Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/35c465ca-0a44-43ea-a23f-e0d2de220e1a/49950327-e458-3c3a-8593-2cea9f0380f0.roa
File:                     49950327-e458-3c3a-8593-2cea9f0380f0.roa (raw, json)
Hash identifier:          SkzYURDxTyZwu9wb5IlPh8pYoLgzGnV/Oo4jPCxkYKg=
Subject key identifier:   E8:65:98:4C:CA:55:E9:64:89:90:DD:7E:F7:D1:09:47:04:FF:AF:3A
Certificate issuer:       /CN=35c465ca-0a44-43ea-a23f-e0d2de220e1a
Certificate serial:       010D0C9F4328584F7E7DBC010107C53B8A8E6480
Authority key identifier: B7:37:30:1E:20:83:CB:C9:14:43:9B:7C:6E:43:4A:B7:7A:42:42:2F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/35c465ca-0a44-43ea-a23f-e0d2de220e1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/35c465ca-0a44-43ea-a23f-e0d2de220e1a/49950327-e458-3c3a-8593-2cea9f0380f0.roa
Signing time:             Wed 14 Oct 2026 01:00:13 +0000
ROA not before:           Wed 14 Oct 2026 01:00:13 +0000
ROA not after:            Tue 12 Jan 2027 02:00:13 +0000
asID:                     3737
IP address blocks:        24.55.128.0/19 maxlen: 24
                          24.102.128.0/17 maxlen: 24
                          24.115.0.0/16 maxlen: 24
                          24.152.192.0/18 maxlen: 24
                          24.229.0.0/16 maxlen: 24
                          24.238.32.0/19 maxlen: 24
                          24.238.64.0/19 maxlen: 24
                          24.246.224.0/19 maxlen: 24
                          50.29.128.0/17 maxlen: 24
                          64.67.0.0/16 maxlen: 24
                          69.12.12.0/22 maxlen: 24
                          70.15.0.0/16 maxlen: 24
                          70.44.0.0/16 maxlen: 24
                          75.97.0.0/16 maxlen: 24
                          104.36.124.0/22 maxlen: 24
                          216.49.0.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/35c465ca-0a44-43ea-a23f-e0d2de220e1a/35c465ca-0a44-43ea-a23f-e0d2de220e1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/35c465ca-0a44-43ea-a23f-e0d2de220e1a/35c465ca-0a44-43ea-a23f-e0d2de220e1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/35c465ca-0a44-43ea-a23f-e0d2de220e1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 16 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7e:7d:bc:01:01:07:c5:3b:8a:8e:64:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35c465ca-0a44-43ea-a23f-e0d2de220e1a
        Validity
            Not Before: Oct 14 01:00:13 2026 GMT
            Not After : Jan 12 02:00:13 2027 GMT
        Subject: CN=2b3158b4-e2b9-46eb-8939-f2c2e1f2611b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:e9:cc:7b:97:28:8b:cd:3e:a0:71:05:e0:4c:
                    53:e6:9f:75:77:ec:a9:97:4e:ba:76:88:03:6c:97:
                    87:31:1f:9f:1d:f8:5d:c7:69:f7:9a:89:2e:fa:86:
                    05:91:5d:d3:63:a9:c7:32:15:bf:d5:56:d4:e1:61:
                    48:38:f8:36:32:e5:bf:c5:73:f4:80:d7:75:35:24:
                    07:05:84:e7:57:0c:13:d6:da:49:e2:ca:2a:b8:74:
                    ec:9a:44:e0:ca:1c:06:85:40:09:1a:14:88:bc:82:
                    1d:53:b4:25:69:6f:83:7a:ee:78:fa:d3:2d:d2:cf:
                    32:00:74:e8:29:8c:2d:29:98:00:1f:bf:1b:75:fb:
                    0c:02:6b:31:2b:68:73:3c:3a:a3:db:7a:2a:44:6c:
                    2a:ab:f9:9e:00:c8:26:69:2b:19:e6:32:75:ad:e1:
                    1c:71:83:f8:20:e9:4b:36:76:b4:38:86:54:c6:84:
                    b6:5f:c9:c9:37:11:10:46:fb:e6:6a:1c:8f:9c:c5:
                    3f:21:19:ee:c2:c9:38:3a:9a:8a:3a:27:33:0f:bb:
                    31:4d:0d:b8:22:3a:8a:e2:5d:7d:04:5c:1e:b5:af:
                    a9:fe:4b:c2:61:91:54:44:da:0b:36:cc:65:41:b2:
                    bc:27:76:24:f2:17:b3:e5:42:29:1c:0b:6a:4a:59:
                    25:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:65:98:4C:CA:55:E9:64:89:90:DD:7E:F7:D1:09:47:04:FF:AF:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/35c465ca-0a44-43ea-a23f-e0d2de220e1a/49950327-e458-3c3a-8593-2cea9f0380f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/35c465ca-0a44-43ea-a23f-e0d2de220e1a/35c465ca-0a44-43ea-a23f-e0d2de220e1a.crl

            X509v3 Authority Key Identifier:
                keyid:B7:37:30:1E:20:83:CB:C9:14:43:9B:7C:6E:43:4A:B7:7A:42:42:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/35c465ca-0a44-43ea-a23f-e0d2de220e1a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.55.128.0/19
                  24.102.128.0/17
                  24.115.0.0/16
                  24.152.192.0/18
                  24.229.0.0/16
                  24.238.32.0-24.238.95.255
                  24.246.224.0/19
                  50.29.128.0/17
                  64.67.0.0/16
                  69.12.12.0/22
                  70.15.0.0/16
                  70.44.0.0/16
                  75.97.0.0/16
                  104.36.124.0/22
                  216.49.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:5c:59:73:2f:3a:6d:a0:68:b2:62:9e:d6:b0:45:2a:81:e8:
         68:a5:d3:98:b3:98:9e:fb:f6:bf:2e:1a:96:11:5b:bc:d2:5a:
         54:83:eb:b2:58:d4:85:b7:ad:d9:b8:f4:fc:08:fd:94:37:d0:
         48:3d:36:50:4c:2a:b7:8f:f3:15:28:8e:53:dd:e4:75:9b:43:
         da:a6:58:b8:3d:0c:e8:f1:dc:e7:74:14:e8:67:4d:f5:e1:6b:
         fc:e7:c3:06:36:66:38:49:65:b5:20:00:38:70:74:87:d5:86:
         77:5f:df:26:eb:3c:f8:76:12:0f:d8:1f:d6:04:be:73:fd:a3:
         d4:cf:68:fd:12:12:a5:52:79:46:b3:d9:77:b4:b9:7f:57:c5:
         62:d7:f3:0c:a2:29:36:60:50:79:d2:26:d6:fd:43:8c:5e:a4:
         fa:78:4f:d6:10:c4:3e:7c:ea:36:30:04:fa:65:77:25:90:08:
         a4:08:cf:16:19:d3:a0:83:40:ab:9a:1a:4d:af:9d:dd:6a:cc:
         3e:a6:2c:08:10:e7:4e:22:51:cc:75:c3:1e:66:1a:86:fe:bd:
         5b:a4:9e:da:ac:6d:32:74:db:a6:8e:c8:f5:9a:0f:c8:7b:61:
         c8:bd:d5:0b:4f:90:7b:41:a0:0f:15:6e:df:74:51:a6:ca:b2:
         22:85:da:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 10:05:22 2026 by rpki-client