Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c76fd77d-c00f-3ec0-9574-4a9214c4d8ca.roa
File:                     c76fd77d-c00f-3ec0-9574-4a9214c4d8ca.roa (raw, json)
Hash identifier:          Q4ovCEWNuiCpSo1W6ICkTVr/U7QgD6wEi1QbD1/kWT0=
Subject key identifier:   67:A7:B6:17:DF:A0:0D:94:2A:6A:98:D5:EB:26:A9:83:12:45:E6:7A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E61456482364E6E68BDC60380
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c76fd77d-c00f-3ec0-9574-4a9214c4d8ca.roa
Signing time:             Fri 03 Jul 2026 21:00:11 +0000
ROA not before:           Fri 03 Jul 2026 21:00:11 +0000
ROA not after:            Thu 01 Oct 2026 21:00:11 +0000
asID:                     396551
IP address blocks:        199.7.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:61:45:64:82:36:4e:6e:68:bd:c6:03:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  3 21:00:11 2026 GMT
            Not After : Oct  1 21:00:11 2026 GMT
        Subject: CN=a7cdee68-2ebe-4d25-9a56-ceb4a0ee15a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:14:47:e7:4a:77:29:e8:59:65:f4:b8:06:a1:
                    e5:38:4d:34:98:b1:fd:c4:39:2b:17:95:5c:1a:4c:
                    54:ab:aa:fd:92:14:4d:33:a8:75:eb:88:e4:c1:16:
                    5c:5c:b9:ad:27:14:d0:8f:ad:8b:59:85:10:76:8a:
                    86:cd:f3:a9:45:a2:8b:aa:06:2d:60:90:95:4a:dd:
                    5f:4c:15:b5:75:81:55:ca:09:98:86:a9:0a:8b:52:
                    44:55:0d:c7:f1:36:f7:2d:8e:4e:5d:c6:bd:2d:82:
                    c3:ca:b0:10:a6:17:75:13:52:c1:ff:47:36:9e:b2:
                    81:a9:23:e8:18:84:0d:1e:2f:0e:44:3b:56:c5:40:
                    d5:48:1c:2c:b0:3b:ec:9a:a6:af:c8:e9:af:06:a3:
                    45:f3:02:b7:62:87:35:fe:5f:46:c4:9f:0f:b1:76:
                    6f:57:80:3b:44:90:05:e6:74:cd:93:e6:f1:aa:c1:
                    30:e7:35:69:96:80:a2:17:6e:e1:f8:8a:8a:35:77:
                    25:2f:ba:d2:92:aa:32:da:5f:90:11:fb:84:93:12:
                    9d:72:90:22:24:07:44:9f:ea:93:e0:fb:38:78:bd:
                    68:44:37:ad:e2:e3:c2:e1:ec:6f:8f:82:9b:36:a6:
                    17:11:eb:92:05:2e:5a:64:ad:d3:8d:59:37:2f:2c:
                    2a:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:A7:B6:17:DF:A0:0D:94:2A:6A:98:D5:EB:26:A9:83:12:45:E6:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c76fd77d-c00f-3ec0-9574-4a9214c4d8ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.76.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:84:ae:9e:9f:ea:4e:ff:b7:b9:ff:f2:91:08:df:d0:b6:dd:
         99:53:c6:c1:a8:db:ee:00:cd:52:39:68:8d:9f:25:9a:bd:f0:
         8b:ec:95:a8:b6:dd:24:f4:67:a7:92:b3:c6:f2:d6:a5:d5:1a:
         10:4f:e0:ea:ae:d8:87:2d:9a:28:ae:03:d6:0a:8f:19:49:c6:
         38:b1:a6:49:b7:8c:3e:26:b2:7f:1a:d4:a9:d4:72:4a:d4:74:
         54:da:58:cd:48:d3:d0:9c:12:3b:14:6d:d9:f7:cf:fc:51:8b:
         c9:ed:e7:a2:01:9c:63:8c:35:df:5a:c5:28:b4:6d:ed:b5:55:
         c3:fb:77:07:76:e6:26:8a:aa:0a:50:df:cd:e5:a3:07:c7:93:
         4c:eb:fe:01:7e:be:43:f0:1d:13:89:94:a0:b2:6c:51:89:56:
         ec:7a:0d:77:3b:47:d7:dc:e3:db:5e:10:d3:37:f2:4a:12:33:
         e8:d6:60:18:1e:f2:9d:ef:6a:57:5c:5a:20:3a:e3:88:79:05:
         b1:da:76:32:d2:c3:91:d2:b6:71:7d:db:5e:06:ed:90:76:07:
         ae:e1:1e:98:a2:ec:55:0f:d8:66:b7:bc:0c:0e:6b:7c:a6:48:
         46:c4:59:5e:03:84:22:e6:43:9c:28:07:d2:4a:ad:4f:3e:49:
         90:de:57:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:27:24 2026 by rpki-client