Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cba1063f-2530-32fd-b0b9-23f2c23a6217.roa
File:                     cba1063f-2530-32fd-b0b9-23f2c23a6217.roa (raw, json)
Hash identifier:          Cv6KHJvzgYdPyFZt+Z/5G1rXw5xYe0k3N5n4mOikXHY=
Subject key identifier:   D2:D9:65:F7:C1:5D:DD:16:52:7D:B3:5D:E4:80:12:CD:A7:68:C9:90
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EA7939C97AF6FE8C4A2C70000
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cba1063f-2530-32fd-b0b9-23f2c23a6217.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     36617
IP address blocks:        192.5.6.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:93:9c:97:af:6f:e8:c4:a2:c7:00:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=9dffb3c8-0d11-4988-84ba-e83632821a36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:7f:6d:ab:0f:5f:ef:b9:45:fd:a1:48:ec:61:
                    62:94:df:1b:14:0c:bd:eb:a9:70:6b:75:51:c9:01:
                    0f:b1:b5:67:73:d2:e2:62:5b:bd:33:15:ba:2e:5f:
                    70:b7:42:32:ce:1f:1d:2e:c6:df:ce:03:9d:55:58:
                    b1:e0:3d:01:78:95:fc:30:e0:e3:c3:a9:23:de:17:
                    27:53:27:f0:94:69:db:8f:5c:78:17:05:f9:27:cf:
                    9b:7e:4a:93:d8:e5:54:ec:b5:dc:87:9e:a5:4c:57:
                    04:56:c3:b7:8c:b5:32:a5:cc:28:44:81:d8:ed:fd:
                    59:e1:65:8c:2b:b3:c5:cd:9d:0b:8a:e5:d0:ef:cb:
                    39:c8:1f:3f:14:73:2d:5b:8b:f9:3d:8c:bb:d0:23:
                    ee:cf:c6:2e:cb:b0:b5:d3:0c:a4:ed:d9:7c:f2:d5:
                    79:43:af:90:db:30:41:89:85:f3:9c:9a:e0:29:ad:
                    99:e7:47:bf:5e:4d:f3:fe:79:62:8b:8f:1c:fb:90:
                    98:da:9a:d0:45:af:e0:6b:65:1b:ec:d9:53:d8:16:
                    54:90:63:89:4a:26:ce:87:5a:78:95:56:dc:c9:1c:
                    12:b9:49:24:b5:9c:b8:3b:ff:2d:92:d0:9e:5c:18:
                    55:a3:be:ad:4c:6e:c7:59:3d:fe:ed:86:23:c5:67:
                    a3:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:D9:65:F7:C1:5D:DD:16:52:7D:B3:5D:E4:80:12:CD:A7:68:C9:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cba1063f-2530-32fd-b0b9-23f2c23a6217.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.5.6.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:7f:2d:fa:db:b6:ce:dc:30:56:8e:e5:15:a9:43:f2:94:68:
         0c:02:ac:7f:cb:be:45:50:5e:78:02:7d:2a:90:ae:d2:b2:1f:
         9b:ae:03:19:11:23:3a:a8:52:d6:0b:78:c9:1a:54:c7:93:b7:
         2d:d5:3e:12:8d:bb:a8:4f:fb:09:dc:15:8b:5f:68:15:fb:21:
         c7:90:97:a8:e1:14:79:be:e2:63:0f:77:0f:47:e9:5b:08:60:
         7d:85:4a:23:58:0e:a8:8f:f3:b6:00:68:e4:24:7f:51:02:d0:
         0b:2f:24:b7:13:d9:1f:58:6a:02:fa:94:08:ec:16:1e:4d:c2:
         d7:39:0b:8a:df:aa:61:2a:67:3b:64:e0:04:34:c2:c0:d6:52:
         65:93:12:46:0a:f7:75:e1:95:b3:a9:41:e0:ad:ab:0e:23:d9:
         20:c8:63:5c:79:94:c3:f9:b0:86:85:a1:ea:2e:0f:da:b5:88:
         4a:48:c4:fb:d0:8f:46:2b:8d:5b:82:95:6c:93:a0:24:9f:af:
         76:62:9f:1c:94:85:da:c6:41:33:a0:a6:c8:17:ec:e6:fb:b1:
         1a:4f:ec:fc:f1:a7:6e:41:e0:6c:f7:95:93:54:78:20:87:83:
         c4:d8:8a:c0:ea:b4:a1:c9:2b:01:b7:d3:b1:c6:63:ce:e0:c4:
         02:aa:62:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:13:06 2026 by rpki-client