f:9f:f2:cc:7a:a2:04:63:61:
         12:00:a6:53:7f:2e:cb:18:90:4d:64:c8:95:11:18:57:cd:5e:
         40:ed:d6:16:4b:a4:db:7c:00:5f:67:12:38:d9:4e:8b:3a:01:
         94:3a:04:17:49:d3:cd:eb:f6:0e:35:8f:8a:db:93:b8:47:f5:
         76:79:45:8b:94:6d:fd:f6:39:d5:b3:2c:03:c6:05:36:cf:1a:
         dd:53:a1:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:56:39 2026 by rpki-client