Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b11e36cf-64f6-3459-8b34-4512aabd0b3b.roa
File:                     b11e36cf-64f6-3459-8b34-4512aabd0b3b.roa (raw, json)
Hash identifier:          bgaN8riE7B8Hr8B5RR7SvS6Ifo9CtOIYV2psR4kvqpA=
Subject key identifier:   3D:0D:C2:20:89:1A:14:C8:06:30:A3:F4:72:38:2B:33:D6:B1:CC:28
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E61456FB2A48C0CA625E3B200
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b11e36cf-64f6-3459-8b34-4512aabd0b3b.roa
Signing time:             Fri 03 Jul 2026 21:00:11 +0000
ROA not before:           Fri 03 Jul 2026 21:00:11 +0000
ROA not after:            Thu 01 Oct 2026 21:00:11 +0000
asID:                     396541
IP address blocks:        199.7.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:61:45:6f:b2:a4:8c:0c:a6:25:e3:b2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  3 21:00:11 2026 GMT
            Not After : Oct  1 21:00:11 2026 GMT
        Subject: CN=019d4394-1bc9-454c-9cdd-0533f6348816
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:20:9d:6c:58:2a:7f:7b:fd:f5:0e:05:f0:bb:
                    35:c8:e4:c3:1c:c3:b0:10:6b:9c:6d:ea:5f:9d:b1:
                    66:32:e6:e8:12:a5:bd:a1:24:56:12:d3:ad:67:73:
                    fb:53:16:a4:40:cc:2c:c7:84:f2:bd:3e:82:7a:f7:
                    b4:af:e8:29:07:be:05:b3:10:5d:e3:ca:62:a0:7b:
                    d3:f8:18:55:05:48:97:62:f1:0a:f4:f9:07:38:e3:
                    2f:8b:e5:f9:38:7e:2e:79:31:d7:92:e0:7c:d1:b8:
                    e4:bb:76:75:40:d7:54:0d:2f:66:dc:3c:5b:42:e4:
                    99:38:0f:d3:ec:48:20:d2:50:bc:19:96:a8:78:83:
                    eb:70:74:5b:26:bc:3b:a0:66:75:0a:e3:3a:4e:a5:
                    83:b2:70:a8:b2:52:00:8b:6e:4f:c9:9e:18:70:ea:
                    e2:b0:52:09:c8:f4:f7:1c:32:c2:15:3d:6c:e3:f1:
                    38:4a:c9:6b:3d:0b:56:f7:06:5b:bf:9b:fe:b4:10:
                    c5:f8:96:1f:5d:f5:40:3f:aa:f8:17:e1:cd:f7:97:
                    35:46:1b:5c:95:b2:ab:a1:41:77:6c:2f:b6:51:72:
                    70:3e:b3:80:da:5e:d8:85:80:d2:d0:b6:42:2c:f0:
                    6f:8b:5f:12:61:d1:76:4f:b5:91:1e:93:df:f6:95:
                    a1:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:0D:C2:20:89:1A:14:C8:06:30:A3:F4:72:38:2B:33:D6:B1:CC:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b11e36cf-64f6-3459-8b34-4512aabd0b3b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.76.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:45:9a:8a:c1:1a:46:fc:be:f1:4c:17:91:d6:17:c8:d7:8e:
         40:dd:59:0f:a4:09:4f:b0:47:b9:45:65:06:12:56:2a:39:cf:
         18:c1:62:a5:98:4f:0a:3c:ae:c8:d3:ff:65:4a:b4:0b:aa:bf:
         52:0c:de:e9:a2:39:71:c0:d0:e7:19:ef:50:4b:7a:5d:5f:bc:
         75:ca:d7:91:9e:bb:2d:42:e3:33:18:74:c1:db:51:8b:e7:eb:
         3f:5b:ef:fd:8a:da:48:bb:57:3e:a9:76:4f:7a:ff:df:c7:5e:
         2e:8f:d6:84:fa:7c:9f:c8:e0:de:18:2e:96:76:89:ca:da:96:
         98:a8:a4:38:81:54:b7:0e:d6:ff:83:07:21:dd:52:3b:71:48:
         96:67:b5:7a:c4:45:56:4a:85:db:8e:c0:a4:a3:35:e8:81:fe:
         2a:fd:30:3c:17:08:7a:42:09:9c:11:2e:15:87:da:47:54:99:
         cf:44:5a:1e:15:df:91:d8:26:5b:9a:b9:8c:da:c2:4f:c8:0d:
         f4:74:d1:e2:e0:5d:aa:8b:56:ba:13:7f:db:01:37:18:68:89:
         ad:86:5f:14:48:fa:25:58:5d:ae:85:58:12:79:7e:67:9f:84:
         59:1f:83:db:dd:aa:2f:db:22:03:4c:41:aa:f4:af:9a:8e:76:
         5d:bd:41:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:31:08 2026 by rpki-client