Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d51322e1-4131-34d1-8408-284e917bc026.roa
File:                     d51322e1-4131-34d1-8408-284e917bc026.roa (raw, json)
Hash identifier:          fvbWwSVKqCF7/tKgeEtCq710wGlK0F4+sQf1Dw7mt7U=
Subject key identifier:   41:65:7B:4B:F4:F2:66:96:87:56:FD:D2:AC:9E:E3:0A:57:2C:5C:28
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D812861F119144CF75D713C40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d51322e1-4131-34d1-8408-284e917bc026.roa
Signing time:             Tue 14 Apr 2026 14:22:13 +0000
ROA not before:           Tue 14 Apr 2026 14:22:13 +0000
ROA not after:            Mon 13 Jul 2026 14:22:13 +0000
asID:                     396564
IP address blocks:        199.7.76.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:81:28:61:f1:19:14:4c:f7:5d:71:3c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 14 14:22:13 2026 GMT
            Not After : Jul 13 14:22:13 2026 GMT
        Subject: CN=f476c956-90a8-4513-a125-c206bff81349
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:1a:9b:a5:4d:ed:9a:93:c3:60:df:4f:ce:fc:
                    41:06:9d:47:2c:f3:b0:2c:1e:9b:f7:c5:bc:f4:0f:
                    f7:8e:19:3b:2f:82:b5:6e:80:8c:ff:4a:1f:12:05:
                    a9:7e:62:14:ed:2d:1e:57:19:4c:51:51:3c:4c:4b:
                    d1:05:e1:87:23:92:ec:70:04:09:d4:1c:3a:b3:f3:
                    da:9b:40:d3:46:0c:70:3a:7d:d5:30:a2:53:5f:44:
                    43:77:5c:fc:06:78:98:07:d5:3c:99:aa:32:c2:bd:
                    09:d5:d3:78:af:f4:7b:87:86:28:f4:11:0c:2d:77:
                    6c:1d:fb:60:6a:d6:05:1e:ec:9a:ac:75:23:60:66:
                    da:c1:3e:d1:4c:18:3a:ec:e4:5d:8a:12:48:fd:30:
                    01:61:ad:a5:e5:70:ca:49:3f:84:80:d8:c8:12:df:
                    a4:89:de:68:63:12:91:09:f2:08:00:f1:26:b4:3a:
                    99:9b:50:1f:b1:34:c6:c0:6d:38:05:6c:62:bc:dc:
                    77:4d:d9:41:d2:0b:0f:fc:f1:7b:70:c4:08:19:07:
                    59:26:4d:5c:43:91:be:46:82:8a:87:5b:19:c7:0b:
                    79:06:c5:8c:80:cd:09:54:aa:13:5a:09:22:8c:04:
                    36:d1:99:81:cc:88:dc:8a:c9:dc:ed:ef:6f:42:4c:
                    6a:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:65:7B:4B:F4:F2:66:96:87:56:FD:D2:AC:9E:E3:0A:57:2C:5C:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d51322e1-4131-34d1-8408-284e917bc026.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.76.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:5a:0d:e2:d2:45:39:34:39:c6:2a:ab:38:4f:94:db:18:f1:
         82:24:78:de:83:2b:bb:9c:12:6f:53:0a:96:24:a5:1d:c7:2b:
         14:68:06:95:c3:db:22:f3:3a:24:dc:49:c9:6f:4b:37:c9:7b:
         8f:fa:66:a5:ad:63:8a:c3:e1:f7:e9:b4:e4:71:40:d9:18:c1:
         21:4d:6c:a3:f5:ba:2e:eb:6a:bc:21:f8:8b:27:6b:db:b5:97:
         05:0f:70:b4:f0:16:62:90:f0:44:a5:5b:cd:bd:a5:1b:7f:a2:
         2a:83:e3:b7:0b:31:05:a9:70:e8:3c:83:63:c8:f7:aa:0e:60:
         b5:02:c7:2e:f0:0e:ba:24:59:43:5c:bc:9e:03:b3:0c:88:36:
         9a:a7:b6:45:f8:a8:ce:fe:81:2b:94:f9:9f:44:7e:87:aa:d4:
         6a:db:fb:a8:09:98:c4:c8:a2:47:15:21:8b:23:8a:2b:ab:c5:
         88:1c:d9:3a:60:31:70:37:cd:6a:3c:6f:5d:91:6e:13:8f:63:
         9c:ca:45:37:89:0d:b1:8b:e8:2f:1c:f9:f3:5a:2c:15:4a:89:
         b7:78:f6:7b:da:20:69:23:a1:b4:d7:f1:17:66:d1:be:54:26:
         37:44:d7:5b:4e:ff:f2:80:d0:da:20:41:4f:76:f9:6d:b5:15:
         a2:1f:12:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:55:41 2026 by rpki-client