Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8a97ccf3-7cfa-3f53-86d5-5d9c08943d8c.roa
File:                     8a97ccf3-7cfa-3f53-86d5-5d9c08943d8c.roa (raw, json)
Hash identifier:          Hva3/TlKcHPctoSJ1xUBfuLmw8KbBqwP9ZX18IZKIxk=
Subject key identifier:   E9:A7:19:3E:36:EC:D7:55:27:BF:CC:7C:F3:EF:E8:E4:76:C0:A5:BE
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E614564B7D5B44A3B71BFF1C8
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8a97ccf3-7cfa-3f53-86d5-5d9c08943d8c.roa
Signing time:             Fri 03 Jul 2026 21:00:11 +0000
ROA not before:           Fri 03 Jul 2026 21:00:11 +0000
ROA not after:            Thu 01 Oct 2026 21:00:11 +0000
asID:                     396826
IP address blocks:        199.7.76.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:61:45:64:b7:d5:b4:4a:3b:71:bf:f1:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  3 21:00:11 2026 GMT
            Not After : Oct  1 21:00:11 2026 GMT
        Subject: CN=6446468b-0541-4ff8-8876-ad41a53052b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:fb:c6:10:af:06:ea:45:0f:c0:cc:e0:ed:f8:
                    96:0b:5c:f7:cc:95:a2:17:60:56:24:2f:81:20:51:
                    ae:db:80:14:a2:fe:ca:c2:9f:45:3c:46:62:13:f8:
                    00:b4:ca:f7:67:bb:b9:d1:4d:de:e1:27:f7:2a:f3:
                    95:ae:ff:ad:5a:59:ab:06:80:b2:71:47:8e:86:9e:
                    22:ae:37:51:e1:72:09:c8:f0:1c:4f:a0:9d:6c:b3:
                    8e:19:f8:42:b5:93:f2:43:e3:17:c2:49:a2:7e:df:
                    01:b7:98:af:7a:7e:bc:f7:80:f9:d1:b8:b5:4d:3f:
                    0a:47:0a:a3:97:9b:9d:a9:dd:36:11:d1:50:12:ef:
                    b3:41:3d:8e:41:2d:4a:07:be:07:3b:f4:b2:c2:1e:
                    33:bb:c7:ea:d3:7e:c7:87:97:c2:b9:ad:7c:3e:41:
                    f7:90:0b:3c:04:f0:a7:c6:23:0f:3a:a8:4f:68:75:
                    be:c4:c7:69:7b:78:ff:cf:6f:83:1d:0d:80:3b:68:
                    e9:5a:60:c9:45:06:b1:ce:9f:c4:a1:73:b5:7d:5f:
                    9c:cc:a4:64:48:f3:5c:b6:a8:34:19:43:31:55:3c:
                    b8:03:f1:55:15:d4:c1:77:b3:b6:ba:f3:32:ec:41:
                    ee:a7:d6:da:d0:3c:eb:08:e3:5d:92:b4:04:82:28:
                    84:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:A7:19:3E:36:EC:D7:55:27:BF:CC:7C:F3:EF:E8:E4:76:C0:A5:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8a97ccf3-7cfa-3f53-86d5-5d9c08943d8c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.76.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:cd:e7:b8:aa:87:00:55:41:83:5d:ec:9f:44:1d:a7:89:62:
         d8:f3:f3:9e:16:18:cf:47:11:14:8c:0c:d1:7e:1c:20:8e:3c:
         c7:7d:75:88:c0:10:f2:d6:c6:17:f1:87:0a:1d:22:af:31:81:
         63:63:28:18:14:df:a7:88:9b:d2:49:4e:42:d0:3c:ac:bb:a3:
         46:11:1d:67:20:62:5c:ce:d5:78:b6:aa:67:52:97:35:c6:41:
         d1:19:0f:b7:32:9d:51:1f:aa:a4:35:f3:aa:ad:d1:a0:b0:2d:
         af:1e:a5:2a:e9:d2:9f:7d:c9:ab:27:ff:72:65:0a:07:d7:89:
         5a:ab:a5:81:d6:5e:2b:18:dd:d2:48:90:35:97:11:74:5d:ad:
         4a:40:53:ba:ea:19:d9:00:e0:71:94:ed:69:69:1a:1d:8f:5f:
         e9:1b:18:28:81:5c:46:49:d1:70:90:69:e9:dd:86:e7:59:82:
         b9:f2:17:29:68:90:3a:37:81:48:e7:fb:a0:27:aa:82:23:10:
         d3:bf:e6:4d:10:5c:d8:1f:d0:73:57:22:f8:7c:58:11:6d:d5:
         00:52:44:b8:34:70:ec:8e:4b:8c:93:8b:c9:ac:e3:28:2b:30:
         28:1a:47:02:88:d5:df:8a:aa:1b:72:4a:a3:bd:b3:bd:58:b1:
         5c:4f:8a:4a
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE5hRWS31bRKO3G/8cgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDcwMzIxMDAxMVoXDTI2MTAwMTIxMDAxMVowLzEtMCsGA1UEAxMk
NjQ0NjQ2OGItMDU0MS00ZmY4LTg4NzYtYWQ0MWE1MzA1MmI2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj/vGEK8G6kUPwMzg7fiWC1z3zJWiF2BWJC+B
IFGu24AUov7Kwp9FPEZiE/gAtMr3Z7u50U3e4Sf3KvOVrv+tWlmrBoCycUeOhp4i
rjdR4XIJyPAcT6CdbLOOGfhCtZPyQ+MXwkmift8Bt5iven6894D50bi1TT8KRwqj
l5udqd02EdFQEu+zQT2OQS1KB74HO/Sywh4zu8fq037Hh5fCua18PkH3kAs8BPCn
xiMPOqhPaHW+xMdpe3j/z2+DHQ2AO2jpWmDJRQaxzp/EoXO1fV+czKRkSPNctqg0
GUMxVTy4A/FVFdTBd7O2uvMy7EHup9ba0DzrCONdkrQEgiiEKwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFOmnGT427NdVJ7/MfPPv6OR2wKW+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOGE5N2NjZjMtN2NmYS0z
ZjUzLTg2ZDUtNWQ5YzA4OTQzZDhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxwdMHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBGzee4qocAVUGDXeyfRB2niWLY8/OeFhjPRxEUjAzRfhwgjjzHfXWI
wBDy1sYX8YcKHSKvMYFjYygYFN+niJvSSU5C0Dysu6NGER1nIGJcztV4tqpnUpc1
xkHRGQ+3Mp1RH6qkNfOqrdGgsC2vHqUq6dKffcmrJ/9yZQoH14laq6WB1l4rGN3S
SJA1lxF0Xa1KQFO66hnZAOBxlO1paRodj1/pGxgogVxGSdFwkGnp3YbnWYK58hcp
aJA6N4FI5/ugJ6qCIxDTv+ZNEFzYH9BzVyL4fFgRbdUAUkS4NHDsjkuMk4vJrOMo
KzAoGkcCiNXfiqobckqjvbO9WLFcT4pK
-----END CERTIFICATE-----
Generated at Fri Jul 24 11:25:23 2026 by rpki-client