Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e96518e8-9ce6-3527-9ee1-3e406059692e.roa
File:                     e96518e8-9ce6-3527-9ee1-3e406059692e.roa (raw, json)
Hash identifier:          094DtkdkypfTgogSreoIl64Blzlw9+fS0OhFFb52Jd0=
Subject key identifier:   88:02:E5:FB:A7:39:A4:6F:98:B0:DE:3F:52:8E:47:DB:F2:B8:19:79
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F03A772A8690F4595F286B102
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e96518e8-9ce6-3527-9ee1-3e406059692e.roa
Signing time:             Mon 31 Aug 2026 01:00:12 +0000
ROA not before:           Mon 31 Aug 2026 01:00:12 +0000
ROA not after:            Sun 29 Nov 2026 02:00:12 +0000
asID:                     25485
IP address blocks:        199.7.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:03:a7:72:a8:69:0f:45:95:f2:86:b1:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 31 01:00:12 2026 GMT
            Not After : Nov 29 02:00:12 2026 GMT
        Subject: CN=464b8f6c-d3ff-4054-a486-9ce33b6d26d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:d7:dd:7e:71:b8:1a:77:92:7c:74:3c:a6:76:
                    1e:77:23:82:c4:7e:b3:7d:d3:30:c9:af:31:fd:ca:
                    e1:f5:27:6c:80:0e:44:c6:4c:a6:5f:52:9c:e4:ef:
                    18:35:22:f7:8e:bb:7a:e3:b4:8f:25:77:f8:52:e7:
                    69:4c:87:01:90:33:79:e1:93:7c:86:97:90:a2:78:
                    db:f7:66:75:a0:42:d2:db:03:19:6e:c7:28:a5:e2:
                    99:19:a6:e7:7c:93:f9:b5:e4:7c:4d:50:bb:e3:cc:
                    4a:81:82:ca:9b:f6:3c:c3:9e:6b:17:f3:42:58:fe:
                    6b:10:cf:88:c1:8f:fe:37:28:c5:f3:74:1f:27:ce:
                    7a:8d:7b:a5:c9:1e:1b:66:42:4c:3a:68:14:96:6a:
                    82:9e:e3:a2:26:a6:54:31:30:23:03:63:b6:6e:d7:
                    c0:d4:ed:2b:57:63:4b:b2:1a:bb:81:95:60:0a:44:
                    90:63:72:ab:d1:67:87:a8:da:4c:70:ab:08:0c:25:
                    5c:25:eb:e3:b2:13:ed:b1:e9:1e:77:b8:e4:2e:a0:
                    64:48:6c:58:3a:8a:3c:5e:e4:5d:08:5f:6f:d7:5d:
                    11:6a:56:53:97:dc:c1:0d:4b:7c:91:4d:32:41:ca:
                    cc:bb:42:e1:6e:74:f5:b0:a1:c3:3e:74:f8:b7:b4:
                    0c:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:02:E5:FB:A7:39:A4:6F:98:B0:DE:3F:52:8E:47:DB:F2:B8:19:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e96518e8-9ce6-3527-9ee1-3e406059692e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.76.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:c1:80:cc:e1:85:4d:a5:61:e0:0a:c4:98:3f:0c:4d:41:19:
         2d:a5:64:e5:f5:a9:21:34:9e:04:46:fd:ef:98:f6:dc:42:2d:
         63:94:cd:6a:89:4d:97:00:c7:2b:3a:7b:e7:7e:49:59:96:96:
         c3:3c:e4:cd:d8:17:3f:08:27:7f:1c:d9:c0:0d:7d:c3:85:d1:
         8a:4f:71:74:8c:3f:9c:28:f9:d0:31:33:02:15:a6:85:c6:e5:
         85:f6:ae:2f:14:d6:7f:a6:90:ae:72:65:0d:07:8a:6d:b2:cc:
         13:89:22:b1:18:ed:f9:0e:e7:c8:4b:37:f3:10:eb:a0:c0:5e:
         ee:08:92:87:f9:77:01:34:51:4b:03:8f:d0:52:4a:e3:c2:46:
         56:ae:e5:67:dd:c3:3d:92:21:07:0f:d9:67:62:59:27:af:52:
         a9:96:f4:3c:58:f4:47:c9:a9:59:5c:64:40:49:3c:ee:e9:0f:
         8d:97:ea:d6:7a:13:9f:8a:f0:62:86:85:0d:89:b8:b7:e7:14:
         b3:14:f9:fd:24:ce:12:14:3d:b8:4c:41:df:13:84:c5:b3:28:
         ad:25:25:00:12:42:72:8f:98:36:f2:60:a2:05:dc:5f:69:72:
         16:00:36:7d:95:88:96:02:36:fc:2f:64:6e:c2:6a:f1:ff:c0:
         79:bb:b2:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 14:05:43 2026 by rpki-client