Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/33e8d64c-2de0-3219-8d91-a70831edfdea.roa
File:                     33e8d64c-2de0-3219-8d91-a70831edfdea.roa (raw, json)
Hash identifier:          M2GgSfV3FzrPgSP9GP8og1EGP7/UPFEiCAl9iNkF4ps=
Subject key identifier:   70:F1:0B:B7:02:7F:2B:E1:C9:C7:8A:20:A2:36:ED:7B:F1:2B:30:AA
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D8128651E464470A66E511000
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/33e8d64c-2de0-3219-8d91-a70831edfdea.roa
Signing time:             Tue 14 Apr 2026 14:22:15 +0000
ROA not before:           Tue 14 Apr 2026 14:22:15 +0000
ROA not after:            Mon 13 Jul 2026 14:22:15 +0000
asID:                     21313
IP address blocks:        199.7.76.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:81:28:65:1e:46:44:70:a6:6e:51:10:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 14 14:22:15 2026 GMT
            Not After : Jul 13 14:22:15 2026 GMT
        Subject: CN=402680e5-fd2c-40be-9fb3-20f13d8ea872
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:70:a8:37:6e:0c:40:ce:8a:19:ae:75:e1:b1:
                    dd:82:18:cd:95:db:dc:09:5c:6c:88:18:84:03:c1:
                    3b:47:e9:1e:34:7d:62:de:20:0c:03:6f:43:cf:4e:
                    90:04:e9:3e:35:f1:01:0a:f7:24:47:63:5c:c1:95:
                    5b:dc:5d:3f:22:94:95:88:b2:2a:f8:66:0f:ef:d4:
                    ff:29:5b:fa:36:ba:eb:f3:0a:a1:4c:21:17:db:62:
                    12:f0:6b:d3:1d:01:92:23:32:98:ac:b2:69:7e:1a:
                    93:95:70:6c:88:1b:05:2d:d0:48:7a:af:05:f9:a6:
                    6e:46:bc:01:4e:13:06:c6:be:4d:61:bc:96:5e:20:
                    79:56:09:be:68:0e:ac:06:a7:a8:57:a9:cd:13:58:
                    ac:54:d9:cd:9b:ce:a9:bb:34:c9:98:3c:23:19:e3:
                    9f:e8:fe:96:47:e0:27:b2:8f:8b:22:84:3b:ab:39:
                    dd:64:46:fd:e1:15:e4:0a:fe:19:80:b6:57:7d:07:
                    91:57:aa:bf:36:cb:0c:69:d4:41:29:4a:fd:1f:df:
                    6c:90:a8:62:02:78:1b:bb:b8:56:d1:b2:e5:c2:4b:
                    04:83:4f:e0:d7:6b:16:01:04:3d:97:41:74:02:f2:
                    d8:3d:74:6a:8d:08:cc:25:7d:23:62:b3:11:8a:d0:
                    61:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:F1:0B:B7:02:7F:2B:E1:C9:C7:8A:20:A2:36:ED:7B:F1:2B:30:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/33e8d64c-2de0-3219-8d91-a70831edfdea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.76.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:c1:cd:06:0a:a6:a1:2f:05:f3:41:73:5b:47:70:3c:10:59:
         69:33:6e:05:bf:fa:ed:9f:fc:7a:62:a2:b0:35:ee:c9:19:c3:
         4b:0f:5f:5c:62:02:78:82:e3:c0:61:60:34:12:12:c0:82:93:
         91:21:ac:dd:e8:a6:b0:91:b2:70:94:d1:27:2f:20:d3:5b:45:
         cc:10:97:89:d1:9a:2b:ad:eb:46:39:e1:57:d7:08:3d:c0:13:
         da:cb:4f:af:da:ee:c7:1a:2a:6d:a6:d4:f7:8c:ff:82:3b:30:
         a6:67:9a:ba:ce:51:d0:53:d3:3e:84:28:16:e2:dd:1c:72:89:
         27:94:29:30:d8:21:15:a1:fe:ef:ef:87:93:f1:53:f8:06:40:
         5a:6e:3e:02:94:81:24:79:31:cf:63:5a:fc:b3:cc:74:5c:cd:
         4e:0b:77:59:5f:25:36:06:c9:0d:1b:0f:20:01:09:4d:b2:28:
         82:ee:8a:bc:99:17:3b:45:82:0b:fe:fc:42:bc:0d:eb:b8:29:
         0e:f4:32:e8:57:59:11:86:4b:da:7f:7b:88:c3:2f:16:38:df:
         06:1d:02:c8:85:ef:7b:f0:28:96:6a:81:c8:a0:c1:80:05:bc:
         0f:ca:0c:68:9c:0c:f1:46:66:20:df:c5:c5:12:44:87:20:7b:
         5e:f7:53:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 01:18:47 2026 by rpki-client