Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2d9e57fb-3954-4c2b-a596-a001c34d23dd/38684cc6-834e-38c5-82e6-a07bd418883c.roa
File:                     38684cc6-834e-38c5-82e6-a07bd418883c.roa (raw, json)
Hash identifier:          lJCCGvUPw4g6OX7ernur2Io6fJjldZ7pUgMFuo7N+qg=
Subject key identifier:   08:3A:B8:56:B9:D0:36:6B:D4:B0:A9:8B:2C:E1:5B:F6:9F:B4:BA:61
Certificate issuer:       /CN=2d9e57fb-3954-4c2b-a596-a001c34d23dd
Certificate serial:       010D0C9F4328584EA79807786DF7987A22EE6600
Authority key identifier: AC:6F:B2:EE:A2:5B:AD:3F:68:7E:B8:71:62:66:7B:23:BB:C2:18:30
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2d9e57fb-3954-4c2b-a596-a001c34d23dd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2d9e57fb-3954-4c2b-a596-a001c34d23dd/38684cc6-834e-38c5-82e6-a07bd418883c.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     14277
IP address blocks:        65.182.49.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2d9e57fb-3954-4c2b-a596-a001c34d23dd/2d9e57fb-3954-4c2b-a596-a001c34d23dd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2d9e57fb-3954-4c2b-a596-a001c34d23dd/2d9e57fb-3954-4c2b-a596-a001c34d23dd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2d9e57fb-3954-4c2b-a596-a001c34d23dd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:98:07:78:6d:f7:98:7a:22:ee:66:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d9e57fb-3954-4c2b-a596-a001c34d23dd
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=e5b29a80-963f-49dd-9bc7-5916bdd3d9e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:33:cb:48:83:cd:56:b3:d4:f0:79:43:e5:18:
                    8b:31:26:86:64:0e:ce:75:39:fb:69:3a:52:86:69:
                    98:ff:45:65:e7:59:36:10:98:33:41:1c:a9:e8:c4:
                    86:8f:ae:10:0d:74:23:b3:92:c0:80:84:2d:72:c3:
                    d5:6c:69:be:a5:15:f5:3b:47:dd:86:10:18:7c:01:
                    2b:a1:04:f1:65:e0:5b:05:55:89:49:9e:8d:a7:cd:
                    1a:d1:03:9e:8d:d9:b6:5d:73:de:cb:3d:85:18:c0:
                    f6:e9:c2:e1:4a:dc:0a:85:87:d2:bd:3d:dd:75:27:
                    c8:0c:69:ed:a5:43:c5:72:26:0c:4c:27:f9:32:c8:
                    e6:eb:1d:58:6e:7e:19:07:d4:d9:15:12:cc:62:23:
                    f5:29:07:92:b3:1d:45:44:e3:09:e3:18:65:3e:b4:
                    8e:ac:a8:de:b5:35:56:c2:04:e7:1c:80:e9:b3:d4:
                    73:52:f4:94:ec:3f:ad:e6:b2:69:54:9f:20:e7:64:
                    9b:20:65:be:c9:39:98:ba:26:4f:a3:19:4a:80:6c:
                    30:53:f1:b8:be:aa:c0:8a:e3:7b:cd:94:d1:9e:fe:
                    eb:b7:dc:4f:20:df:28:cb:60:62:01:03:73:1b:97:
                    7f:40:58:06:d2:56:ac:de:49:58:69:40:86:66:2f:
                    e1:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:3A:B8:56:B9:D0:36:6B:D4:B0:A9:8B:2C:E1:5B:F6:9F:B4:BA:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2d9e57fb-3954-4c2b-a596-a001c34d23dd/38684cc6-834e-38c5-82e6-a07bd418883c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2d9e57fb-3954-4c2b-a596-a001c34d23dd/2d9e57fb-3954-4c2b-a596-a001c34d23dd.crl

            X509v3 Authority Key Identifier:
                keyid:AC:6F:B2:EE:A2:5B:AD:3F:68:7E:B8:71:62:66:7B:23:BB:C2:18:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2d9e57fb-3954-4c2b-a596-a001c34d23dd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.182.49.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:52:5b:7a:a3:10:6b:86:51:84:3e:c7:37:a2:3d:0a:91:69:
         fd:60:c4:06:83:ed:4d:44:19:81:c4:9d:f4:28:25:5f:07:25:
         f3:50:6b:6e:47:1b:bd:a0:ea:cb:cf:43:10:d5:58:5f:89:fb:
         cb:78:44:55:b3:ea:77:d6:da:45:90:f0:b5:68:0e:29:4a:66:
         0b:6c:06:42:8d:b1:0c:74:57:f2:c6:8d:c9:0f:5d:99:00:b0:
         2f:a5:c7:19:cd:8e:0f:0e:78:3f:4b:d8:fa:06:57:b7:47:f2:
         c7:be:83:eb:7b:d5:de:44:0e:7d:3f:d2:db:e0:a0:82:88:bd:
         0d:40:36:79:84:84:63:d8:7e:fd:18:af:b3:48:16:3d:c3:c0:
         92:6c:39:1f:ea:e8:7d:06:d5:83:66:d9:99:80:27:b0:3b:9b:
         bc:e9:2a:e0:dd:d2:80:93:f3:44:20:09:bd:b3:d2:03:fb:a0:
         c8:6d:61:49:38:de:4f:a9:f6:60:34:b0:53:57:dd:34:33:8b:
         f0:a0:71:85:e3:4c:46:34:aa:94:ee:81:e5:7c:72:c4:64:b2:
         b7:3d:bd:49:f7:55:e6:4f:6d:6d:75:b1:9a:55:b1:dc:90:43:
         4d:2d:e6:9a:1b:96:39:68:d8:97:5a:fd:bf:ba:b2:09:5e:6a:
         81:b4:65:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:03:07 2026 by rpki-client