Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/953dda8a-0c64-3261-8ea9-35039ba635fb.roa
File:                     953dda8a-0c64-3261-8ea9-35039ba635fb.roa (raw, json)
Hash identifier:          Z8a+eZzopjqW/B3RLhKgXqY7Sg1d7TwgmzR4wkgU5pw=
Subject key identifier:   91:8D:D3:E2:87:FC:38:F0:F0:18:0A:A9:76:52:66:C2:DE:C5:C8:1F
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E61456442338728DF3E743970
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/953dda8a-0c64-3261-8ea9-35039ba635fb.roa
Signing time:             Fri 03 Jul 2026 21:00:11 +0000
ROA not before:           Fri 03 Jul 2026 21:00:11 +0000
ROA not after:            Thu 01 Oct 2026 21:00:11 +0000
asID:                     396544
IP address blocks:        199.7.76.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:61:45:64:42:33:87:28:df:3e:74:39:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  3 21:00:11 2026 GMT
            Not After : Oct  1 21:00:11 2026 GMT
        Subject: CN=6857ef24-8412-4190-a265-139125c33aac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:7a:04:e0:1b:8d:97:d3:74:8d:23:32:51:d8:
                    75:c7:87:37:12:30:de:a6:5c:6b:ee:da:32:e3:8d:
                    bd:79:2e:e3:e6:83:71:63:dc:af:29:3a:c4:84:21:
                    6e:50:80:cc:2c:68:44:4f:9e:2a:be:d7:b4:a8:80:
                    a5:d2:31:82:76:5d:31:24:89:34:e8:19:76:b3:b4:
                    9d:4e:93:38:95:d1:3f:b0:38:9c:0b:ca:8d:20:f8:
                    ea:e9:51:79:60:d6:6b:bc:15:ad:e2:b9:1f:0b:eb:
                    42:fb:21:18:7f:1f:2e:80:66:95:bf:9f:9c:38:09:
                    e8:be:6b:ff:45:c7:c3:de:84:da:a0:e0:32:12:7d:
                    02:b6:ee:3b:0c:26:ce:e6:8e:e4:ac:ba:16:29:3d:
                    fb:04:fb:c4:43:8d:5a:d5:ce:33:34:98:94:1f:9d:
                    07:af:c5:d0:b4:b1:2e:c8:db:e1:3a:b6:14:b9:ec:
                    da:39:f9:15:f1:b4:45:64:67:1e:2c:50:27:02:4a:
                    d1:d5:c9:56:87:f0:41:1b:ee:b3:13:e3:6f:90:c3:
                    78:68:c5:bb:1a:63:c8:3c:32:15:ea:b8:99:8d:11:
                    ab:bc:71:90:b2:f5:74:8b:a2:0b:d9:35:81:c3:32:
                    2f:0e:51:42:43:1a:45:a6:3a:01:c7:0f:4c:fc:25:
                    dc:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:8D:D3:E2:87:FC:38:F0:F0:18:0A:A9:76:52:66:C2:DE:C5:C8:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/953dda8a-0c64-3261-8ea9-35039ba635fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.76.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:6d:e0:25:28:5d:ed:4d:ba:9e:b3:42:cc:1a:04:69:1e:f2:
         39:3d:a9:62:3a:65:49:7e:75:8c:7f:bb:c8:4f:93:57:19:84:
         a0:71:80:e5:05:d2:89:c6:93:78:87:81:62:7b:f4:0c:36:5b:
         ac:30:00:82:53:4c:e9:af:e4:77:a7:4a:01:a6:83:4b:4f:20:
         a7:43:6e:0e:8b:27:ee:51:39:9d:5f:0e:ee:73:ba:99:e0:b6:
         07:73:29:b1:b0:64:00:72:b6:65:25:e2:05:bc:57:30:da:8d:
         76:29:26:bf:36:ea:83:ba:6c:09:fd:29:a6:d5:0a:de:9a:9b:
         37:3a:f8:f5:b8:88:34:5b:2c:b7:f1:a5:e4:a8:d3:be:61:14:
         7c:01:16:32:9e:27:a6:75:54:8a:e3:53:dc:0e:ec:fb:97:b8:
         f2:dc:59:7c:26:17:aa:ab:3d:a8:d6:f6:56:63:4d:f4:de:89:
         2e:fd:8b:06:87:2e:a1:b8:d2:8a:42:ca:24:e3:60:35:c1:ca:
         c2:3c:f5:e6:b9:80:57:f9:7c:1a:e7:c1:d0:2f:72:0f:b0:77:
         0a:61:95:c0:8d:1e:d4:c3:88:ef:05:7b:05:a2:75:61:33:a6:
         e0:ec:07:87:d9:ec:86:ef:da:8c:f0:bc:10:3e:9d:b6:9b:e6:
         ba:d4:1b:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:15:32 2026 by rpki-client