Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b43c5615-9630-4bab-8258-f3b32e00f304/cb5f1388-b239-326e-9428-5594e8be222b.roa
File:                     cb5f1388-b239-326e-9428-5594e8be222b.roa (raw, json)
Hash identifier:          1P5t/SlY4a9JXPT0GmI0AyFQ7oCMNc7Av+Vx/zsExw0=
Subject key identifier:   57:48:2C:2D:07:BC:8B:8B:5F:4D:7B:4B:7F:AB:D5:49:9C:35:99:90
Certificate issuer:       /CN=b43c5615-9630-4bab-8258-f3b32e00f304
Certificate serial:       010D0C9F4328584F5E62B7AFC04461489AF56900
Authority key identifier: F8:68:64:D8:02:6E:DD:51:CD:3C:54:F5:81:BF:E8:A0:A1:30:FC:2C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b43c5615-9630-4bab-8258-f3b32e00f304.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b43c5615-9630-4bab-8258-f3b32e00f304/cb5f1388-b239-326e-9428-5594e8be222b.roa
Signing time:             Fri 02 Oct 2026 13:00:13 +0000
ROA not before:           Fri 02 Oct 2026 13:00:13 +0000
ROA not after:            Thu 31 Dec 2026 14:00:13 +0000
asID:                     207609
IP address blocks:        130.12.160.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b43c5615-9630-4bab-8258-f3b32e00f304/b43c5615-9630-4bab-8258-f3b32e00f304.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b43c5615-9630-4bab-8258-f3b32e00f304/b43c5615-9630-4bab-8258-f3b32e00f304.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b43c5615-9630-4bab-8258-f3b32e00f304.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 Oct 2026 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5e:62:b7:af:c0:44:61:48:9a:f5:69:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b43c5615-9630-4bab-8258-f3b32e00f304
        Validity
            Not Before: Oct  2 13:00:13 2026 GMT
            Not After : Dec 31 14:00:13 2026 GMT
        Subject: CN=b5f6d37f-39ee-465a-b383-9fa5f19ceca8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:83:a8:90:3c:92:b1:79:aa:9a:d7:64:39:0f:
                    ca:08:dc:81:27:60:a1:81:b9:50:d2:cb:0e:d8:13:
                    ec:27:9b:e0:d9:fe:ae:7c:39:a9:fc:0a:ef:64:ef:
                    b9:a4:b5:95:de:86:42:92:67:02:f3:b0:ec:86:07:
                    c1:6a:39:0c:ad:ac:1b:b1:c1:3b:f1:17:d6:04:6c:
                    5b:a5:17:12:68:f2:29:ca:87:39:fa:3b:3f:6c:fa:
                    df:0e:50:67:67:85:47:72:f9:2e:34:1e:24:36:4d:
                    48:d0:c0:d4:ca:8d:06:b0:d7:84:5e:02:a1:60:86:
                    45:90:d1:c6:f3:f2:98:e0:6d:e5:83:33:c2:c6:ff:
                    52:3f:0c:59:b7:67:42:87:f5:16:07:7e:6c:58:40:
                    3e:0b:93:23:20:ad:6b:99:ed:54:9a:4f:58:d3:cd:
                    ba:b1:ef:e4:28:3a:95:4c:b3:ec:4f:5c:e8:3d:f5:
                    ab:d0:98:57:05:b3:4d:53:df:91:26:93:00:1d:05:
                    aa:1f:a6:03:81:a8:26:a3:cc:0f:11:5c:47:16:f4:
                    fa:72:8d:52:3a:8f:7f:20:06:a5:2f:f0:07:fa:81:
                    d9:cf:d1:38:8f:88:57:ad:d7:f6:c8:c1:08:f1:04:
                    dc:09:1d:3c:0a:54:68:fe:1c:65:9f:fb:71:a2:99:
                    75:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:48:2C:2D:07:BC:8B:8B:5F:4D:7B:4B:7F:AB:D5:49:9C:35:99:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b43c5615-9630-4bab-8258-f3b32e00f304/cb5f1388-b239-326e-9428-5594e8be222b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b43c5615-9630-4bab-8258-f3b32e00f304/b43c5615-9630-4bab-8258-f3b32e00f304.crl

            X509v3 Authority Key Identifier:
                keyid:F8:68:64:D8:02:6E:DD:51:CD:3C:54:F5:81:BF:E8:A0:A1:30:FC:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b43c5615-9630-4bab-8258-f3b32e00f304.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.12.160.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:cd:55:f9:3c:f3:5e:48:64:20:84:c4:2b:fb:49:c7:96:4c:
         91:92:be:ea:30:0a:6d:2f:64:bb:a9:36:d9:8e:6b:ac:ef:5b:
         71:c4:48:e5:fc:98:ca:58:b1:e5:e7:b8:9b:ba:50:f2:30:54:
         2b:23:0a:c7:4c:e3:6a:00:9d:2b:28:e6:5a:a6:0b:c1:2e:fd:
         94:2d:bd:9a:d1:2d:5b:33:4e:5e:49:6e:36:e0:59:29:c7:ba:
         ed:6f:20:a6:76:8c:7a:95:c0:0b:54:27:a5:d1:95:26:8b:60:
         5c:cc:91:9b:8f:1c:79:a7:26:4c:ed:39:2b:ce:4d:45:ec:30:
         9a:0c:db:ad:1f:4c:6f:dd:6f:64:92:99:da:33:8f:7b:5f:fd:
         90:a7:80:4e:97:89:69:f0:2d:de:f4:94:db:2a:9e:ef:86:bc:
         a8:ff:4b:51:6f:39:f8:d3:1b:88:bb:ce:d1:84:6f:85:83:73:
         60:05:a0:12:d6:2d:f3:54:d7:7f:85:b5:17:12:6a:7a:46:2d:
         6e:0c:e4:54:ed:03:a0:93:90:0d:28:d2:e5:b6:15:84:4a:ff:
         b3:d5:0c:42:9c:7f:f9:f7:a6:5b:5f:4c:31:e1:ab:bc:1e:84:
         e6:c0:b5:dd:36:87:73:dd:ca:40:f4:fc:75:93:39:b3:ee:6a:
         a1:c8:95:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 00:11:39 2026 by rpki-client