Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aa3cfd61-bf48-3c0a-aa9c-5c15a589dec3.roa
File:                     aa3cfd61-bf48-3c0a-aa9c-5c15a589dec3.roa (raw, json)
Hash identifier:          VDzPbG1Ddt7fZbHEEP55DkqPwEhv1HhDLJ9tgeRGv68=
Subject key identifier:   32:B8:F7:89:A8:1B:E5:94:29:94:B3:C8:D3:BE:B0:A6:33:73:83:A4
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D812864256CB3EF9BAA429C40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aa3cfd61-bf48-3c0a-aa9c-5c15a589dec3.roa
Signing time:             Tue 14 Apr 2026 14:22:14 +0000
ROA not before:           Tue 14 Apr 2026 14:22:14 +0000
ROA not after:            Mon 13 Jul 2026 14:22:14 +0000
asID:                     36632
IP address blocks:        199.7.76.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:81:28:64:25:6c:b3:ef:9b:aa:42:9c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 14 14:22:14 2026 GMT
            Not After : Jul 13 14:22:14 2026 GMT
        Subject: CN=ee1d7f8e-d842-447a-b3da-2fa6d4add3ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:57:03:4e:74:27:1e:f5:11:d8:dd:37:61:de:
                    44:bd:20:91:8b:b2:d7:86:0a:66:9a:27:52:57:31:
                    8b:a7:b2:c5:26:41:bd:d6:8d:e3:b7:c5:09:06:0f:
                    14:8a:4a:ff:e1:69:95:4d:ef:43:32:a0:b1:01:a0:
                    e5:ac:5f:aa:8d:a4:f0:1d:83:35:55:2b:53:de:1a:
                    0c:e5:a3:49:a7:a1:e1:46:0c:c3:fb:4b:0f:61:a0:
                    e7:d3:13:d9:4b:d3:0f:79:7c:c2:cc:67:76:60:69:
                    53:3a:bb:52:15:46:fe:07:e4:c1:11:37:ff:e7:c7:
                    da:85:fb:d9:62:9d:bc:90:5a:ec:d0:16:b1:4d:5a:
                    95:fe:3f:a1:76:e9:7a:76:3c:b9:80:8d:93:d5:a3:
                    fa:bf:63:aa:26:28:fa:9c:28:38:3d:59:44:c2:69:
                    66:97:cc:a1:d2:87:b4:21:c3:0f:78:5c:43:a0:e2:
                    b4:5d:d2:47:c8:48:48:d7:ed:c3:c7:c1:e4:d5:b2:
                    95:d1:84:03:67:1b:52:bd:fc:cb:4a:5b:2d:71:99:
                    4c:31:ed:60:34:2c:8a:f8:09:cb:a1:d7:12:9b:53:
                    5e:1e:69:22:dc:0a:83:d8:b0:71:11:e7:0c:99:34:
                    88:f6:62:02:b0:7c:ef:11:d2:09:56:2d:b7:f4:92:
                    ac:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:B8:F7:89:A8:1B:E5:94:29:94:B3:C8:D3:BE:B0:A6:33:73:83:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aa3cfd61-bf48-3c0a-aa9c-5c15a589dec3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.76.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:30:72:5e:f6:5f:e4:61:8a:f8:40:ba:9a:ae:5f:af:93:9e:
         52:94:8a:df:49:6b:b2:57:cf:bf:be:4d:b0:04:72:6d:8b:77:
         0c:55:0c:c0:8c:14:e7:26:d5:b9:c6:33:7d:28:a9:ed:33:c7:
         22:98:1f:e4:73:03:f4:64:38:18:85:de:1a:5e:04:36:81:45:
         0a:ed:07:7d:a9:bf:f2:72:13:7a:53:5c:cf:e9:6c:20:26:cc:
         b6:15:14:30:61:03:4d:b8:1f:53:4f:d8:0f:78:4b:8e:05:d4:
         17:d6:a0:30:cd:4d:81:c6:75:31:93:7a:74:69:a6:e7:78:c0:
         49:8b:dc:7e:df:47:72:91:6a:8f:6c:6d:ca:ab:89:fe:0c:fa:
         7a:47:82:48:c7:ad:dd:38:75:45:45:15:c2:2b:91:e0:29:f3:
         a4:2e:90:29:2c:c0:3c:9f:cd:a4:a8:af:5e:37:f1:64:e5:47:
         be:30:7b:37:bf:4a:41:fe:e2:33:80:ad:83:0f:8c:4f:01:44:
         14:7e:0e:84:51:a7:fa:75:9a:6f:e5:b1:2d:06:73:b9:7a:fc:
         de:7e:73:7a:76:1a:50:b9:29:9b:0e:99:09:94:01:b4:ff:8f:
         dd:09:8b:17:80:01:9b:5e:8e:08:04:5e:15:bf:35:a2:89:61:
         01:f8:09:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:15:00 2026 by rpki-client