Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cbccdacb-759a-3671-9565-4443e3364534.roa
File:                     cbccdacb-759a-3671-9565-4443e3364534.roa (raw, json)
Hash identifier:          bt7/LUw+czCr6bBBFQe07zGM0xhMUqgpBjtfBkpzhP8=
Subject key identifier:   77:BF:15:0E:4B:A7:AF:92:6F:06:2D:47:D5:A5:69:BE:FD:48:BE:FC
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D83CADBFE91F2A3153C88A9A0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cbccdacb-759a-3671-9565-4443e3364534.roa
Signing time:             Wed 15 Apr 2026 13:00:30 +0000
ROA not before:           Wed 15 Apr 2026 13:00:30 +0000
ROA not after:            Tue 14 Jul 2026 13:00:30 +0000
asID:                     396613
IP address blocks:        192.82.134.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:83:ca:db:fe:91:f2:a3:15:3c:88:a9:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 15 13:00:30 2026 GMT
            Not After : Jul 14 13:00:30 2026 GMT
        Subject: CN=1921f914-6066-4ce5-ae08-87f92437f697
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:fb:dd:9b:b7:65:81:a0:41:45:78:c6:2a:71:
                    25:46:60:82:9f:95:a6:b4:17:73:74:a3:4f:a9:dc:
                    c8:52:ce:9c:ba:00:fd:21:5b:e5:23:b9:ba:59:e5:
                    df:a0:90:d1:0b:80:2a:30:8b:75:4a:69:6a:7d:9d:
                    7f:be:3b:b3:62:5e:56:8e:47:1c:e8:83:62:ce:d5:
                    be:66:74:3c:29:55:83:aa:50:af:f3:8e:4b:1b:36:
                    b0:0c:71:35:17:9f:a4:7d:5f:55:a3:a8:d2:4d:83:
                    ef:d0:c5:15:8f:63:78:88:10:ba:e6:7f:74:a7:d7:
                    72:19:65:99:63:ff:e3:08:89:47:de:1c:cc:bb:82:
                    b3:e8:3d:70:ce:7c:15:e9:c3:5a:3c:00:89:96:89:
                    60:99:45:9e:cf:55:a0:b6:e7:dd:ce:06:16:0e:21:
                    25:38:0c:00:fe:48:89:2e:0b:aa:29:7a:58:69:c1:
                    9f:a1:ea:70:6e:f3:cf:4e:b7:51:70:78:69:2f:ae:
                    70:b8:55:c8:24:e1:d4:d1:6e:28:30:71:05:4a:21:
                    e3:8c:80:0f:f3:fe:ac:e5:68:de:e3:6c:40:44:a3:
                    25:36:9b:63:c7:56:58:f2:b1:9d:89:68:eb:01:34:
                    d9:7a:c0:47:da:d0:fd:a6:44:ba:b9:01:61:cf:04:
                    24:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:BF:15:0E:4B:A7:AF:92:6F:06:2D:47:D5:A5:69:BE:FD:48:BE:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cbccdacb-759a-3671-9565-4443e3364534.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.134.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:ef:75:c7:24:b6:74:21:de:92:8a:7b:1f:ea:46:d8:89:da:
         58:14:f4:dc:27:5e:c2:96:cd:0f:36:95:07:99:6e:0e:ce:2c:
         85:79:f9:09:f2:47:42:72:ca:90:71:5c:1b:88:35:0f:60:78:
         7b:fc:26:5c:bc:09:0e:4b:48:5c:5a:0b:3c:dd:d6:2d:e3:df:
         dd:20:f4:46:bc:ac:9c:7d:22:cf:54:6e:dc:0f:86:d2:85:c5:
         0c:12:37:d7:eb:fc:90:7c:e3:fa:ad:78:35:09:ad:ce:3d:8f:
         0b:ae:f4:4a:59:6e:3d:a3:3b:8a:e7:a4:68:c4:58:be:18:39:
         21:e3:92:0d:96:a7:c9:78:1e:4c:08:07:a3:61:bf:d9:96:7f:
         92:0b:cd:64:0e:48:5c:71:f2:50:9d:a4:0d:d6:e9:41:e2:19:
         27:da:79:92:f2:9d:14:48:15:17:5c:e1:fd:0c:8a:8e:9e:93:
         78:37:6f:55:01:2a:14:65:44:ba:ae:85:9a:4a:c7:99:65:ca:
         4d:4f:fb:0b:df:fd:7b:c7:ea:f0:cd:00:2d:e1:11:7b:a1:47:
         d9:9b:27:0f:4b:9e:25:46:65:5c:8b:54:14:b6:99:44:33:3b:
         35:0f:21:37:a4:8c:1b:dd:83:c7:00:8b:fd:49:06:16:b0:fb:
         67:1d:2c:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:44:44 2026 by rpki-client