Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/52d6bae4-f83f-3c5d-972f-d0e6a7d66a4e.roa
File:                     52d6bae4-f83f-3c5d-972f-d0e6a7d66a4e.roa (raw, json)
Hash identifier:          DyEIvvGdeqjcVB5q6sqsleIuxsvl7JbSwX1yTFg9XC4=
Subject key identifier:   2C:8E:B3:CF:DE:EB:EE:29:BB:FC:5B:89:2C:F8:C3:4A:4B:DE:E3:2E
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E61456CFF7A2B855AE9034100
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/52d6bae4-f83f-3c5d-972f-d0e6a7d66a4e.roa
Signing time:             Fri 03 Jul 2026 21:00:11 +0000
ROA not before:           Fri 03 Jul 2026 21:00:11 +0000
ROA not after:            Thu 01 Oct 2026 21:00:11 +0000
asID:                     397197
IP address blocks:        199.7.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:61:45:6c:ff:7a:2b:85:5a:e9:03:41:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  3 21:00:11 2026 GMT
            Not After : Oct  1 21:00:11 2026 GMT
        Subject: CN=be7f884e-f78f-4302-a44c-aaee90abc4c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:bc:f3:a1:d0:b8:3b:95:0d:5c:d0:8b:10:fc:
                    ba:31:b5:03:bd:c5:ff:98:44:bf:19:bf:85:56:a5:
                    dd:36:e0:47:43:ed:66:92:77:4f:2b:50:76:84:08:
                    aa:b4:98:bb:be:92:7b:d9:14:d6:53:ce:27:89:a6:
                    c9:63:e1:cc:0c:a8:f2:e6:88:84:b5:1e:cf:b1:81:
                    c3:b1:26:ad:be:b5:68:2d:c6:e7:a2:7f:c6:9f:49:
                    0c:72:09:39:38:ec:f9:f6:f3:b5:be:a1:f1:8d:90:
                    82:b8:9e:9f:c8:79:71:65:60:d9:46:16:2d:dd:de:
                    3b:07:4d:0e:3b:5f:6e:99:fb:96:db:4b:e6:d2:4f:
                    c9:51:01:24:d0:bb:f5:04:24:20:dc:c4:91:16:10:
                    c8:53:76:44:f8:81:a2:17:75:19:20:91:0c:bd:17:
                    15:78:33:a3:68:1a:27:f0:ee:db:5a:5b:2d:3d:0a:
                    02:71:5f:c3:4f:c8:ba:86:8d:06:a3:3a:96:9a:6b:
                    e8:88:2b:3b:e2:90:16:37:fe:77:58:1f:e6:6c:82:
                    cf:c8:cf:b4:47:ad:16:f8:e5:41:6d:b0:fa:b6:77:
                    57:15:31:97:c6:7d:46:28:2f:7e:e6:5f:1f:34:4a:
                    ff:75:c3:06:9b:38:9f:5c:8d:fe:aa:0f:77:b3:0e:
                    91:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:8E:B3:CF:DE:EB:EE:29:BB:FC:5B:89:2C:F8:C3:4A:4B:DE:E3:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/52d6bae4-f83f-3c5d-972f-d0e6a7d66a4e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.76.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:16:d3:00:42:cf:dd:a7:c3:c7:ac:d5:53:ce:ec:89:53:a2:
         1b:84:77:8b:55:59:29:46:68:85:30:63:f3:33:ad:bb:54:e8:
         24:5b:4b:ca:b2:ef:e5:be:fd:fd:83:6e:09:4b:76:8a:db:09:
         52:ea:8e:0f:16:a2:e7:d0:92:0d:52:c5:69:34:f0:a1:f4:f6:
         e5:ee:08:a7:bd:c3:cb:36:10:d0:bf:1a:0f:98:80:4d:6a:31:
         9f:a3:5c:2d:76:96:71:4a:f7:b3:7a:ae:3c:0e:92:16:75:32:
         bb:43:74:ca:77:7e:35:21:80:8f:e5:af:e9:de:75:9e:fa:14:
         93:51:4a:02:5f:c6:fd:42:95:7c:5f:e5:c4:60:39:96:3d:ad:
         bf:25:17:71:fb:53:0c:45:df:f2:71:b3:c7:c2:85:f6:ec:6e:
         06:ee:b4:2a:ea:92:7e:f8:06:c2:9e:a1:6c:b1:bc:95:84:b6:
         53:f0:b8:e0:85:a0:b3:90:2e:1a:71:b5:14:74:9b:81:b9:e9:
         16:97:7e:2f:d4:93:16:72:46:f2:60:48:9d:f4:38:a6:0b:42:
         37:57:de:89:ee:0a:e2:3d:43:72:23:ea:d9:f4:cf:f1:d6:4c:
         40:18:cd:57:a9:f2:4c:28:2c:b6:6d:da:83:d2:e3:00:42:f1:
         2e:77:c5:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:53:10 2026 by rpki-client