Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65bc064b-6753-4438-8da3-b0b6d3b4d5bf/38911b59-4da5-3259-be8a-e5ae2c28a66b.roa
File:                     38911b59-4da5-3259-be8a-e5ae2c28a66b.roa (raw, json)
Hash identifier:          pAhCn1tvjU91/b+UpHP2d7CoU2v2N6TF1SoHJ7aJp/k=
Subject key identifier:   D0:A9:BB:56:FF:0F:DA:1E:0E:C2:16:56:35:CE:3E:D7:9C:7A:28:95
Certificate issuer:       /CN=65bc064b-6753-4438-8da3-b0b6d3b4d5bf
Certificate serial:       010D0C9F4328584EA5AA77844E444710F9C95120
Authority key identifier: 13:18:C4:39:07:71:22:07:0F:A4:50:EC:64:23:3E:A5:2D:ED:90:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65bc064b-6753-4438-8da3-b0b6d3b4d5bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65bc064b-6753-4438-8da3-b0b6d3b4d5bf/38911b59-4da5-3259-be8a-e5ae2c28a66b.roa
Signing time:             Tue 28 Jul 2026 09:00:11 +0000
ROA not before:           Tue 28 Jul 2026 09:00:11 +0000
ROA not after:            Mon 26 Oct 2026 09:00:11 +0000
asID:                     400510
IP address blocks:        206.202.0.0/18 maxlen: 24
                          2602:fe17::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65bc064b-6753-4438-8da3-b0b6d3b4d5bf/65bc064b-6753-4438-8da3-b0b6d3b4d5bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65bc064b-6753-4438-8da3-b0b6d3b4d5bf/65bc064b-6753-4438-8da3-b0b6d3b4d5bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65bc064b-6753-4438-8da3-b0b6d3b4d5bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a5:aa:77:84:4e:44:47:10:f9:c9:51:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65bc064b-6753-4438-8da3-b0b6d3b4d5bf
        Validity
            Not Before: Jul 28 09:00:11 2026 GMT
            Not After : Oct 26 09:00:11 2026 GMT
        Subject: CN=e84cdd7b-1411-4f96-93c6-280e936cf870
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:27:5f:49:20:1c:7a:14:45:5b:24:fb:54:f6:
                    d8:c4:49:0c:d2:07:d3:a5:d3:c6:8a:fe:8d:5d:5c:
                    f8:5a:f2:d5:f7:e9:f1:12:b6:7b:ef:91:77:50:62:
                    87:89:08:f4:31:7a:07:9d:02:f9:b4:f5:a2:1e:af:
                    60:3e:1a:13:e2:55:1c:0d:0d:75:79:3f:a4:5f:26:
                    fb:8e:b0:3e:7d:f0:a1:be:f8:66:a7:10:a3:4a:32:
                    e1:1f:7b:70:67:f6:54:12:e1:e9:df:74:2a:e6:40:
                    ee:97:04:d2:6d:1d:da:c7:23:e0:59:42:fa:5c:66:
                    66:f0:00:00:03:16:2a:cf:bf:d5:b7:02:4a:32:d8:
                    2c:4e:12:53:6a:35:50:41:2a:16:ab:f9:a6:90:3e:
                    fd:c0:e3:68:5e:1f:c0:f9:8e:52:07:d4:8f:00:78:
                    d7:73:6d:5e:c0:3c:f7:f6:2b:98:c2:05:75:90:76:
                    cc:70:2b:c9:95:5c:36:ca:7d:69:c5:6a:49:c0:b4:
                    cf:5c:c4:0f:7c:de:63:26:77:c5:4d:bf:f8:bc:86:
                    ec:a5:53:bc:68:9f:98:dc:91:76:1d:43:1a:a5:17:
                    ad:5f:b5:72:7c:0a:49:53:c7:e1:03:77:39:e7:22:
                    25:c2:dd:b0:09:ae:e9:86:0b:ff:e0:52:41:a0:89:
                    d1:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:A9:BB:56:FF:0F:DA:1E:0E:C2:16:56:35:CE:3E:D7:9C:7A:28:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65bc064b-6753-4438-8da3-b0b6d3b4d5bf/38911b59-4da5-3259-be8a-e5ae2c28a66b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65bc064b-6753-4438-8da3-b0b6d3b4d5bf/65bc064b-6753-4438-8da3-b0b6d3b4d5bf.crl

            X509v3 Authority Key Identifier:
                keyid:13:18:C4:39:07:71:22:07:0F:A4:50:EC:64:23:3E:A5:2D:ED:90:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65bc064b-6753-4438-8da3-b0b6d3b4d5bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.202.0.0/18
                IPv6:
                  2602:fe17::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:cc:be:72:73:bc:74:99:5e:67:90:0a:a7:6a:a2:af:39:04:
         9f:70:fd:c0:ff:3d:c6:d5:88:bb:18:eb:c6:28:31:41:95:99:
         39:d2:61:a0:63:9a:b0:a7:66:c4:0f:4f:fc:d3:45:7a:0e:37:
         32:bb:45:c6:42:82:1c:e3:75:20:22:15:27:8b:09:6b:ca:d5:
         38:ac:9c:d5:87:e9:a9:05:e9:91:af:99:97:69:26:a3:35:d8:
         0f:10:f0:3e:53:81:97:b1:6f:bc:81:7f:c0:24:95:8a:63:d8:
         62:bc:b3:9e:a5:f7:cd:a4:2d:33:44:e6:f5:5d:9e:70:3a:75:
         60:5b:90:3d:38:a7:c0:3b:0f:be:52:67:b9:ed:05:1c:03:d9:
         40:57:d0:6f:b1:26:90:d2:d4:2d:56:42:d7:d7:97:a5:74:26:
         4b:3e:95:04:af:1a:bc:f8:a6:ba:c8:33:de:d9:1d:54:be:ae:
         47:37:00:e2:2d:44:6a:9d:ae:af:72:c9:fe:09:2a:26:1e:3c:
         c7:51:bd:55:ca:cd:e4:f8:f0:eb:f6:30:30:a7:0f:f3:87:69:
         02:83:b2:08:28:aa:0a:4f:60:1a:fe:a5:57:ce:a9:9e:f8:f4:
         09:b6:59:11:e7:43:66:c9:05:e6:b1:5a:3e:06:4f:98:98:fa:
         d8:38:b5:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:10:43 2026 by rpki-client