Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/94c1d3de-c346-3ded-b038-58b8641d9683.roa
File:                     94c1d3de-c346-3ded-b038-58b8641d9683.roa (raw, json)
Hash identifier:          kwVLg8U3GbBXg8QtTAH+D7Ln1dPt5tNWYODit2XaPRo=
Subject key identifier:   55:DE:77:E8:EC:BF:1E:70:30:96:7D:83:0F:33:62:F3:D6:35:BC:8E
Certificate issuer:       /CN=249140ca-277e-4871-a100-451d066d1c5b
Certificate serial:       010D0C9F4328584EA4452774FFF9D7EDF777ED80
Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/94c1d3de-c346-3ded-b038-58b8641d9683.roa
Signing time:             Mon 27 Jul 2026 21:00:11 +0000
ROA not before:           Mon 27 Jul 2026 21:00:11 +0000
ROA not after:            Sun 25 Oct 2026 21:00:11 +0000
asID:                     397177
IP address blocks:        65.97.39.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a4:45:27:74:ff:f9:d7:ed:f7:77:ed:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b
        Validity
            Not Before: Jul 27 21:00:11 2026 GMT
            Not After : Oct 25 21:00:11 2026 GMT
        Subject: CN=22226185-7e0b-4a68-8842-17e4ad120253
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:a5:3e:5a:e1:f5:98:1a:64:93:67:67:e9:b0:
                    5a:83:94:23:cf:0d:18:f4:93:9c:72:dc:b9:cc:22:
                    0f:44:a4:0c:ac:d7:08:14:b2:ae:de:f0:81:9c:14:
                    19:86:9a:81:a6:94:b8:c2:76:7e:d4:f2:11:ef:2a:
                    0a:1d:9f:e3:8e:7e:70:01:40:f4:e1:46:00:ca:2f:
                    b2:cf:43:b8:61:7f:88:fe:09:32:ef:ae:cd:dd:8a:
                    28:de:9a:33:e6:17:90:3d:14:bd:4a:43:4b:a5:44:
                    e2:d6:d2:e6:fb:82:3b:a1:44:bc:59:b0:ee:75:7c:
                    25:26:d3:cd:09:1c:ae:2d:c9:bd:05:57:38:9e:45:
                    86:ec:37:1c:6b:34:89:89:c0:58:4d:79:b4:23:ae:
                    c5:0c:c4:85:2c:f6:95:b5:2e:ba:35:98:c6:9b:59:
                    37:f7:5b:d4:aa:7e:40:24:35:ee:b1:ae:e7:79:93:
                    af:28:fe:37:a1:26:96:36:40:48:d9:07:0f:5e:fd:
                    96:0d:12:a3:b3:57:a8:1c:9f:df:e2:d6:b2:1a:6c:
                    5f:eb:f6:20:0c:bb:8c:81:eb:ee:18:23:98:1b:55:
                    92:86:0a:c4:47:65:c9:52:01:e3:7e:40:0a:63:fe:
                    15:ea:30:0a:90:d9:40:db:e5:34:f4:f0:7c:e9:2b:
                    88:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:DE:77:E8:EC:BF:1E:70:30:96:7D:83:0F:33:62:F3:D6:35:BC:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/94c1d3de-c346-3ded-b038-58b8641d9683.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl

            X509v3 Authority Key Identifier:
                keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.97.39.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:4b:b4:96:fd:e2:f9:5d:7d:88:fc:7c:a6:cc:4a:c8:10:0c:
         d6:7a:51:16:07:ec:02:72:58:1e:5c:43:97:9b:f8:b5:ab:dd:
         d5:6d:3f:81:f7:a2:68:b6:38:df:07:08:41:42:af:03:26:62:
         86:1d:0c:8c:de:a0:f5:3e:ee:ee:75:1c:a6:67:b2:3c:cc:b7:
         67:ad:91:a6:12:dd:5d:e7:f0:1e:21:eb:6c:2c:c0:45:1e:f9:
         0a:75:39:c7:49:a0:3f:b6:c6:31:91:d8:32:8c:5b:76:56:39:
         3d:d7:37:0b:49:47:3f:8c:51:3b:42:90:ff:35:34:3b:16:6b:
         77:db:ca:70:a8:23:78:5e:e4:0d:5d:60:dd:f6:ee:8d:0a:d6:
         50:b9:75:f8:5d:71:fe:f8:48:46:e6:7c:f5:61:6e:0e:8e:e1:
         8d:79:0e:ac:98:c0:59:55:9e:11:ef:b4:c3:15:56:a4:33:f4:
         eb:1e:1d:61:98:ff:67:86:bf:ba:98:05:e2:aa:99:02:cf:f3:
         91:78:7a:d5:21:21:84:40:76:73:12:c3:e5:f7:a4:18:a8:6e:
         81:86:77:4e:ad:f0:ae:46:0a:3a:08:86:14:c5:41:2b:ed:6f:
         1c:55:0f:67:ac:26:77:e5:4d:21:36:01:a6:0b:e7:d8:1d:e0:
         a6:f9:a5:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:57:44 2026 by rpki-client