Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/41188525-782e-370d-9441-9cde73c32ead.roa
File:                     41188525-782e-370d-9441-9cde73c32ead.roa (raw, json)
Hash identifier:          5D2x83/1MMCU/Au0quasQHigs1StzQqW3JxKOKTHxvI=
Subject key identifier:   CA:DF:F6:C5:60:AC:AE:CF:01:B5:2A:E9:FB:AD:C7:2A:D4:C5:CA:2D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F03A788EAFD856F6D1B1FDF00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/41188525-782e-370d-9441-9cde73c32ead.roa
Signing time:             Mon 31 Aug 2026 01:00:12 +0000
ROA not before:           Mon 31 Aug 2026 01:00:12 +0000
ROA not after:            Sun 29 Nov 2026 02:00:12 +0000
asID:                     397211
IP address blocks:        199.7.76.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:03:a7:88:ea:fd:85:6f:6d:1b:1f:df:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 31 01:00:12 2026 GMT
            Not After : Nov 29 02:00:12 2026 GMT
        Subject: CN=afd5ed3e-d594-4856-8cf1-105dad98f1aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b9:39:21:63:8f:4b:76:40:13:18:00:b4:e6:
                    6d:99:04:66:e3:a2:94:f9:ae:24:f9:d2:e1:90:74:
                    3a:fe:2d:a4:1a:d5:23:ff:5b:8e:f2:d1:05:02:64:
                    17:95:cc:b7:d5:00:0c:16:9d:da:06:cf:be:ae:37:
                    fe:2b:eb:e7:5d:ed:a4:6c:5e:14:1a:74:4a:92:9f:
                    25:e7:c4:56:a1:06:7d:b7:6b:85:70:83:38:03:cf:
                    36:f3:a3:21:9b:0f:d9:a7:98:f5:16:90:f1:be:1f:
                    fe:57:9d:6c:cf:a5:48:7c:68:2a:74:42:a3:f5:1f:
                    3f:a4:37:5e:59:52:b7:58:ce:c6:79:e2:d3:b1:67:
                    86:0b:fb:85:30:da:03:54:6b:fd:ac:a4:29:11:a6:
                    ca:be:32:4f:3b:51:3a:16:be:4b:5a:a8:4d:e9:48:
                    e9:2f:5c:39:09:5f:ac:16:ed:70:e3:8a:34:7f:bf:
                    3b:5f:e4:2f:ad:72:0f:54:b2:26:a9:c5:3b:2c:83:
                    eb:58:28:44:a1:f0:b8:fd:1b:51:41:e7:3a:3c:24:
                    4b:bf:df:1f:11:40:a9:5a:0c:b6:04:87:52:02:78:
                    2b:8d:a3:b9:8c:9a:77:66:9e:de:96:c4:98:11:1d:
                    02:33:27:41:52:00:82:c3:47:3f:97:6f:53:19:0d:
                    38:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:DF:F6:C5:60:AC:AE:CF:01:B5:2A:E9:FB:AD:C7:2A:D4:C5:CA:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/41188525-782e-370d-9441-9cde73c32ead.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.76.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:20:85:d1:c4:57:a0:7e:60:73:29:13:b9:23:46:cf:8a:33:
         7f:bd:4f:6b:50:0a:b4:25:6d:f2:b6:dc:ce:9c:0d:f6:87:f0:
         cc:47:d7:61:b9:5b:4b:00:9d:08:e3:30:18:01:e5:6b:db:e0:
         46:d7:ce:ea:f1:46:00:7c:40:d0:46:c1:05:79:96:97:57:ca:
         a9:24:31:74:5a:53:34:bb:9e:92:ac:c8:d9:17:71:a8:c9:99:
         dd:c7:f1:1f:7a:a7:f0:c7:a1:cb:b0:1c:19:6e:3a:07:3a:06:
         0d:8b:fd:07:1f:5e:80:03:dd:88:8e:39:0b:1f:c9:a0:bf:04:
         a4:0e:77:8a:52:48:f0:63:9e:58:12:be:a0:76:b7:6d:8b:b7:
         5e:ac:f0:64:4d:58:0a:43:8d:31:e9:d3:18:e6:13:6d:6c:49:
         1c:fe:fa:df:86:03:6d:86:ee:f5:69:f6:8d:f4:37:03:a3:1d:
         b7:2c:52:53:1a:ae:d7:79:53:0f:71:00:2a:1c:e6:5c:b2:2d:
         b2:1b:38:02:02:d5:eb:1f:30:c6:79:68:56:a7:0f:dc:93:b8:
         d9:73:99:66:6f:f6:a3:4f:1e:20:53:6f:ba:88:20:b8:a8:6b:
         29:77:f0:75:91:d1:5c:ae:ac:52:eb:39:d9:b8:34:db:f3:50:
         9a:00:d3:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:48:30 2026 by rpki-client