Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b699f5be-b0d2-31e8-b1b6-18f69b2f063d.roa
File:                     b699f5be-b0d2-31e8-b1b6-18f69b2f063d.roa (raw, json)
Hash identifier:          FfhKiCA2p6zMSPIEhxlPRKxycKnuYWxDL9z/k8TGPow=
Subject key identifier:   CB:F9:7A:57:01:43:59:B3:79:E0:72:18:AD:1A:C8:EA:94:87:E7:BE
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D812862A7398B6B28481E1B20
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b699f5be-b0d2-31e8-b1b6-18f69b2f063d.roa
Signing time:             Tue 14 Apr 2026 14:22:13 +0000
ROA not before:           Tue 14 Apr 2026 14:22:13 +0000
ROA not after:            Mon 13 Jul 2026 14:22:13 +0000
asID:                     396589
IP address blocks:        199.7.76.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:81:28:62:a7:39:8b:6b:28:48:1e:1b:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 14 14:22:13 2026 GMT
            Not After : Jul 13 14:22:13 2026 GMT
        Subject: CN=748851f5-e5cd-474f-9a7d-81a463ecc671
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:97:c3:13:e5:b4:da:c6:70:38:ee:40:f6:e6:
                    44:67:b5:fa:b0:65:f9:e4:ff:00:b0:01:20:4d:fe:
                    62:75:59:29:2a:54:55:3c:b7:96:39:96:73:f4:e0:
                    e8:22:17:3a:dc:e5:d9:8f:63:cb:d1:b3:88:83:6d:
                    15:3f:73:bf:eb:81:93:f0:82:e9:88:88:b9:c5:92:
                    7f:c0:49:63:ae:7e:16:09:c5:31:8e:5e:94:92:07:
                    68:21:a7:45:e3:7b:ba:d8:3a:5f:f1:81:16:27:61:
                    f2:c1:7a:ea:dc:b0:8a:11:20:7e:fb:b3:f7:5d:32:
                    8f:de:20:e5:9a:0c:c5:7e:d2:44:c1:58:02:ba:49:
                    ff:e7:e8:4f:40:63:05:88:40:fe:47:d3:9f:41:30:
                    b4:37:2e:be:6b:06:e3:2d:19:2a:c6:92:b7:d5:5c:
                    e7:ab:06:16:81:6d:f7:a2:5c:79:01:85:c3:25:5c:
                    c6:02:87:05:ff:bc:a1:6d:6b:b6:06:f3:bc:07:70:
                    83:dc:62:e0:c9:5c:c0:9d:76:10:54:9a:00:73:1a:
                    13:d4:52:2d:b8:47:d1:5c:78:13:ef:e8:e9:04:68:
                    dc:5e:d7:f9:a7:f9:a9:d0:7d:b8:39:31:25:be:44:
                    bb:40:91:05:86:b1:30:e2:f9:91:1b:a3:0e:24:b8:
                    db:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:F9:7A:57:01:43:59:B3:79:E0:72:18:AD:1A:C8:EA:94:87:E7:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b699f5be-b0d2-31e8-b1b6-18f69b2f063d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.76.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:0e:e3:34:48:c6:5c:dd:c7:23:dd:8b:5d:17:14:e2:35:84:
         8b:37:a6:f0:3c:01:e9:e3:17:ce:b3:2d:30:4d:44:01:03:3c:
         94:41:75:3f:c0:16:37:98:a0:f1:37:d6:2f:c7:58:5c:bc:aa:
         b3:00:e3:86:ad:2b:30:ce:41:cd:8d:73:aa:e3:07:64:f6:ff:
         c3:e0:11:26:2a:2f:61:1e:c7:c5:76:75:16:f7:75:66:37:64:
         21:26:9a:aa:17:73:e5:4a:87:bc:32:9d:bb:ed:9f:ac:fb:df:
         f5:86:d5:2d:02:69:1e:a0:8f:2c:91:8f:f8:75:0f:44:0a:e6:
         b4:79:ec:dc:76:3b:43:2b:56:bf:c6:25:54:27:5b:fe:e2:ae:
         1f:70:e8:3a:dd:f0:a9:4f:63:ab:6a:8c:ad:6d:58:89:03:ca:
         ed:49:54:a5:bf:dc:cb:38:11:9b:eb:a1:05:b3:ab:c0:1a:e5:
         92:41:bb:b9:6d:6a:9f:53:df:91:89:0d:51:a8:b1:84:2b:ce:
         d9:e2:19:70:10:1e:48:ba:18:04:fd:ea:b4:2a:38:68:10:35:
         05:d2:89:21:7f:94:e1:56:18:72:80:d8:e5:38:6d:57:ee:37:
         9c:c9:7a:6f:60:f4:ef:50:14:9a:bd:bc:99:3d:2d:f9:75:23:
         20:66:fd:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:38:32 2026 by rpki-client