Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/12267abf-3b74-32b4-ad5d-56e91bf5e874.roa
File:                     12267abf-3b74-32b4-ad5d-56e91bf5e874.roa (raw, json)
Hash identifier:          yES7ybsyelF7UaAuHyLNBuX9zpNdA5m8zCECTibNLxA=
Subject key identifier:   CF:D5:6C:C6:AF:08:CD:69:70:2A:7D:B1:00:6C:01:0F:F6:FF:75:A2
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E61456F5FB1CCBE3ED226F2C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/12267abf-3b74-32b4-ad5d-56e91bf5e874.roa
Signing time:             Fri 03 Jul 2026 21:00:11 +0000
ROA not before:           Fri 03 Jul 2026 21:00:11 +0000
ROA not after:            Thu 01 Oct 2026 21:00:11 +0000
asID:                     396584
IP address blocks:        199.7.76.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:61:45:6f:5f:b1:cc:be:3e:d2:26:f2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  3 21:00:11 2026 GMT
            Not After : Oct  1 21:00:11 2026 GMT
        Subject: CN=daf4a99f-e315-407e-95f8-2fa8b3fd8d30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:b7:8c:e4:dd:a4:8b:d4:90:90:a7:bb:10:d6:
                    0d:83:3d:2f:29:44:3b:41:ce:5a:63:4b:a6:1d:8c:
                    95:a1:77:fa:99:eb:e0:3b:94:4f:30:16:ec:dd:d4:
                    67:74:5d:08:5f:47:88:96:6a:03:b6:dd:de:7e:7c:
                    fd:c5:9d:f0:a3:f2:07:2f:c9:74:2f:0b:84:3e:82:
                    a4:5e:8e:dc:51:29:59:44:84:ab:bf:d2:d6:90:f6:
                    05:a1:b5:71:38:28:61:45:19:93:e3:d5:29:a6:f8:
                    e0:ea:9b:c7:f6:cf:70:6d:0f:6c:5a:d6:26:89:3c:
                    7c:b7:59:32:9d:fa:e2:81:6e:6a:d8:65:b9:96:8e:
                    88:ea:e1:35:55:29:3f:72:4f:de:33:ee:d4:a6:0b:
                    b5:f9:dd:29:52:d9:a1:d7:bd:b8:df:7a:10:67:a8:
                    12:65:98:6b:02:61:bb:da:ee:47:9b:cb:59:ec:40:
                    b7:18:67:45:8b:a2:c7:e0:f2:e2:0b:1b:e6:3d:8d:
                    99:3d:07:50:81:27:41:4f:20:e2:a5:c0:07:9f:4e:
                    2c:7d:5c:3e:00:a6:80:20:e8:b0:4d:fc:ed:55:4f:
                    87:4b:df:80:f2:0d:55:6d:9e:e4:89:2f:77:a1:f3:
                    dd:e7:14:ed:7a:c8:b7:a9:92:1f:79:c2:aa:3e:a5:
                    c7:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:D5:6C:C6:AF:08:CD:69:70:2A:7D:B1:00:6C:01:0F:F6:FF:75:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/12267abf-3b74-32b4-ad5d-56e91bf5e874.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.76.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:d8:31:eb:40:62:01:c7:31:f7:3d:08:da:25:c8:32:54:6a:
         b0:a3:c8:69:e4:af:5d:06:02:89:ee:f3:b6:41:ba:f0:20:c1:
         ab:49:f8:c7:12:2e:af:15:10:9d:79:d6:2d:ea:24:e5:38:9d:
         3a:a8:18:86:be:f8:7f:77:74:9b:54:02:1d:0f:b5:11:16:36:
         94:19:cc:a6:8a:d4:6f:26:06:48:18:d0:bc:60:75:52:10:33:
         fb:8d:db:0a:f5:de:87:f2:24:bb:ee:63:fb:56:bd:29:e8:d3:
         20:cb:c9:55:9d:9d:78:01:05:a6:68:fc:11:8f:8a:cb:14:1a:
         9f:54:46:0d:04:f4:63:7a:6a:ba:91:d5:c3:dd:51:d9:83:7d:
         f5:9d:50:2b:96:13:fd:be:15:b1:78:3f:08:ef:42:6d:94:04:
         77:85:60:08:5b:3e:f8:b2:a5:55:ae:ab:1d:e7:49:df:a5:c3:
         47:17:b3:61:17:c0:f4:80:f9:fa:80:dc:59:5d:8d:93:e8:bd:
         ef:2e:b1:80:76:cb:2d:ad:57:09:52:63:21:74:dc:db:23:48:
         ab:b5:db:fd:48:5c:dc:c5:0c:b5:2f:9c:7e:9f:e2:31:f5:e9:
         88:e5:74:78:6d:af:fb:90:a6:55:28:0b:64:05:98:ea:0f:4b:
         7f:63:ca:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:20:09 2026 by rpki-client