Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8a6700f4-b9f8-31bb-b402-3f0ae14c44da.roa
File:                     8a6700f4-b9f8-31bb-b402-3f0ae14c44da.roa (raw, json)
Hash identifier:          Cy0Xm2oEGru5efDY8+aKbgnmaSK05j/RNrxvLH4Ee7U=
Subject key identifier:   49:33:7E:F0:F9:27:48:8D:DB:C5:9A:32:D3:3F:3A:B1:70:65:AE:CA
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F03A83F5EF344F007FB702740
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8a6700f4-b9f8-31bb-b402-3f0ae14c44da.roa
Signing time:             Mon 31 Aug 2026 01:00:12 +0000
ROA not before:           Mon 31 Aug 2026 01:00:12 +0000
ROA not after:            Sun 29 Nov 2026 02:00:12 +0000
asID:                     36618
IP address blocks:        199.7.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:03:a8:3f:5e:f3:44:f0:07:fb:70:27:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 31 01:00:12 2026 GMT
            Not After : Nov 29 02:00:12 2026 GMT
        Subject: CN=9755860f-2e64-4534-87f0-a6ff52532a84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ec:a7:76:4e:55:29:ae:9f:87:41:45:34:49:
                    e0:a4:67:f0:d7:80:1a:f5:de:40:22:7f:35:d8:94:
                    5d:1a:60:09:f6:eb:96:1d:d8:48:5d:16:e0:2e:b1:
                    fb:ca:4b:2c:6a:14:6d:c2:9e:57:63:11:f8:e3:b8:
                    5a:2a:95:76:e2:a9:39:9e:32:5b:b4:ba:00:49:cd:
                    41:31:27:66:ea:07:d0:6c:c0:91:9b:a3:bd:46:04:
                    04:9d:d0:be:1e:ba:6e:77:63:68:bd:53:52:8f:0f:
                    e1:86:6a:fd:5a:89:de:44:0f:b6:9a:3f:9d:09:76:
                    eb:d6:52:1e:cb:c1:4a:df:49:c3:c0:87:88:52:4d:
                    e8:1a:a0:a7:a0:27:bb:40:ba:6f:b0:e2:36:f6:2e:
                    47:70:8f:b1:75:34:51:5a:80:8e:da:bc:72:f9:ca:
                    ad:ce:ae:97:eb:51:0f:f9:06:27:42:ab:fa:8c:7d:
                    78:9a:15:7c:7b:2d:8f:f5:94:1c:c0:9d:b5:96:21:
                    5e:e5:dd:e3:d0:6b:82:77:6a:53:dd:3d:fc:02:59:
                    04:f4:a7:e3:30:35:95:05:59:43:ed:44:89:d0:e7:
                    7f:df:a7:e3:68:cb:d0:a3:b7:3b:40:18:c2:96:b0:
                    eb:ab:71:e7:98:39:5a:08:1a:d9:9d:c1:d2:55:9f:
                    7a:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:33:7E:F0:F9:27:48:8D:DB:C5:9A:32:D3:3F:3A:B1:70:65:AE:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8a6700f4-b9f8-31bb-b402-3f0ae14c44da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.76.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:0a:26:62:27:e9:62:da:da:fc:59:56:3b:9f:4f:ba:e1:40:
         63:45:56:32:f7:25:f5:ba:87:75:3f:3e:66:e0:55:af:49:6c:
         bc:ca:65:db:b3:13:5e:87:43:ea:83:4c:90:37:ef:f8:fd:b9:
         cb:b9:94:3c:ce:b5:1a:55:b8:d1:6d:83:14:27:97:44:e9:85:
         ea:6b:57:2d:20:eb:04:66:11:38:87:ec:13:f3:9a:3b:d7:af:
         b0:c6:ba:92:7d:bc:8f:6a:f3:2b:35:fe:e3:5b:14:82:25:1a:
         fd:b0:d4:fe:75:a5:42:ae:00:c7:de:76:33:e9:1e:15:3e:5d:
         bc:69:87:93:ff:dd:6f:72:1a:f1:aa:e8:9d:91:81:c0:fe:c6:
         0e:b9:5d:bb:73:4d:68:c5:84:a5:22:7b:a0:9a:ac:54:eb:85:
         d8:11:3b:ea:d4:52:59:db:20:9f:3e:d6:80:d0:ef:fe:0f:a0:
         2d:f6:13:2c:9e:45:da:07:35:99:aa:f4:2b:81:37:21:db:47:
         db:55:a0:2d:37:08:17:07:e1:a9:55:79:ef:8a:5f:01:8d:80:
         ba:50:59:20:b2:8e:16:eb:f6:a5:68:93:5b:cc:42:b3:8a:1f:
         49:0c:e4:b5:65:33:99:d3:85:65:30:17:3a:10:75:f8:fd:5b:
         a2:96:3c:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 06:47:12 2026 by rpki-client