Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/765b65be-4502-399f-b498-c5ab9f245837.roa
File:                     765b65be-4502-399f-b498-c5ab9f245837.roa (raw, json)
Hash identifier:          1AaIKHU1e7gJBX4jfugsY8FAwOevrgz29Z6Pvs0FBfU=
Subject key identifier:   FB:64:59:4E:CC:3E:5C:2F:D0:77:53:45:26:46:1F:44:4C:5B:32:E1
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F03A8481F796D6B85F38B4FC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/765b65be-4502-399f-b498-c5ab9f245837.roa
Signing time:             Mon 31 Aug 2026 01:00:12 +0000
ROA not before:           Mon 31 Aug 2026 01:00:12 +0000
ROA not after:            Sun 29 Nov 2026 02:00:12 +0000
asID:                     397205
IP address blocks:        199.7.76.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:03:a8:48:1f:79:6d:6b:85:f3:8b:4f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 31 01:00:12 2026 GMT
            Not After : Nov 29 02:00:12 2026 GMT
        Subject: CN=9bba1ad9-db13-4313-a3fa-2dc55f42e672
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:eb:33:71:ce:c4:d3:8c:60:03:76:ee:3f:a1:
                    ed:6b:dd:fd:65:eb:55:41:e8:66:bf:ad:7c:d7:6b:
                    f1:42:65:b8:f2:1f:cf:63:67:04:08:af:81:20:31:
                    d1:7a:65:1d:d7:1c:60:4e:e3:46:84:20:fc:eb:f6:
                    dd:77:18:d9:1f:3a:76:8a:d4:20:3e:55:b9:84:4e:
                    9b:82:b2:3a:e3:95:81:b0:93:64:f1:d8:97:a2:7f:
                    ba:eb:ec:e0:f5:48:07:50:f8:16:a0:0c:7f:fa:df:
                    2f:a7:34:41:74:d6:5e:b1:11:23:59:2b:b2:76:41:
                    97:4e:54:74:c8:73:f6:af:73:b3:e1:1f:c7:e7:b6:
                    81:e9:b9:ca:24:36:75:4f:c4:b5:34:9d:78:bf:13:
                    73:28:57:7d:4a:04:90:d7:54:20:b3:2e:01:90:82:
                    df:bd:37:69:d4:6c:1f:05:0c:37:25:fe:67:6e:51:
                    0b:82:69:60:2e:93:5c:cd:0b:a9:d8:de:42:4b:aa:
                    06:f4:11:bf:c5:af:21:8d:51:dc:41:d2:49:b4:3a:
                    34:ee:c1:46:6d:82:1a:b6:94:f3:02:17:7d:2f:3d:
                    c6:ec:86:5b:ad:5e:28:f9:e6:bb:49:ae:a7:5b:42:
                    09:43:90:23:f2:01:fe:65:61:e0:ec:02:e2:5b:31:
                    66:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:64:59:4E:CC:3E:5C:2F:D0:77:53:45:26:46:1F:44:4C:5B:32:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/765b65be-4502-399f-b498-c5ab9f245837.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.76.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:28:41:89:93:1c:80:49:32:aa:14:dd:9a:25:86:d8:eb:97:
         3f:d6:a3:86:ea:e0:22:da:43:0a:10:3c:60:d6:68:b1:1f:f3:
         d4:1f:cf:c4:b2:4b:c1:c7:5f:10:49:49:4f:f3:32:5f:19:f8:
         2b:52:62:35:77:ab:63:7c:bf:a7:c3:b1:5f:2a:95:d7:38:08:
         99:80:b4:83:9c:e2:25:40:4d:13:a6:4a:40:66:14:2c:00:bb:
         f7:c6:61:4c:83:76:63:37:b5:a4:c8:b5:65:d7:9f:5a:fe:75:
         b3:de:aa:5f:53:88:34:e5:9e:d4:b4:7e:d3:2f:49:ec:e5:2a:
         33:1a:19:50:2d:ff:cc:ba:bc:c3:ad:c9:da:90:a3:99:b5:b9:
         17:a1:99:d1:1c:1b:4b:d0:8d:86:ca:cc:75:56:9f:f2:3a:52:
         54:d4:6c:5e:58:21:3d:97:d8:b1:f1:18:57:73:75:3b:f2:e6:
         b9:82:a1:d4:6f:d8:88:24:80:89:14:24:88:29:c6:ff:6c:03:
         87:09:1e:ed:8a:c7:25:4a:12:cb:2d:70:fd:ba:2a:9e:dc:b4:
         98:29:9a:a5:b1:61:fa:6b:c4:12:0b:8b:e3:47:f0:8a:3d:8f:
         4d:12:2a:cc:0e:af:7b:29:a4:7e:66:b0:a3:29:44:a5:83:c9:
         f2:cc:f8:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 22:57:00 2026 by rpki-client