Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/46bc6d8d-658a-36c6-8374-ea2125bafaef.roa
File:                     46bc6d8d-658a-36c6-8374-ea2125bafaef.roa (raw, json)
Hash identifier:          PcpSIvxoAH1NFjcBJpnldRp9elGdjwU7DKJUjpVHAgI=
Subject key identifier:   41:3F:D4:8B:EB:0D:45:25:1B:8D:3F:D2:D9:9F:5D:40:CD:0B:9C:9A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F03A784789936D6191F786780
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/46bc6d8d-658a-36c6-8374-ea2125bafaef.roa
Signing time:             Mon 31 Aug 2026 01:00:12 +0000
ROA not before:           Mon 31 Aug 2026 01:00:12 +0000
ROA not after:            Sun 29 Nov 2026 02:00:12 +0000
asID:                     36619
IP address blocks:        199.7.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:03:a7:84:78:99:36:d6:19:1f:78:67:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 31 01:00:12 2026 GMT
            Not After : Nov 29 02:00:12 2026 GMT
        Subject: CN=83b328c6-41a6-4346-9f43-5ec8434f2fda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:52:7b:29:fc:53:0b:f6:63:56:ac:30:d6:f3:
                    1d:22:a4:9a:36:6a:7a:64:28:fa:37:b1:08:2d:7e:
                    c9:8a:ed:d0:a7:04:c1:f8:d9:a4:19:b0:10:88:11:
                    03:ed:27:49:0c:47:81:3e:ef:25:b8:ec:73:f0:4a:
                    fb:29:5f:ca:23:f4:7e:7d:be:79:2d:01:bb:98:ff:
                    d8:75:f0:b3:8e:57:69:c2:f2:f1:4e:48:a3:63:7f:
                    38:17:cc:59:77:34:7c:42:cc:25:31:f6:db:9a:a0:
                    0a:6c:2a:69:78:47:6e:c4:30:53:0c:89:ed:0b:42:
                    f5:d9:c6:ee:88:5a:26:8f:f4:4a:6e:b6:d7:42:65:
                    be:86:43:d4:78:10:28:cc:29:e2:1d:88:9c:e1:48:
                    a5:5c:36:eb:ab:5a:4a:05:2e:93:a5:b4:64:b2:db:
                    f6:d7:fc:b2:e3:3c:ab:33:e1:06:74:c5:5f:f4:13:
                    9a:02:07:70:4d:cd:a4:54:16:7c:9a:f0:13:e1:48:
                    20:c8:0a:63:e0:ad:d7:f2:10:3a:76:ea:7e:9e:68:
                    81:f7:ac:cc:75:1e:3f:08:28:3d:c0:58:fe:3b:85:
                    37:e5:1b:56:79:1c:c2:32:bc:8a:f1:ab:2e:a9:12:
                    20:3c:f4:e7:35:a2:20:12:82:5e:d7:64:f1:95:0b:
                    eb:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:3F:D4:8B:EB:0D:45:25:1B:8D:3F:D2:D9:9F:5D:40:CD:0B:9C:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/46bc6d8d-658a-36c6-8374-ea2125bafaef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.76.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:e1:61:0d:7c:82:39:4a:8a:de:64:66:97:2b:9c:00:9d:b7:
         5d:b0:a7:96:99:ac:d9:80:23:59:e0:97:78:9b:5f:99:ec:ca:
         07:72:1d:39:ff:6e:c7:d1:d1:9a:09:55:9d:e4:3c:fa:2e:94:
         23:9e:ba:f7:8b:8f:21:5b:7e:54:69:76:33:a4:6a:22:ea:73:
         bf:d3:3c:27:41:fb:a1:d0:71:c0:0a:dd:c3:db:e7:9d:b2:7c:
         09:ed:71:87:da:24:f3:4a:08:5b:74:6e:b3:6d:61:2d:f0:02:
         89:19:8b:8a:2c:4a:1a:ac:43:df:4b:58:90:ed:2b:c6:99:fb:
         86:b5:4c:ec:0b:60:c6:79:1b:6b:02:ce:68:45:4d:e1:9c:2a:
         75:b6:c4:e8:1c:c5:bb:4d:ad:32:a9:ce:e7:b7:a5:e9:ee:96:
         a1:2d:a0:42:22:ad:38:20:7a:a7:90:5c:9b:53:cc:89:90:bd:
         aa:4e:91:a4:94:41:58:3a:1c:9f:21:58:75:92:39:c2:b2:90:
         b4:b4:c7:78:7b:04:c7:76:fd:4d:34:43:d3:4e:c6:de:65:88:
         41:6c:73:95:3c:15:db:fc:6f:bd:a6:92:81:53:0a:04:39:15:
         98:fb:dc:f9:d2:c7:69:b3:93:0e:7c:87:18:93:23:2a:b0:46:
         31:38:54:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 07:29:10 2026 by rpki-client