Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dfe7d943-0023-3e9e-b3c8-6e4bc966aaff.roa
File:                     dfe7d943-0023-3e9e-b3c8-6e4bc966aaff.roa (raw, json)
Hash identifier:          KhlUWsfWrOVvbYbp++51dkWfL+aBuaRlTZ2L57kXgYc=
Subject key identifier:   EB:57:E0:EB:1C:7D:EF:A1:DB:79:4C:EA:40:7B:BB:A4:C5:39:7E:EE
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F03A83FF85D87351E73899E20
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dfe7d943-0023-3e9e-b3c8-6e4bc966aaff.roa
Signing time:             Mon 31 Aug 2026 01:00:12 +0000
ROA not before:           Mon 31 Aug 2026 01:00:12 +0000
ROA not after:            Sun 29 Nov 2026 02:00:12 +0000
asID:                     396586
IP address blocks:        199.7.76.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:03:a8:3f:f8:5d:87:35:1e:73:89:9e:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 31 01:00:12 2026 GMT
            Not After : Nov 29 02:00:12 2026 GMT
        Subject: CN=6d401567-2535-4bf5-96d5-f3fc8864e133
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:92:6e:7f:ce:87:5c:32:b3:d9:38:28:1d:75:
                    54:ab:88:d3:5e:f7:39:12:43:0b:74:6d:fd:d8:77:
                    81:8a:3c:9a:bc:65:39:e3:35:fc:5c:34:27:9b:de:
                    da:ef:9f:d8:0d:ec:5e:33:e8:f1:52:db:91:c3:21:
                    de:6e:58:87:22:77:e0:19:27:38:73:87:51:7f:53:
                    79:f3:02:b8:7f:f2:19:b3:e6:f3:02:a2:04:ca:6a:
                    47:a8:3f:ca:0c:f6:ef:a0:63:17:a9:a5:97:72:e4:
                    d1:4a:b6:2d:1f:b3:8b:47:dc:b7:41:25:1f:7b:71:
                    e6:1e:c0:47:d5:0e:4b:b7:07:e9:57:3e:c8:53:24:
                    62:8d:e7:ea:3a:10:e7:7b:80:a2:f0:1e:7d:c9:8e:
                    72:d6:3e:99:18:a3:fe:6c:27:b4:54:02:f1:88:cf:
                    bf:19:57:2c:b4:a9:88:c6:19:7b:21:de:80:dd:b7:
                    99:3a:83:03:e2:0f:0c:0b:87:01:d1:f2:99:49:44:
                    c8:be:86:83:70:e8:da:e2:85:c4:5a:bc:87:e2:4e:
                    ad:21:ad:95:9f:09:83:37:ac:66:2a:b8:53:fd:c2:
                    29:f1:76:a2:fb:3a:d4:19:9e:89:f0:52:13:4d:9f:
                    02:b7:d7:96:b1:f9:0f:40:ae:b5:44:4b:45:23:f4:
                    de:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:57:E0:EB:1C:7D:EF:A1:DB:79:4C:EA:40:7B:BB:A4:C5:39:7E:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dfe7d943-0023-3e9e-b3c8-6e4bc966aaff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.76.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:9c:45:69:4a:b1:2f:88:d9:25:d8:27:d0:c9:20:88:42:7d:
         44:3b:b2:e1:ed:c3:08:ad:0f:b0:65:4e:5b:0b:bf:47:df:3f:
         ff:d5:c9:98:f2:3e:e5:57:7b:f9:0c:31:c6:76:cc:b5:88:fa:
         a4:da:3e:26:d6:a2:32:cf:ea:4d:7d:58:04:a4:e5:8a:f7:f4:
         83:40:29:a7:16:85:4f:f9:10:89:12:9b:dd:e4:a8:e3:86:15:
         75:0b:45:08:dd:16:82:34:00:f9:22:e5:c2:ac:a7:be:b1:1d:
         fb:12:5f:fa:0b:5f:dd:b0:72:00:a7:9c:ea:4a:96:88:53:16:
         93:c5:bf:7c:7f:7a:db:de:9e:ed:76:00:cc:f5:65:21:ca:84:
         85:d5:e3:28:7c:83:8d:40:97:ec:31:df:f4:19:66:a1:08:69:
         f6:d6:5a:7f:74:bc:1a:77:c1:31:4f:b0:94:a6:0b:d6:cd:c6:
         9c:59:f2:16:a8:bf:3f:ac:f8:8c:16:01:1b:9e:e3:a6:99:f1:
         7f:2d:07:11:e8:06:56:79:8f:7d:d6:85:25:e3:f0:4e:eb:17:
         98:26:5e:77:71:ee:04:d7:96:37:31:b6:fe:1f:cb:1e:f8:4d:
         75:60:af:7f:38:81:05:26:0d:c7:06:ae:3f:19:a4:08:72:03:
         38:ed:9d:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 23:21:03 2026 by rpki-client