Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cf1a2832-ab31-38d1-b42a-b4e0be6c4017.roa
File:                     cf1a2832-ab31-38d1-b42a-b4e0be6c4017.roa (raw, json)
Hash identifier:          TQZf0qO+WsFkWKg03/RBVVdjux6ELM2qxxCd0BpfSso=
Subject key identifier:   42:B0:A0:03:C2:AA:8B:11:B5:41:D2:E0:8C:7B:6B:F6:69:99:6A:46
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E885A53BC76A635AB26F7A9C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cf1a2832-ab31-38d1-b42a-b4e0be6c4017.roa
Signing time:             Fri 17 Jul 2026 21:00:12 +0000
ROA not before:           Fri 17 Jul 2026 21:00:12 +0000
ROA not after:            Thu 15 Oct 2026 21:00:12 +0000
asID:                     396583
IP address blocks:        198.17.208.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:88:5a:53:bc:76:a6:35:ab:26:f7:a9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 17 21:00:12 2026 GMT
            Not After : Oct 15 21:00:12 2026 GMT
        Subject: CN=48426307-b743-46a8-a5eb-ded157d7a66e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:1e:e7:95:c0:9c:0b:a4:32:b4:83:b4:53:e6:
                    63:1a:54:a8:e7:ff:9a:13:40:11:f6:d9:32:de:49:
                    94:36:a6:1c:e1:b1:8b:8f:2c:6a:a0:dd:d7:0e:be:
                    7f:6c:bf:33:53:07:39:3b:df:bc:2d:3d:05:32:4c:
                    f0:59:6a:bd:73:c0:d6:4d:44:3b:21:1e:f8:85:9b:
                    70:1e:b9:f7:6a:c0:94:c1:38:eb:c9:79:d6:ef:ae:
                    79:95:de:ba:00:76:e2:67:d4:b3:f1:f5:10:a4:5d:
                    7e:72:b2:8f:fd:55:f9:2d:27:e3:45:ed:02:12:87:
                    af:07:c5:7b:04:13:98:9a:1c:80:2f:29:e4:83:91:
                    47:41:0f:5e:4f:99:f9:9b:9e:8d:16:cd:7d:96:1b:
                    6e:e2:e4:74:76:7f:59:93:da:f8:86:6a:33:81:e4:
                    f4:dc:94:f2:5f:66:77:b9:7f:4e:1c:2e:2c:bd:60:
                    33:ba:99:af:16:ca:68:ae:b2:57:93:46:86:5a:0d:
                    bf:0c:69:d9:06:a2:70:16:d4:52:5e:1c:60:47:95:
                    29:cb:54:3a:72:d9:51:03:0c:6c:14:ef:d1:62:e1:
                    a6:0f:70:c2:c3:39:1e:9a:bb:8d:44:34:c8:7a:9a:
                    73:2e:e6:6c:eb:d8:26:7d:db:c5:9a:33:95:13:d7:
                    91:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:B0:A0:03:C2:AA:8B:11:B5:41:D2:E0:8C:7B:6B:F6:69:99:6A:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cf1a2832-ab31-38d1-b42a-b4e0be6c4017.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.17.208.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:da:bb:75:4e:3c:c0:39:17:f6:df:b0:fb:59:3e:45:1a:e6:
         c1:d5:9d:dc:c9:f7:e9:d8:44:33:83:26:79:e7:51:7c:32:d6:
         4f:06:5b:21:ab:c1:da:8b:4d:e6:41:b4:05:ff:33:09:af:c7:
         fe:bb:2b:6b:02:d8:22:f2:1f:be:48:13:6c:3a:28:a6:f4:f2:
         8a:00:27:83:a6:9c:3b:2e:2e:97:0b:a7:f4:85:fe:a8:ed:91:
         1b:2e:f3:01:ec:6f:ea:2c:92:f8:c2:7f:af:92:2f:7c:8e:e6:
         3b:fa:ea:3f:08:8c:aa:7a:28:6f:c9:9d:9e:80:96:f2:c6:d6:
         2a:bc:e7:83:15:35:73:4c:f6:b0:45:25:9e:d4:4b:bd:e7:0a:
         ae:b3:9a:3d:7b:7e:66:fc:32:78:c8:2b:1b:70:f2:78:9d:55:
         a8:61:1e:06:89:0f:f1:99:48:ae:3e:e3:39:53:74:77:6e:55:
         0e:4d:ca:54:43:cc:b6:b4:3a:57:76:59:80:e5:8d:dd:8d:e7:
         46:54:89:f7:f7:3a:8c:25:d6:5a:e4:b5:c4:5c:8f:6a:44:2d:
         ac:51:12:5f:a0:99:b7:fa:83:b9:9d:17:73:4b:d0:6f:a3:a2:
         c2:a8:3b:5b:3d:17:a1:69:6c:fd:03:4c:4e:97:17:3d:60:2e:
         29:0e:f4:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:55:25 2026 by rpki-client