Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/75a64a7b-6666-36f1-98a9-f0dbbe673ee9.roa
File:                     75a64a7b-6666-36f1-98a9-f0dbbe673ee9.roa (raw, json)
Hash identifier:          s0FE0UOvWodvwXHwjXiUg0TAExvstU8DV5AMfhIlL/o=
Subject key identifier:   3E:B5:80:5F:3B:06:DD:AC:66:E3:2C:DD:2A:BB:56:1C:D4:8D:93:4B
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D812864B0BC62A0DF94A4B780
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/75a64a7b-6666-36f1-98a9-f0dbbe673ee9.roa
Signing time:             Tue 14 Apr 2026 14:22:14 +0000
ROA not before:           Tue 14 Apr 2026 14:22:14 +0000
ROA not after:            Mon 13 Jul 2026 14:22:14 +0000
asID:                     396572
IP address blocks:        199.7.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:81:28:64:b0:bc:62:a0:df:94:a4:b7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 14 14:22:14 2026 GMT
            Not After : Jul 13 14:22:14 2026 GMT
        Subject: CN=b13c5c9f-92b2-4621-8113-629b55652851
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:20:dc:e0:29:a5:25:81:ae:e5:b1:92:24:bb:
                    b7:c9:6d:c4:49:fd:65:94:f3:89:46:c5:12:a6:ea:
                    1f:68:42:cd:bd:76:9c:17:20:08:c6:75:82:5b:8a:
                    09:38:a3:09:53:6b:6f:86:ae:a4:6e:e0:e0:ce:a5:
                    30:41:f5:5c:00:9e:7a:8d:8e:b9:34:64:30:14:c5:
                    1a:03:c8:62:cc:d8:dd:af:f8:e5:ce:ce:10:92:18:
                    69:e1:3e:1c:a6:40:a0:8d:f6:c9:ea:97:06:df:8d:
                    65:cb:78:69:75:3a:cf:73:83:2f:06:ce:dc:7f:56:
                    f9:6f:8f:dc:ff:56:3e:00:3c:d4:9a:a8:79:49:87:
                    5b:3d:22:d2:82:31:67:02:36:2d:2d:ac:4f:2a:3f:
                    8a:8a:8d:43:48:75:8c:74:8c:36:78:b9:8e:ee:ad:
                    12:1c:c8:49:2d:ae:90:39:01:1b:5d:cf:d1:8d:21:
                    b6:f2:03:c1:05:d5:d8:f3:18:f9:13:be:6d:34:c2:
                    c5:3f:3f:af:43:92:08:19:d3:ee:99:6e:f7:63:97:
                    80:7b:d9:02:fb:40:ed:c8:13:c5:d0:52:c8:fe:3e:
                    b3:8b:90:50:c8:1e:98:e0:db:52:70:5a:68:6c:84:
                    ba:24:08:9a:5c:2b:dc:01:81:cb:a2:be:3c:66:33:
                    89:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:B5:80:5F:3B:06:DD:AC:66:E3:2C:DD:2A:BB:56:1C:D4:8D:93:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/75a64a7b-6666-36f1-98a9-f0dbbe673ee9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.76.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:04:b8:3c:30:16:46:80:a6:b9:1a:96:ee:d8:bf:7b:1f:f1:
         eb:88:db:46:0f:86:f7:77:74:b2:09:e5:75:3a:e3:5c:93:bd:
         65:2a:c4:43:8a:4c:4d:d3:cf:54:2c:a1:0d:ee:7a:94:08:38:
         1c:54:ac:d9:3d:02:8f:69:94:2e:7b:2c:17:6e:c4:a1:da:84:
         06:a4:af:6c:d1:2e:73:57:b3:27:fa:66:0a:ce:03:fe:3e:ae:
         d1:25:27:df:52:20:da:a2:c4:0d:b4:59:9b:2e:d0:c8:5e:2e:
         b1:d0:8e:ac:ea:15:18:ef:13:15:cf:6a:a8:0e:58:2d:c2:28:
         16:58:70:8d:81:af:f3:c0:9d:64:25:9b:56:26:77:4c:a3:a1:
         e4:ed:a1:7c:74:28:54:76:1b:f5:4c:21:c5:73:37:2b:95:09:
         0d:a8:20:25:c2:b2:9f:c2:82:41:f3:45:b2:08:b4:21:ae:e4:
         ec:36:0e:4a:16:03:63:9a:23:27:7b:c6:d1:f9:39:1e:65:de:
         39:4d:85:57:12:a2:f6:e9:54:68:65:e3:19:11:96:ad:0e:2b:
         6e:6d:01:e1:f4:b1:ff:f7:b3:98:aa:5b:40:e5:9c:fc:7a:29:
         43:0c:bf:01:9b:62:21:26:b8:5b:cf:b7:8d:25:81:50:4c:e3:
         c1:82:09:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:52:04 2026 by rpki-client