Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4ebd2143-b5d8-307c-948b-e1b1f8d07c4b.roa
File:                     4ebd2143-b5d8-307c-948b-e1b1f8d07c4b.roa (raw, json)
Hash identifier:          6gmDf/bkTPBQmNXvhrjnrmeo4FWiJEjXlFicNSLKk9U=
Subject key identifier:   94:D1:C5:64:E9:77:07:C2:40:BE:9B:95:3F:A1:E6:3F:DC:F5:6E:70
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D8128614C511449F0CD67DD00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4ebd2143-b5d8-307c-948b-e1b1f8d07c4b.roa
Signing time:             Tue 14 Apr 2026 14:22:13 +0000
ROA not before:           Tue 14 Apr 2026 14:22:13 +0000
ROA not after:            Mon 13 Jul 2026 14:22:13 +0000
asID:                     396599
IP address blocks:        199.7.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:81:28:61:4c:51:14:49:f0:cd:67:dd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 14 14:22:13 2026 GMT
            Not After : Jul 13 14:22:13 2026 GMT
        Subject: CN=3aa229fa-e817-44ed-83c0-9e343ac44cf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:02:fd:1d:ca:54:da:db:c9:b9:22:20:45:8a:
                    c0:b6:6d:16:8d:44:67:5c:4e:f5:5b:94:41:84:79:
                    93:86:23:11:c7:e1:84:c8:47:f1:6d:92:5e:a9:af:
                    53:85:08:e8:b8:1f:b9:97:c4:f9:c9:1e:69:8b:dc:
                    15:5b:87:9c:23:36:df:e0:cd:aa:f2:73:fe:0c:d1:
                    7b:28:29:fa:77:f6:0a:8f:22:a5:7c:de:ab:23:5c:
                    a3:81:19:10:18:6b:c8:07:da:8a:c2:37:1b:65:45:
                    57:f3:6e:41:1c:fd:ba:14:6e:6b:80:8a:2f:96:78:
                    95:d9:1b:6b:22:3d:5a:35:04:cb:b9:eb:25:b6:6a:
                    ea:8e:97:a6:a9:50:2c:c4:a3:4f:d6:47:72:38:e7:
                    0c:70:06:61:e6:3f:2b:49:80:33:fe:f5:de:67:97:
                    c3:7f:c9:35:91:60:15:23:ff:54:d0:d3:e2:2b:01:
                    2a:10:33:29:22:cb:d4:23:f7:1c:06:16:b6:fd:78:
                    fa:9d:67:6a:21:06:57:2b:6a:e6:f6:10:67:d4:aa:
                    6b:5d:ce:03:92:16:06:51:11:51:e8:0f:d2:b9:9b:
                    fb:79:23:a0:12:b1:32:5d:86:e0:79:7a:c8:39:04:
                    7f:fa:1e:1f:92:41:ce:a6:97:2b:43:40:3b:5b:06:
                    af:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:D1:C5:64:E9:77:07:C2:40:BE:9B:95:3F:A1:E6:3F:DC:F5:6E:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4ebd2143-b5d8-307c-948b-e1b1f8d07c4b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.76.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:5b:8c:78:4c:99:c9:97:97:17:7e:38:cb:b8:f5:53:98:e2:
         55:25:c8:cd:2d:01:f6:28:3d:5d:95:31:95:6e:2c:4f:d6:c7:
         7c:02:12:67:76:f1:c6:bd:80:e1:8b:2d:5f:4a:13:a6:3c:ff:
         2f:98:1f:3e:c9:72:6b:87:c3:0e:fc:03:17:2d:60:b4:2c:3c:
         eb:1f:73:0d:4a:2d:22:de:74:dc:bb:a8:5a:5e:fa:ce:cc:05:
         65:27:eb:b4:c5:8e:88:5e:d5:86:eb:62:36:3a:ed:b1:00:5b:
         f8:21:ee:7c:0b:81:5c:5f:c9:d2:6d:58:6e:c2:87:df:68:ba:
         e5:a5:6f:71:65:a9:48:d2:bf:f0:67:11:b7:ce:55:e2:3c:f3:
         2b:1b:d2:8a:49:f6:57:09:b0:f6:a2:e6:e6:2d:21:a0:18:72:
         b4:d6:d6:ee:ac:ad:4c:2f:dd:9a:5f:99:17:ad:99:53:11:c4:
         03:f2:09:c0:53:d3:fb:fa:83:62:81:d8:6b:41:6d:6c:04:6e:
         b7:b5:14:4f:ab:6c:d8:45:93:12:6e:ad:f7:b4:e3:f0:64:91:
         5b:62:32:90:11:6b:c5:61:54:fe:09:39:a6:2c:dc:ac:cd:21:
         2e:02:b1:50:54:5c:02:ce:a5:0f:67:87:5b:62:bb:90:ac:20:
         2f:6f:74:b1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2BKGFMURRJ8M1n3QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDQxNDE0MjIxM1oXDTI2MDcxMzE0MjIxM1owLzEtMCsGA1UEAxMk
M2FhMjI5ZmEtZTgxNy00NGVkLTgzYzAtOWUzNDNhYzQ0Y2YxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlAL9HcpU2tvJuSIgRYrAtm0WjURnXE71W5RB
hHmThiMRx+GEyEfxbZJeqa9ThQjouB+5l8T5yR5pi9wVW4ecIzbf4M2q8nP+DNF7
KCn6d/YKjyKlfN6rI1yjgRkQGGvIB9qKwjcbZUVX825BHP26FG5rgIovlniV2Rtr
Ij1aNQTLuesltmrqjpemqVAsxKNP1kdyOOcMcAZh5j8rSYAz/vXeZ5fDf8k1kWAV
I/9U0NPiKwEqEDMpIsvUI/ccBha2/Xj6nWdqIQZXK2rm9hBn1KprXc4DkhYGURFR
6A/SuZv7eSOgErEyXYbgeXrIOQR/+h4fkkHOppcrQ0A7WwavMQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJTRxWTpdwfCQL6blT+h5j/c9W5wMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNGViZDIxNDMtYjVkOC0z
MDdjLTk0OGItZTFiMWY4ZDA3YzRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwdMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHFbjHhMmcmXlxd+OMu49VOY4lUlyM0tAfYoPV2VMZVuLE/Wx3wCEmd2
8ca9gOGLLV9KE6Y8/y+YHz7JcmuHww78AxctYLQsPOsfcw1KLSLedNy7qFpe+s7M
BWUn67TFjohe1YbrYjY67bEAW/gh7nwLgVxfydJtWG7Ch99ouuWlb3FlqUjSv/Bn
EbfOVeI88ysb0opJ9lcJsPai5uYtIaAYcrTW1u6srUwv3ZpfmRetmVMRxAPyCcBT
0/v6g2KB2GtBbWwEbre1FE+rbNhFkxJurfe04/BkkVtiMpARa8VhVP4JOaYs3KzN
IS4CsVBUXALOpQ9nh1tiu5CsIC9vdLE=
-----END CERTIFICATE-----
Generated at Fri Apr 17 01:21:29 2026 by rpki-client