Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5630ca60-19d7-3495-a66d-c32cca5b744a.roa
File:                     5630ca60-19d7-3495-a66d-c32cca5b744a.roa (raw, json)
Hash identifier:          hYb49S/WhnyRKTl8iZe8/XHpV3SbYCxHMrzuDNOgDPM=
Subject key identifier:   25:B8:75:2A:D6:5E:25:5E:22:C7:CA:F0:C3:F3:46:06:01:5A:D0:97
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E61456F556C40324AEF49F300
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5630ca60-19d7-3495-a66d-c32cca5b744a.roa
Signing time:             Fri 03 Jul 2026 21:00:11 +0000
ROA not before:           Fri 03 Jul 2026 21:00:11 +0000
ROA not after:            Thu 01 Oct 2026 21:00:11 +0000
asID:                     396540
IP address blocks:        199.7.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:61:45:6f:55:6c:40:32:4a:ef:49:f3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  3 21:00:11 2026 GMT
            Not After : Oct  1 21:00:11 2026 GMT
        Subject: CN=6d6954f9-9136-46a3-b441-adfe904cda7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:7c:d8:e7:b2:3b:b4:30:d5:01:9c:d1:39:75:
                    be:7c:3c:9d:73:85:4b:38:eb:b2:ba:91:a5:1c:90:
                    b9:14:13:94:72:7a:20:e2:a5:b1:ba:13:7b:20:55:
                    49:9d:79:5e:b7:0b:92:f3:6c:1e:a9:96:c5:a8:5c:
                    85:36:bf:d6:c0:d8:c2:10:f2:b0:98:7c:39:55:14:
                    c0:c5:c5:c6:77:59:3f:07:dc:16:67:24:e6:c4:ad:
                    2e:65:8e:83:91:a2:a1:88:e7:48:e2:9e:01:8f:b0:
                    98:3b:1b:14:f0:b3:e3:50:03:e4:da:93:76:f4:80:
                    cb:d1:a0:8f:92:57:79:ee:11:b7:51:c9:93:86:76:
                    d3:f9:dd:6d:c7:ae:02:27:2f:04:cf:e4:6b:5b:f5:
                    a7:e8:1a:47:09:63:c0:be:6d:78:dc:c0:92:f9:f4:
                    40:7c:a6:73:e5:40:a5:7f:84:ed:0d:3c:5b:55:e7:
                    8a:a9:40:59:a0:8b:ea:0d:da:5d:3c:2d:48:67:66:
                    3c:ca:2c:b3:c0:28:2e:06:eb:c5:ab:94:c9:74:ac:
                    ba:19:a3:20:a8:0a:31:b5:9a:e3:52:01:df:c4:dd:
                    a7:14:64:cf:6b:22:56:33:41:7d:63:6c:75:c0:15:
                    9b:18:6c:e9:e2:b0:32:c3:c6:eb:f4:db:cf:6e:2c:
                    7a:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:B8:75:2A:D6:5E:25:5E:22:C7:CA:F0:C3:F3:46:06:01:5A:D0:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5630ca60-19d7-3495-a66d-c32cca5b744a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.76.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:db:a8:34:f8:21:14:fe:3f:5b:87:db:e4:d5:c5:c3:47:7f:
         67:e2:6c:d3:ac:54:7a:05:f1:62:20:2b:67:d6:53:f4:4c:c1:
         15:fc:02:ac:62:29:fa:3c:57:6c:7a:ba:5b:c8:4b:79:24:66:
         0e:ca:a7:7a:fc:98:51:87:56:e8:aa:3b:47:1e:70:a5:fc:51:
         5c:97:56:97:99:cf:87:d5:1a:37:c4:c1:9a:cf:a8:4c:89:92:
         18:fe:eb:b4:a9:17:0c:5b:16:8a:c1:34:35:74:f9:d6:40:62:
         bb:96:13:23:eb:3b:f4:45:67:88:4b:23:12:63:b5:37:7f:e5:
         2b:43:02:1f:90:c0:c5:c6:14:5e:d6:3c:1d:f0:69:41:1f:51:
         cc:a1:c3:88:be:f2:28:7f:ed:ab:7b:b3:4c:63:03:1c:ec:e4:
         b8:31:c3:02:e4:55:29:f6:37:4b:4b:5c:5a:c7:2d:b5:21:4e:
         85:db:ab:5f:78:14:b6:ad:c5:43:87:e9:ea:ef:cc:16:62:03:
         5c:3a:16:0e:21:cd:91:7b:c0:64:98:86:73:55:4b:8f:ce:57:
         c1:ce:2c:c1:07:89:e2:9c:3e:6a:96:80:31:b8:d0:21:86:ca:
         32:9d:63:91:13:5f:7a:c5:e8:e3:d3:7f:9f:52:7e:87:6f:24:
         9e:61:5b:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:40:32 2026 by rpki-client