Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b94b0335-aed8-3fcb-a2e0-08fcaae7b0f6.roa
File:                     b94b0335-aed8-3fcb-a2e0-08fcaae7b0f6.roa (raw, json)
Hash identifier:          O3gwqSXfkDv+301odvtdHAd1BaIuA6SME4cjZXHf8OA=
Subject key identifier:   AD:A0:1B:F3:0E:6E:59:60:D7:1E:C1:FD:58:01:B5:44:4B:6E:18:13
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D812861E2733B0511EB57E680
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b94b0335-aed8-3fcb-a2e0-08fcaae7b0f6.roa
Signing time:             Tue 14 Apr 2026 14:22:13 +0000
ROA not before:           Tue 14 Apr 2026 14:22:13 +0000
ROA not after:            Mon 13 Jul 2026 14:22:13 +0000
asID:                     396550
IP address blocks:        199.7.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:81:28:61:e2:73:3b:05:11:eb:57:e6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 14 14:22:13 2026 GMT
            Not After : Jul 13 14:22:13 2026 GMT
        Subject: CN=c4113110-28e3-43f5-8d66-9ce54e707a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:22:92:8e:e6:a9:b1:91:6b:8a:f0:f1:40:1b:
                    76:04:43:59:a4:f3:c0:54:d9:46:fb:ff:69:b2:40:
                    98:c6:ed:a7:d9:20:f1:db:67:86:a0:31:69:78:55:
                    f6:a8:75:14:20:f4:d5:6d:dc:31:51:99:c0:39:1b:
                    a8:08:79:10:27:bd:1d:f4:c6:0d:ca:79:45:15:75:
                    05:40:5b:02:4b:5a:d6:30:ba:c6:b5:de:f9:26:50:
                    54:da:95:c1:c0:e3:8b:4d:f0:73:3f:63:c3:fd:5e:
                    61:63:ef:87:5f:8e:7a:6c:6e:1d:cf:24:39:d3:2e:
                    8f:fa:14:c8:f4:7c:ec:75:fd:d2:b5:b1:79:95:18:
                    31:3b:10:e4:e2:8c:78:ff:0d:c7:a5:ed:8e:38:17:
                    ae:7b:b4:f5:cc:6a:4d:1c:82:cd:e1:81:44:ce:da:
                    f5:75:3b:71:2f:36:33:61:d7:8b:4f:9f:f1:cb:06:
                    35:84:d1:49:81:25:cc:51:5f:39:a5:88:e5:b6:99:
                    8b:2d:5e:bc:64:ab:6e:c3:0b:b8:44:a3:c6:86:be:
                    a4:40:1c:22:91:ec:02:50:99:a2:c9:5e:57:6c:1f:
                    e5:28:77:25:fa:a9:dc:8b:8c:72:be:3c:ad:84:0b:
                    e0:75:a5:02:a0:9a:44:eb:72:ce:45:52:84:60:ae:
                    af:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:A0:1B:F3:0E:6E:59:60:D7:1E:C1:FD:58:01:B5:44:4B:6E:18:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b94b0335-aed8-3fcb-a2e0-08fcaae7b0f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.76.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:bc:c8:e6:d4:84:50:6e:1f:9e:b4:41:0f:a8:7c:27:a4:25:
         9e:2b:67:ce:56:77:f9:13:36:e2:12:07:6d:e6:71:34:ee:01:
         a2:03:13:80:3c:b9:a2:0d:ef:4d:d6:35:a2:3a:a7:ea:90:f3:
         6f:c4:9c:17:b4:38:e6:d6:e5:96:84:e8:5d:e2:00:66:8c:e7:
         58:bf:2e:40:08:93:0a:b4:c7:2a:12:22:90:a8:3e:a0:ae:ec:
         9a:05:77:a3:58:3e:5e:83:76:e4:79:7e:39:04:14:1b:bc:3a:
         6e:95:c2:38:dc:82:ce:35:a6:ed:47:cc:1f:e4:5a:a4:49:8b:
         c9:5e:d7:52:c3:50:ed:05:df:f1:a2:7b:95:b7:3a:df:26:37:
         b6:02:f9:11:9f:c1:35:05:5f:32:17:74:7a:e3:e3:35:ea:86:
         8c:88:af:6b:09:a0:ca:3b:51:84:ad:eb:db:7c:98:3e:ef:7e:
         d5:d2:4d:fb:f0:e1:34:4b:3c:08:cf:e7:c2:a7:06:b4:97:58:
         8d:0f:cc:1e:9f:ff:ca:91:82:7f:08:cc:cd:a6:05:50:cb:68:
         fa:34:81:97:c6:33:2f:c9:00:5f:a0:5d:40:3d:07:97:52:cd:
         8a:1a:26:3a:bf:b9:2f:58:13:32:b2:ac:31:f3:42:1f:fa:a7:
         5c:98:7b:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:24:50 2026 by rpki-client