Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/956ff320-73d8-313d-a80d-4400327c5154.roa
File:                     956ff320-73d8-313d-a80d-4400327c5154.roa (raw, json)
Hash identifier:          nKqkpRZxA8dHgL9X/TuNa7Nf81V2Abwj0JinO9KEYaw=
Subject key identifier:   D2:D9:CC:06:A3:56:8D:37:82:B4:0B:78:39:F5:DD:24:4C:73:01:6B
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E61457010F4B71834D7044A10
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/956ff320-73d8-313d-a80d-4400327c5154.roa
Signing time:             Fri 03 Jul 2026 21:00:11 +0000
ROA not before:           Fri 03 Jul 2026 21:00:11 +0000
ROA not after:            Thu 01 Oct 2026 21:00:11 +0000
asID:                     396826
IP address blocks:        199.7.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:61:45:70:10:f4:b7:18:34:d7:04:4a:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  3 21:00:11 2026 GMT
            Not After : Oct  1 21:00:11 2026 GMT
        Subject: CN=adee9fcf-9477-4c20-b963-7201d966bcb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:e5:b1:eb:b2:bb:cd:61:5c:1d:46:88:d5:e9:
                    ba:9a:31:bd:43:c6:d2:c3:7e:bc:89:26:c4:e4:33:
                    34:26:d4:5d:c8:46:02:36:6c:62:fc:19:54:5e:47:
                    83:5a:65:71:d7:04:ec:7c:f6:a2:7b:05:2e:f9:a2:
                    df:41:11:16:7d:18:7a:11:83:35:7b:6f:54:9a:d5:
                    b5:2e:dd:e2:af:d2:50:44:4f:10:23:4b:58:77:58:
                    f0:e8:66:9e:f4:1c:4f:c9:21:87:fa:29:58:a1:f6:
                    a4:35:84:64:f2:27:7d:d5:60:39:fe:f4:c0:1e:22:
                    78:d5:cb:16:ab:fc:35:fe:65:6d:d0:32:9c:f6:ec:
                    8d:3c:d5:df:79:ea:12:96:5b:28:3c:17:43:3f:69:
                    5d:2b:32:3b:19:18:41:43:b5:de:b2:b9:d8:14:74:
                    1a:3d:f0:e3:a3:e9:f4:6d:2b:4c:cd:15:7e:cd:d6:
                    d4:01:41:b6:82:56:85:7d:49:6b:38:49:60:59:73:
                    ab:67:d2:59:8a:b2:74:fd:67:47:76:71:f5:bb:25:
                    c0:85:e6:d6:5f:3f:cc:70:b3:dd:90:5a:86:11:9e:
                    d5:55:84:bb:86:fb:fb:a0:2f:25:81:98:cb:5f:0e:
                    27:f4:82:83:11:11:d9:c1:64:79:21:d1:83:f7:39:
                    09:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:D9:CC:06:A3:56:8D:37:82:B4:0B:78:39:F5:DD:24:4C:73:01:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/956ff320-73d8-313d-a80d-4400327c5154.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.76.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ba:e6:3a:b1:a9:ec:f2:83:f5:48:20:47:9d:5b:a7:6e:ba:fd:
         78:f2:c5:ef:20:ac:a4:d5:c1:c9:7a:46:67:02:99:cc:7f:7d:
         54:ff:9b:f2:ac:f1:ec:e5:81:b9:de:3e:11:2a:43:f9:a1:9b:
         e9:fb:5d:e3:dd:e4:f1:ad:fc:b4:50:3c:d1:8e:e8:ec:6b:aa:
         af:0f:cf:0b:39:8b:f5:93:2e:9e:13:39:08:61:d3:74:9a:7a:
         4e:16:ee:f0:aa:e0:e6:1b:26:73:4c:9a:91:69:fd:d5:0c:5f:
         97:f8:7a:ea:53:6b:8c:64:b2:f5:a5:a0:ab:83:27:70:f5:9d:
         ee:aa:a1:aa:86:fb:08:02:1a:cf:51:cb:be:a3:25:c7:c1:a8:
         3a:5b:2a:3f:81:5e:c1:61:c3:49:30:74:8c:ab:f3:3c:5d:e3:
         cf:61:11:9d:1d:9f:38:15:9d:6d:b3:37:20:4f:05:b7:4d:72:
         5a:9c:3e:e3:f4:7a:c8:c3:d5:cd:5c:10:16:20:de:3f:f9:a4:
         f6:9f:c6:5d:63:9b:19:6c:30:ab:78:67:9d:94:e2:2a:f1:c1:
         99:4a:e6:52:9d:e7:83:16:49:8c:86:dd:8e:56:d1:e1:da:51:
         e4:53:65:bf:8b:60:57:57:75:8d:95:10:21:3a:a7:9d:7c:2b:
         ce:63:8d:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:11:59 2026 by rpki-client