Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/438a88ad-3d5c-36f4-8932-6a500a74e006.roa
File:                     438a88ad-3d5c-36f4-8932-6a500a74e006.roa (raw, json)
Hash identifier:          vQY/yYm85N50fqDIEtMLwVZlDGKZIHjVtybj3iEmDyE=
Subject key identifier:   E2:39:80:B1:65:0F:40:D4:D4:36:9E:93:04:18:3C:DF:1C:C0:93:CB
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D81285A14CE9A92655236F8C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/438a88ad-3d5c-36f4-8932-6a500a74e006.roa
Signing time:             Tue 14 Apr 2026 14:22:09 +0000
ROA not before:           Tue 14 Apr 2026 14:22:09 +0000
ROA not after:            Mon 13 Jul 2026 14:22:09 +0000
asID:                     396609
IP address blocks:        199.7.76.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:81:28:5a:14:ce:9a:92:65:52:36:f8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 14 14:22:09 2026 GMT
            Not After : Jul 13 14:22:09 2026 GMT
        Subject: CN=98a0f9c2-24bc-4a0f-8d8b-3820ea9d34c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:b6:1d:a6:c9:58:81:ad:5c:d6:d4:f2:92:8d:
                    10:69:75:dd:d2:71:83:5c:23:f4:52:81:d0:92:39:
                    56:36:fc:38:06:60:0a:b2:cc:6e:58:e5:65:66:83:
                    2f:df:70:57:79:6e:62:9f:1a:6b:d1:5e:35:95:51:
                    81:f3:77:8e:66:d7:bd:cb:ed:04:33:f7:2c:03:cc:
                    96:d3:a2:14:9a:c6:3a:b5:2a:c8:5b:5b:63:40:d0:
                    74:4d:7b:27:36:f3:b6:07:9b:b9:b8:e1:51:e9:9e:
                    61:2a:63:18:9c:88:aa:08:d0:e9:0c:76:01:6a:24:
                    fc:21:16:d1:db:50:1f:a9:64:ca:fa:c8:82:41:7d:
                    ed:77:30:16:31:14:52:d7:32:10:87:3b:0c:3c:aa:
                    b1:d4:f4:9e:b3:60:c8:6d:bd:11:db:0c:06:2f:05:
                    27:21:32:c9:30:fb:26:ab:ab:22:93:24:9d:44:70:
                    d5:25:81:cf:55:bd:30:21:ca:e5:0d:81:3a:9f:bb:
                    d0:97:06:9a:68:1d:f7:a0:5c:4c:60:fe:b9:e3:c8:
                    0e:c2:13:c9:5b:65:f7:21:5c:3b:b0:be:1e:22:d9:
                    77:0c:f0:41:e5:bf:77:7d:42:b8:63:e8:13:61:36:
                    b5:a1:dc:a2:7a:53:dd:c8:52:e4:c8:2c:98:2e:0b:
                    18:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:39:80:B1:65:0F:40:D4:D4:36:9E:93:04:18:3C:DF:1C:C0:93:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/438a88ad-3d5c-36f4-8932-6a500a74e006.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.76.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:f1:f5:44:dc:1a:57:b4:03:c4:ed:b0:0e:2b:8d:cb:c8:72:
         4d:0b:9d:03:73:87:77:0b:25:1c:82:11:49:7b:97:6d:49:aa:
         dd:f1:82:3a:d2:56:6f:eb:e6:4a:e5:61:2b:b8:83:a1:41:74:
         f0:f0:7d:0e:8d:d9:e6:7a:23:10:54:c7:00:b7:95:41:b9:aa:
         e4:79:95:09:71:6b:ea:8d:dc:6d:fb:2f:52:33:d6:ef:df:63:
         9d:49:29:1e:44:4b:21:a6:c2:7d:e4:86:f7:88:ca:64:08:87:
         01:d3:df:f3:df:a9:2a:e0:10:6b:aa:71:12:8b:03:6d:94:21:
         84:3f:10:0f:fd:4c:f0:09:c8:97:29:1e:82:b3:6f:b9:d7:37:
         9d:8c:18:5c:b6:a5:70:57:45:af:c1:3b:00:7a:26:ac:3a:cb:
         23:0e:83:d5:13:fb:09:a1:fb:7e:8d:33:de:7f:71:cf:35:34:
         3f:93:c3:54:ab:83:ab:0c:4c:7a:bf:1d:e0:82:ec:7f:0f:fe:
         2f:d6:b8:a0:75:8c:60:c5:70:c1:23:ae:1f:02:82:5f:47:ed:
         2f:2f:7f:fc:8f:32:9d:9f:90:24:70:63:96:f2:c3:c0:2b:b5:
         8b:d6:41:69:8c:52:8d:e0:2d:7e:6e:4b:54:0d:5e:30:6e:3a:
         5f:1e:6f:9c
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE2BKFoUzpqSZVI2+MAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDQxNDE0MjIwOVoXDTI2MDcxMzE0MjIwOVowLzEtMCsGA1UEAxMk
OThhMGY5YzItMjRiYy00YTBmLThkOGItMzgyMGVhOWQzNGM0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApbYdpslYga1c1tTyko0QaXXd0nGDXCP0UoHQ
kjlWNvw4BmAKssxuWOVlZoMv33BXeW5inxpr0V41lVGB83eOZte9y+0EM/csA8yW
06IUmsY6tSrIW1tjQNB0TXsnNvO2B5u5uOFR6Z5hKmMYnIiqCNDpDHYBaiT8IRbR
21AfqWTK+siCQX3tdzAWMRRS1zIQhzsMPKqx1PSes2DIbb0R2wwGLwUnITLJMPsm
q6sikySdRHDVJYHPVb0wIcrlDYE6n7vQlwaaaB33oFxMYP6548gOwhPJW2X3IVw7
sL4eItl3DPBB5b93fUK4Y+gTYTa1odyielPdyFLkyCyYLgsY7wIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFOI5gLFlD0DU1DaekwQYPN8cwJPLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNDM4YTg4YWQtM2Q1Yy0z
NmY0LTg5MzItNmE1MDBhNzRlMDA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxwdMHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAs8fVE3BpXtAPE7bAOK43LyHJNC50Dc4d3CyUcghFJe5dtSard8YI6
0lZv6+ZK5WEruIOhQXTw8H0OjdnmeiMQVMcAt5VBuarkeZUJcWvqjdxt+y9SM9bv
32OdSSkeREshpsJ95Ib3iMpkCIcB09/z36kq4BBrqnESiwNtlCGEPxAP/UzwCciX
KR6Cs2+51zedjBhctqVwV0WvwTsAeiasOssjDoPVE/sJoft+jTPef3HPNTQ/k8NU
q4OrDEx6vx3ggux/D/4v1rigdYxgxXDBI64fAoJfR+0vL3/8jzKdn5AkcGOW8sPA
K7WL1kFpjFKN4C1+bktUDV4wbjpfHm+c
-----END CERTIFICATE-----
Generated at Fri Apr 17 01:36:26 2026 by rpki-client