Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0968e370-598c-3dcf-a0bd-c23c8c325968.roa
File:                     0968e370-598c-3dcf-a0bd-c23c8c325968.roa (raw, json)
Hash identifier:          wkO12yiKO0Div2/LOvFTEV9DzmkBmrS48dqeqZFpnOw=
Subject key identifier:   94:05:27:C2:A4:3C:21:F5:8A:09:3F:6F:06:AA:F7:8D:2C:7F:76:35
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F03A76FD0EA19731FF81B9720
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0968e370-598c-3dcf-a0bd-c23c8c325968.roa
Signing time:             Mon 31 Aug 2026 01:00:12 +0000
ROA not before:           Mon 31 Aug 2026 01:00:12 +0000
ROA not after:            Sun 29 Nov 2026 02:00:12 +0000
asID:                     396613
IP address blocks:        199.7.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:03:a7:6f:d0:ea:19:73:1f:f8:1b:97:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 31 01:00:12 2026 GMT
            Not After : Nov 29 02:00:12 2026 GMT
        Subject: CN=e17307f8-f3b2-4ce2-915b-9c806247f35f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e0:44:38:72:5f:3e:ca:8a:1f:48:0e:6e:d0:
                    83:fa:25:90:93:a8:20:fe:53:1a:4b:fb:e7:1c:ff:
                    9d:b5:f5:ef:55:90:32:2e:a6:da:c7:d7:79:2a:b0:
                    54:cc:11:0a:bf:9e:15:f3:ba:ce:30:d7:6e:e6:5d:
                    05:4e:c6:be:6a:a2:82:a2:a1:95:0c:bf:a3:61:50:
                    be:79:9d:e0:54:97:eb:53:5e:31:6f:64:41:94:ed:
                    1c:d2:81:94:0d:f5:07:ed:29:f4:5f:35:c8:ba:68:
                    95:bb:be:70:6f:db:b6:ca:88:a4:6a:88:be:60:8d:
                    a3:c8:9e:a9:00:80:bd:5b:99:9c:3e:da:02:5d:bb:
                    56:2a:09:9d:74:56:d0:44:bc:90:5c:35:80:fb:c0:
                    53:f6:44:76:ba:dd:36:5c:e1:79:7d:7e:8a:37:a3:
                    f3:2a:9e:df:03:a5:5f:2b:84:0a:3a:10:69:20:55:
                    b4:5e:70:86:0f:1c:d2:1f:72:d0:0b:e1:19:a9:50:
                    6d:e1:04:ec:fd:2e:1f:b1:1c:17:28:47:9a:5a:20:
                    05:64:03:67:01:de:84:34:db:30:23:b6:e7:c7:a2:
                    c2:bf:f6:26:c1:73:53:43:1c:62:ea:f4:38:0d:25:
                    8a:62:2a:c1:17:3a:8f:1c:af:08:3f:ab:55:7a:b3:
                    af:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:05:27:C2:A4:3C:21:F5:8A:09:3F:6F:06:AA:F7:8D:2C:7F:76:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0968e370-598c-3dcf-a0bd-c23c8c325968.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.76.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:a2:f1:29:5a:9d:c6:12:72:0c:26:af:30:e2:65:78:8a:f7:
         52:e0:3d:fc:b7:f4:fd:19:78:d2:f2:aa:6a:48:a9:0e:df:ba:
         37:c1:3c:8d:55:a8:39:ab:7b:7f:47:b2:ec:41:64:5f:79:16:
         63:72:0a:5c:cc:42:e7:d6:bf:6f:6d:1a:a6:5e:95:b9:01:1a:
         35:cb:ef:4f:1e:56:54:e8:96:d8:be:76:cc:8a:31:2c:f6:ba:
         bd:46:7a:d8:eb:f6:58:29:92:4e:ba:a5:05:ac:fe:bb:c4:90:
         57:e3:35:f9:cb:6c:ed:97:92:58:96:3c:1a:34:50:b4:03:bd:
         80:93:70:3e:1a:b0:38:5a:44:c8:8a:cf:64:87:3e:aa:84:01:
         92:e0:11:22:25:d4:1a:be:d1:d1:8e:52:ef:85:1b:0d:4c:be:
         ee:b9:e5:30:2b:cb:d2:07:e5:f9:82:20:62:3f:5d:d0:41:54:
         e9:0c:82:09:eb:06:4b:0c:91:7d:a4:94:ff:b3:6c:65:1e:dc:
         9f:ba:09:f5:a5:00:ba:85:7e:93:a6:b6:e8:f8:df:94:aa:5a:
         3a:09:e7:38:96:53:84:86:91:06:3b:c5:f5:a6:ca:74:32:b7:
         77:ec:d4:ee:4f:85:b6:a9:9a:d8:4d:bb:bb:ee:6f:54:d1:16:
         16:ac:0a:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 03:25:57 2026 by rpki-client