Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9c2d3359-7bc2-4c3d-9c33-c25034dbb049/ed7a8b9f-ed80-31f3-b610-2190ed49ae0e.roa
File:                     ed7a8b9f-ed80-31f3-b610-2190ed49ae0e.roa (raw, json)
Hash identifier:          PTovycpcfyBm2uX8meRq2o0T93GIYaZDEyPBxeNBWz8=
Subject key identifier:   56:A2:9E:6B:5F:2E:2E:98:95:B8:17:93:FE:27:C5:07:8C:AB:A9:BC
Certificate issuer:       /CN=9c2d3359-7bc2-4c3d-9c33-c25034dbb049
Certificate serial:       010D0C9F4328584F78E8389A56921344D8BAAF40
Authority key identifier: 3E:DA:72:32:3B:45:1C:DE:83:A9:DD:72:64:82:D2:19:99:A7:23:7D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9c2d3359-7bc2-4c3d-9c33-c25034dbb049.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9c2d3359-7bc2-4c3d-9c33-c25034dbb049/ed7a8b9f-ed80-31f3-b610-2190ed49ae0e.roa
Signing time:             Mon 12 Oct 2026 01:00:13 +0000
ROA not before:           Mon 12 Oct 2026 01:00:13 +0000
ROA not after:            Sun 10 Jan 2027 02:00:13 +0000
asID:                     55189
IP address blocks:        216.38.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9c2d3359-7bc2-4c3d-9c33-c25034dbb049/9c2d3359-7bc2-4c3d-9c33-c25034dbb049.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9c2d3359-7bc2-4c3d-9c33-c25034dbb049/9c2d3359-7bc2-4c3d-9c33-c25034dbb049.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9c2d3359-7bc2-4c3d-9c33-c25034dbb049.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Nov 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:78:e8:38:9a:56:92:13:44:d8:ba:af:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c2d3359-7bc2-4c3d-9c33-c25034dbb049
        Validity
            Not Before: Oct 12 01:00:13 2026 GMT
            Not After : Jan 10 02:00:13 2027 GMT
        Subject: CN=a2d5fdc2-abe2-45a5-977e-2323f60cd99c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:a0:b9:ac:dc:bc:85:89:46:e3:9d:f7:b8:ff:
                    03:7b:76:88:d8:35:0f:82:51:b7:6e:6f:f7:53:5b:
                    12:f2:29:bf:b4:1e:ef:b3:05:fe:0c:8d:c6:7e:24:
                    24:c7:79:61:5f:17:39:60:1a:6f:96:a4:da:b6:eb:
                    b2:36:e5:8f:71:a7:f3:f8:81:9f:7e:85:00:10:86:
                    18:fa:55:aa:e9:cb:eb:4f:a3:10:93:5b:c2:a8:86:
                    e1:60:ce:61:fe:91:16:81:e0:7d:7a:47:3e:64:c3:
                    56:d7:3e:4f:ca:56:ec:69:4f:e2:db:59:14:93:93:
                    0c:65:f2:ed:eb:6d:d8:3e:ad:42:88:9d:5e:73:91:
                    86:93:60:2c:a1:04:6e:41:4e:53:cd:03:c7:d8:08:
                    c5:33:ef:95:cc:6c:fb:d4:9b:df:ee:7f:ad:9a:66:
                    77:13:26:64:4f:86:7d:04:c1:37:87:cb:9d:09:7a:
                    30:84:b2:62:cb:73:5f:6d:e2:5f:dd:2e:7f:02:a8:
                    04:3b:44:8b:16:b3:56:c5:15:63:4c:be:1c:22:0c:
                    30:46:0d:68:cb:29:ac:f2:b2:da:27:9f:64:33:52:
                    98:43:c0:99:7e:f6:e5:a4:3d:3b:a1:2a:56:35:53:
                    3a:8f:4d:05:a3:d3:09:a4:58:e6:ae:dd:e9:c6:0a:
                    93:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:A2:9E:6B:5F:2E:2E:98:95:B8:17:93:FE:27:C5:07:8C:AB:A9:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9c2d3359-7bc2-4c3d-9c33-c25034dbb049/ed7a8b9f-ed80-31f3-b610-2190ed49ae0e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9c2d3359-7bc2-4c3d-9c33-c25034dbb049/9c2d3359-7bc2-4c3d-9c33-c25034dbb049.crl

            X509v3 Authority Key Identifier:
                keyid:3E:DA:72:32:3B:45:1C:DE:83:A9:DD:72:64:82:D2:19:99:A7:23:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9c2d3359-7bc2-4c3d-9c33-c25034dbb049.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.38.65.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:ac:24:9a:41:eb:f6:4a:4f:c3:13:fe:09:7d:de:d9:7e:83:
         aa:bc:63:1e:5a:69:8d:58:82:ac:75:9d:d7:e1:ec:58:06:4c:
         3c:2a:ab:bb:a6:27:b4:c9:b8:02:52:3e:6c:0d:01:90:48:d9:
         ba:de:6a:1a:54:8b:ed:ec:96:3f:6c:2d:53:a2:ee:41:f3:fb:
         49:65:a0:d3:ec:dc:4a:d9:c2:ef:49:14:c8:ef:7d:18:f7:8d:
         1c:b7:9d:9e:d6:f3:87:06:e1:e9:6a:36:8a:a9:ef:21:73:15:
         47:db:93:8f:d1:e3:2c:ed:71:ea:7a:9a:8d:79:18:b1:9f:dc:
         7c:9f:c2:07:30:69:8e:aa:3a:fb:d9:64:c7:ba:4b:86:c0:e2:
         c6:0b:07:2d:c4:92:cb:3b:51:50:5e:53:a0:6e:26:16:43:86:
         4f:b2:b3:f8:1b:c9:dd:bb:0a:f6:83:e3:7a:17:01:98:fc:82:
         7f:61:a3:e4:8e:45:85:dc:85:63:5f:c6:72:26:68:d9:df:6a:
         c0:74:a7:0c:f4:40:93:17:61:9d:0d:fe:c4:d0:3e:b7:a2:62:
         a7:d0:f5:f8:98:a5:67:fb:7d:ed:39:ca:bc:73:8c:84:cc:e1:
         d3:7b:e5:4b:33:fa:27:58:7a:be:e8:cc:8b:73:f5:d5:f3:37:
         e0:4c:77:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 08:35:46 2026 by rpki-client