Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3075df5c-bf33-354f-b377-d2ebe3a06ca8.roa
File:                     3075df5c-bf33-354f-b377-d2ebe3a06ca8.roa (raw, json)
Hash identifier:          Z1XpzPG1UTrBzKKBUfMq4R8uI7bCjN5STCcZjLM2chc=
Subject key identifier:   53:0C:23:DC:14:67:FA:C6:B6:4E:3B:1B:22:1D:4C:F2:0D:79:E8:85
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D6EDA737BE42E7B857B90D0C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3075df5c-bf33-354f-b377-d2ebe3a06ca8.roa
Signing time:             Wed 08 Apr 2026 01:00:24 +0000
ROA not before:           Wed 08 Apr 2026 01:00:24 +0000
ROA not after:            Tue 07 Jul 2026 01:00:24 +0000
asID:                     396546
IP address blocks:        199.7.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6e:da:73:7b:e4:2e:7b:85:7b:90:d0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr  8 01:00:24 2026 GMT
            Not After : Jul  7 01:00:24 2026 GMT
        Subject: CN=5f610119-3fb7-4fe6-a56c-53f647a9494c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ec:3e:3e:a3:b5:a4:82:11:97:68:c3:62:16:
                    81:06:80:1d:0c:14:aa:bc:5c:31:a4:9a:d7:54:32:
                    2f:74:6c:3b:d3:49:89:fb:07:65:05:d2:ad:9a:6f:
                    fc:a0:2a:ba:06:3a:19:bb:78:54:f5:19:53:ad:6e:
                    43:06:e2:26:d0:77:67:b7:95:79:5b:8d:26:b6:b7:
                    79:b9:16:9f:8e:56:d7:ad:29:4a:6b:82:bb:3f:81:
                    c6:e9:6d:6c:92:a4:0c:e9:11:ec:97:13:6d:af:ed:
                    34:e6:4c:cd:f1:c4:62:33:8f:9d:81:7d:0f:33:d9:
                    e6:f2:5e:cd:b8:97:08:b0:bd:90:53:89:cd:6b:aa:
                    43:43:06:af:5f:65:7d:64:b1:c0:63:60:93:55:7e:
                    06:50:23:84:f2:09:89:3a:ad:b7:11:96:2e:58:90:
                    26:f4:e8:8f:25:4b:3b:3b:ec:a4:f2:2f:fc:6a:84:
                    64:75:db:f4:9f:51:78:c0:e8:cb:4b:93:13:d2:3a:
                    ab:38:6c:18:9e:fe:2a:a3:14:71:32:a3:d9:f7:ec:
                    63:da:49:fd:62:bf:09:ce:9e:b7:0e:95:cd:be:ba:
                    9e:80:69:1b:51:13:d7:97:97:b4:10:79:9d:08:6f:
                    40:d8:7c:8a:e2:c7:f1:bc:a5:4f:24:3d:5c:bb:b4:
                    75:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:0C:23:DC:14:67:FA:C6:B6:4E:3B:1B:22:1D:4C:F2:0D:79:E8:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3075df5c-bf33-354f-b377-d2ebe3a06ca8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:32:f8:fd:3b:47:b2:ea:6c:08:67:cb:a3:52:b5:84:39:64:
         29:47:ba:a2:1b:bc:a6:ff:a1:ba:17:bf:f4:93:34:e5:0d:e9:
         f8:17:db:94:58:b1:1d:9c:80:f4:7b:bd:42:cd:7e:39:e9:2b:
         69:11:54:1c:06:81:8e:0c:6d:2b:d2:91:d8:00:ba:e5:45:be:
         5c:a1:45:d9:39:ef:95:22:55:48:fa:b7:50:a3:b4:1e:38:1d:
         b7:1c:46:78:aa:1a:a6:f0:7f:b6:e7:84:f0:7f:fd:55:4c:c7:
         3e:b7:b1:b9:05:b4:76:61:19:df:32:97:5d:41:d3:d0:96:8c:
         c0:0a:43:51:26:21:76:c3:61:9c:63:af:d9:55:7d:7e:8c:98:
         3a:00:15:71:82:2b:38:b2:35:d4:eb:33:e8:30:f8:7c:04:0d:
         e4:91:d8:b9:97:05:43:05:4b:f8:bd:33:4c:22:fe:95:e1:e4:
         7c:d5:54:d5:af:ff:a5:70:4e:b2:30:d0:1b:d4:7c:39:50:c9:
         65:14:9d:0f:bc:b7:20:4b:62:50:1a:3b:eb:1f:a7:e7:9c:82:
         09:9e:9d:64:85:b2:90:ce:97:1d:c1:cb:74:6c:91:aa:3b:4d:
         8b:0c:90:fd:92:c7:c5:d9:f6:8d:92:30:28:67:6b:89:e8:b0:
         1e:8a:68:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:19:26 2026 by rpki-client