Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fffb3a75-4857-35c7-8f76-62ff04d1e698.roa
File:                     fffb3a75-4857-35c7-8f76-62ff04d1e698.roa (raw, json)
Hash identifier:          9sCORI9+0yn3SDb5RemR3i8Sf+dSUO6OX+rH0jPitIE=
Subject key identifier:   3E:38:39:F7:BA:1D:88:2E:65:B5:F1:46:71:2D:11:FF:46:D7:98:71
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D75D546A8B5F86B32A6D7C560
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fffb3a75-4857-35c7-8f76-62ff04d1e698.roa
Signing time:             Fri 10 Apr 2026 13:00:31 +0000
ROA not before:           Fri 10 Apr 2026 13:00:31 +0000
ROA not after:            Thu 09 Jul 2026 13:00:31 +0000
asID:                     7342
IP address blocks:        199.7.73.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:75:d5:46:a8:b5:f8:6b:32:a6:d7:c5:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 10 13:00:31 2026 GMT
            Not After : Jul  9 13:00:31 2026 GMT
        Subject: CN=b4a8b0af-9383-4a71-888d-e0d116887aba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:5c:72:30:4c:62:5d:a3:e1:b8:1f:aa:4a:0a:
                    0c:e0:a7:0d:62:c8:22:9f:68:bd:8e:0e:f3:88:fe:
                    82:e2:5b:a7:ee:87:9d:61:b4:be:ef:2e:88:db:8e:
                    2c:53:81:ce:c3:0b:3f:de:d0:97:fc:7b:7e:cd:f4:
                    24:20:9d:e9:2f:73:4e:c5:29:4f:84:63:72:c5:b9:
                    73:c0:f0:53:19:68:d3:d5:35:77:62:09:de:e6:a0:
                    f6:95:9f:35:e3:49:18:60:3d:d4:92:7e:f2:c9:e6:
                    46:14:92:24:7d:9e:f2:b3:15:84:fc:5b:c5:0b:bf:
                    9e:68:66:ae:4e:6b:02:fa:f9:fe:b2:c0:ad:52:0d:
                    53:e9:a9:da:b6:0d:52:ee:6f:03:77:3f:1d:cf:15:
                    67:be:a2:38:86:cb:d0:a7:95:aa:9b:e8:64:2c:6c:
                    cd:08:52:59:8b:55:50:97:61:92:40:da:91:8f:74:
                    2a:fd:88:3a:15:98:8c:1b:30:79:a3:99:b4:e4:fe:
                    46:af:0f:c3:f4:2b:26:65:41:9b:1c:87:af:2b:dc:
                    81:2f:bb:17:71:d9:ff:d6:2e:34:5b:84:56:bd:fa:
                    bd:f2:c6:f2:7a:71:5f:82:1d:f7:f9:e2:43:b0:99:
                    b4:7f:47:a4:0c:1c:61:61:af:23:a4:eb:ed:6e:d7:
                    5d:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:38:39:F7:BA:1D:88:2E:65:B5:F1:46:71:2D:11:FF:46:D7:98:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fffb3a75-4857-35c7-8f76-62ff04d1e698.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.73.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:68:d0:fb:c9:52:db:57:d3:3c:2e:e9:07:d4:b9:a9:d0:41:
         91:ea:df:00:67:58:08:46:91:b5:2a:d9:c2:34:f1:d1:cc:d7:
         2a:c1:03:68:d8:10:05:a3:9e:fd:64:57:93:32:54:b8:d3:79:
         2e:d7:01:b9:b2:65:99:22:55:89:bb:26:07:eb:82:38:04:a4:
         ad:57:5d:2b:29:17:bd:f6:6c:50:ec:bd:4e:92:66:f3:32:c9:
         73:22:8d:e4:01:7b:3b:ac:35:50:c3:a4:91:ab:e6:1b:60:e2:
         0a:6e:f5:81:9d:94:2a:68:bd:ed:d2:8b:1d:ea:05:97:2a:49:
         01:a5:49:86:49:3a:39:07:ab:28:e1:d7:e2:d4:ef:e6:66:38:
         ea:e7:d0:12:9d:f9:25:1f:47:26:86:e1:a8:47:c5:76:76:e8:
         d8:fe:fa:17:ec:8a:bc:d8:b9:05:98:45:24:ba:ec:56:54:aa:
         2a:0f:59:98:0d:31:9f:e6:b3:d6:64:e5:ec:dc:84:ed:a6:41:
         db:ed:32:96:66:5c:37:f3:98:c5:33:ed:03:95:31:27:c0:26:
         df:3c:8f:2a:91:cc:3c:3c:1d:af:07:b2:ea:cd:99:90:5b:f5:
         7c:4f:97:b6:ff:a7:7d:c8:7a:5a:95:ac:7a:73:5d:7b:23:da:
         61:87:b9:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:41:13 2026 by rpki-client