Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2cb168b8-6b23-32d0-a0b7-6a4f079b2d03.roa
File:                     2cb168b8-6b23-32d0-a0b7-6a4f079b2d03.roa (raw, json)
Hash identifier:          WrORV8+91bhZX+gkgKuVLhqPtua3XbpzihJE35WeM/A=
Subject key identifier:   D1:05:C1:A1:7F:17:8A:01:AD:85:35:F2:D5:C0:67:5E:D0:AA:FD:C5
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E614575C56BFE4408FDD92B00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2cb168b8-6b23-32d0-a0b7-6a4f079b2d03.roa
Signing time:             Fri 03 Jul 2026 21:00:11 +0000
ROA not before:           Fri 03 Jul 2026 21:00:11 +0000
ROA not after:            Thu 01 Oct 2026 21:00:11 +0000
asID:                     396567
IP address blocks:        199.7.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:61:45:75:c5:6b:fe:44:08:fd:d9:2b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  3 21:00:11 2026 GMT
            Not After : Oct  1 21:00:11 2026 GMT
        Subject: CN=59c10874-bae8-497b-af1b-67e7208b55c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:51:cc:42:e1:3f:e4:e9:12:40:e2:ba:fc:3d:
                    de:9d:78:c5:a9:34:da:d7:01:cb:cb:3d:dc:9d:d6:
                    5d:d3:eb:57:5f:bd:88:ad:1b:3a:33:26:7d:c3:ac:
                    40:75:23:a6:32:dc:ca:f5:ec:49:77:1f:d8:37:cc:
                    0e:a6:31:e2:44:ad:ab:c1:6a:d8:6d:64:1b:e1:93:
                    65:85:f5:e5:5c:05:d9:6e:9e:19:d6:3a:da:7b:cd:
                    15:22:40:bf:65:7b:b7:7d:14:5f:55:bc:3f:5a:aa:
                    92:c3:2a:a1:13:a0:27:4d:4a:bc:93:95:4e:92:c3:
                    e7:59:27:80:b6:d5:3c:b6:8e:47:5a:1e:33:94:14:
                    c3:ee:17:2c:f9:09:f3:ef:55:04:7e:3e:0a:c5:ce:
                    b4:03:61:0c:d2:df:37:31:8c:36:19:44:1c:37:c5:
                    29:8d:3f:36:1c:d1:25:7c:2b:a9:2b:5f:86:ae:a2:
                    24:76:64:5e:06:5e:9c:43:e0:64:3e:99:d7:06:62:
                    8a:41:ab:11:5f:2c:ab:8f:72:a8:e9:12:a7:4d:c8:
                    b1:b2:63:c0:37:d8:b6:7d:2d:e5:31:6c:0f:97:4f:
                    80:84:e3:77:41:76:5d:95:68:5d:16:17:5d:85:fb:
                    a5:d9:c2:7c:04:6c:52:6f:45:e3:59:56:8f:6c:3f:
                    00:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:05:C1:A1:7F:17:8A:01:AD:85:35:F2:D5:C0:67:5E:D0:AA:FD:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2cb168b8-6b23-32d0-a0b7-6a4f079b2d03.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.76.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:62:71:19:bd:73:3b:f4:ba:94:0a:48:0f:a9:6e:4b:34:53:
         7f:0c:42:a7:5e:5d:c4:86:eb:ba:ca:c6:eb:3a:33:0c:7c:1c:
         1d:ce:90:e1:06:7a:de:eb:56:5b:42:29:bb:af:d4:05:73:ed:
         44:2c:c4:10:9b:8b:6b:4f:45:2f:5d:4f:54:44:84:6c:ac:99:
         a2:93:79:83:02:09:1d:eb:dd:06:69:7a:59:67:a8:aa:54:ea:
         5d:b1:0d:cb:6c:bd:a3:05:dd:b4:07:4a:94:57:e6:e2:c5:ee:
         ca:36:c3:3f:88:f9:35:0a:b8:2e:6e:66:1f:29:5a:2e:af:dd:
         d7:5f:aa:b5:a9:6c:dc:8b:78:2b:e0:35:53:d1:13:e4:a1:f8:
         0f:29:5a:0b:a2:ba:0b:df:f7:a4:cb:fc:4d:4c:0e:44:a8:3a:
         63:7a:ed:f6:0c:ef:ac:e5:fa:b7:02:4c:ee:00:d2:a1:8b:1c:
         3e:79:c8:ed:c2:98:35:e1:88:ef:6b:f5:6e:22:18:1c:74:fb:
         14:20:43:0a:e7:ad:44:03:29:ab:c4:63:e1:9f:16:2d:81:ef:
         21:54:da:d7:79:76:c1:45:50:12:3a:2c:63:20:68:04:97:b5:
         72:76:5d:4b:cf:6f:f6:09:1b:88:9c:0f:3b:ba:54:5d:53:e4:
         87:6c:18:0c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5hRXXFa/5ECP3ZKwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDcwMzIxMDAxMVoXDTI2MTAwMTIxMDAxMVowLzEtMCsGA1UEAxMk
NTljMTA4NzQtYmFlOC00OTdiLWFmMWItNjdlNzIwOGI1NWM4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4FHMQuE/5OkSQOK6/D3enXjFqTTa1wHLyz3c
ndZd0+tXX72IrRs6MyZ9w6xAdSOmMtzK9exJdx/YN8wOpjHiRK2rwWrYbWQb4ZNl
hfXlXAXZbp4Z1jrae80VIkC/ZXu3fRRfVbw/WqqSwyqhE6AnTUq8k5VOksPnWSeA
ttU8to5HWh4zlBTD7hcs+Qnz71UEfj4Kxc60A2EM0t83MYw2GUQcN8UpjT82HNEl
fCupK1+GrqIkdmReBl6cQ+BkPpnXBmKKQasRXyyrj3Ko6RKnTcixsmPAN9i2fS3l
MWwPl0+AhON3QXZdlWhdFhddhful2cJ8BGxSb0XjWVaPbD8AgQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNEFwaF/F4oBrYU18tXAZ17Qqv3FMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMmNiMTY4YjgtNmIyMy0z
MmQwLWEwYjctNmE0ZjA3OWIyZDAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwdMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJFicRm9czv0upQKSA+pbks0U38MQqdeXcSG67rKxus6Mwx8HB3OkOEG
et7rVltCKbuv1AVz7UQsxBCbi2tPRS9dT1REhGysmaKTeYMCCR3r3QZpellnqKpU
6l2xDctsvaMF3bQHSpRX5uLF7so2wz+I+TUKuC5uZh8pWi6v3ddfqrWpbNyLeCvg
NVPRE+Sh+A8pWguiugvf96TL/E1MDkSoOmN67fYM76zl+rcCTO4A0qGLHD55yO3C
mDXhiO9r9W4iGBx0+xQgQwrnrUQDKavEY+GfFi2B7yFU2td5dsFFUBI6LGMgaASX
tXJ2XUvPb/YJG4icDzu6VF1T5IdsGAw=
-----END CERTIFICATE-----
Generated at Fri Jul 24 21:05:07 2026 by rpki-client