Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1a392f8-d6fc-3776-be3f-9ab2b6b7a40d.roa
File:                     c1a392f8-d6fc-3776-be3f-9ab2b6b7a40d.roa (raw, json)
Hash identifier:          DTObgENNNVVT5qvLoj/COQoB+1mPR3AYeA4NRtYDE/0=
Subject key identifier:   9F:A6:A0:0C:D6:FB:66:21:7E:72:20:4F:73:F5:03:0F:75:D4:CE:C9
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D812873B103DE6989E7E96A00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1a392f8-d6fc-3776-be3f-9ab2b6b7a40d.roa
Signing time:             Tue 14 Apr 2026 14:22:21 +0000
ROA not before:           Tue 14 Apr 2026 14:22:21 +0000
ROA not after:            Mon 13 Jul 2026 14:22:21 +0000
asID:                     397208
IP address blocks:        199.7.76.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:81:28:73:b1:03:de:69:89:e7:e9:6a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 14 14:22:21 2026 GMT
            Not After : Jul 13 14:22:21 2026 GMT
        Subject: CN=c563c7af-fcf6-4c95-ac18-b86a236ecd94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:b5:43:7d:17:72:7c:bc:54:62:be:83:a8:44:
                    16:be:50:83:6d:1e:1e:fa:49:06:e9:b2:54:28:6e:
                    39:d0:e5:8a:ac:5c:99:1b:ba:00:aa:25:da:ef:ad:
                    24:b8:49:46:49:51:ba:ca:f7:6e:af:ea:88:45:eb:
                    f5:5b:04:3f:ec:a3:f1:93:12:60:91:de:48:da:36:
                    3a:d4:97:51:11:5b:69:72:07:07:ca:36:7f:e4:f1:
                    ce:5b:4a:93:5f:ec:90:c4:32:08:d9:bc:12:9e:79:
                    e0:f0:09:61:83:d1:fe:59:8c:48:32:8e:1a:2d:96:
                    f9:4e:ae:e8:ea:f0:51:ea:4e:45:db:43:1c:7b:10:
                    e6:a0:2d:4d:7a:2f:0c:f5:fa:10:76:fe:c1:87:ef:
                    8f:7f:6e:37:be:69:7a:3c:a3:ce:70:4f:e6:c7:9a:
                    c3:82:6d:a7:55:59:c6:2b:3e:78:49:ad:a2:40:c2:
                    b9:1e:d8:a7:76:93:2e:53:c9:45:06:df:38:3e:c4:
                    79:14:3a:e7:07:ef:f6:df:8b:c9:a4:1c:e9:f6:a0:
                    22:e8:4f:eb:b5:45:d7:ca:60:3d:4b:f5:29:b6:4c:
                    27:9d:fe:25:f2:fc:50:e3:4c:41:f1:39:d0:8c:5d:
                    50:eb:4b:ee:f1:a0:76:60:34:80:c7:64:da:ee:87:
                    de:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:A6:A0:0C:D6:FB:66:21:7E:72:20:4F:73:F5:03:0F:75:D4:CE:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1a392f8-d6fc-3776-be3f-9ab2b6b7a40d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.76.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b8:59:0c:33:d5:63:bb:2e:40:53:d8:87:be:83:1c:c5:74:a3:
         63:78:a2:43:87:10:05:84:53:63:68:0e:9c:cb:40:e8:58:79:
         92:1e:2d:04:f8:76:7e:93:b6:2b:17:81:be:f0:39:d9:01:da:
         2a:89:15:74:4f:a7:db:88:c2:fc:02:b4:ae:a9:71:cc:46:42:
         99:2c:75:1e:b8:ea:0c:66:e7:88:d1:1c:b2:87:9f:be:89:40:
         e6:b6:83:ec:cc:03:06:34:bd:d8:78:03:39:72:16:2a:07:14:
         d8:e7:dc:14:c1:05:f1:4f:54:32:77:09:2e:97:a0:cf:03:8e:
         30:63:9a:0f:f8:79:d3:9f:87:d8:8d:44:0a:ac:fc:90:80:a8:
         9d:d9:06:6e:a4:d2:b7:8a:5c:99:ab:7c:e5:76:7c:71:6c:9d:
         5d:f0:ba:92:6b:02:e4:20:3f:5a:0c:19:b4:fb:62:96:36:c3:
         24:3d:06:28:d6:45:58:16:4c:d7:f0:96:ec:1a:72:91:39:35:
         a0:d5:fb:bd:32:68:25:4c:03:65:b4:c7:7e:61:c4:d3:2e:0b:
         72:9b:79:6d:db:7c:ca:a1:e4:8f:a8:ca:e3:20:53:51:ad:ed:
         e7:89:11:cd:0b:66:3d:82:04:5b:c7:10:04:33:f3:e9:8b:3c:
         3c:f5:b7:e0
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE2BKHOxA95piefpagAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDQxNDE0MjIyMVoXDTI2MDcxMzE0MjIyMVowLzEtMCsGA1UEAxMk
YzU2M2M3YWYtZmNmNi00Yzk1LWFjMTgtYjg2YTIzNmVjZDk0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz7VDfRdyfLxUYr6DqEQWvlCDbR4e+kkG6bJU
KG450OWKrFyZG7oAqiXa760kuElGSVG6yvdur+qIRev1WwQ/7KPxkxJgkd5I2jY6
1JdREVtpcgcHyjZ/5PHOW0qTX+yQxDII2bwSnnng8Alhg9H+WYxIMo4aLZb5Tq7o
6vBR6k5F20McexDmoC1Nei8M9foQdv7Bh++Pf243vml6PKPOcE/mx5rDgm2nVVnG
Kz54Sa2iQMK5HtindpMuU8lFBt84PsR5FDrnB+/234vJpBzp9qAi6E/rtUXXymA9
S/Uptkwnnf4l8vxQ40xB8TnQjF1Q60vu8aB2YDSAx2Ta7ofeDwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFJ+moAzW+2YhfnIgT3P1Aw911M7JMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYzFhMzkyZjgtZDZmYy0z
Nzc2LWJlM2YtOWFiMmI2YjdhNDBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxwdMHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQC4WQwz1WO7LkBT2Ie+gxzFdKNjeKJDhxAFhFNjaA6cy0DoWHmSHi0E
+HZ+k7YrF4G+8DnZAdoqiRV0T6fbiML8ArSuqXHMRkKZLHUeuOoMZueI0Ryyh5++
iUDmtoPszAMGNL3YeAM5chYqBxTY59wUwQXxT1Qydwkul6DPA44wY5oP+HnTn4fY
jUQKrPyQgKid2QZupNK3ilyZq3zldnxxbJ1d8LqSawLkID9aDBm0+2KWNsMkPQYo
1kVYFkzX8JbsGnKROTWg1fu9MmglTANltMd+YcTTLgtym3lt23zKoeSPqMrjIFNR
re3niRHNC2Y9ggRbxxAEM/Ppizw89bfg
-----END CERTIFICATE-----
Generated at Sun Apr 19 08:23:14 2026 by rpki-client