Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/e2d0c2f1-83d2-33a4-9bbe-c2858e1936d8.roa
File:                     e2d0c2f1-83d2-33a4-9bbe-c2858e1936d8.roa (raw, json)
Hash identifier:          DGtR3hla8IlgJOQOfQ5fS0km5kkysiQoFc7GpPrWx3I=
Subject key identifier:   C7:91:6A:89:41:36:DC:EA:3A:C2:50:14:70:16:0F:20:81:4F:CD:4A
Certificate issuer:       /CN=31d3a050-3ee6-45bf-992f-9ac005f3ff84
Certificate serial:       010D0C9F4328584F8DD8902EED4B4CAFED014600
Authority key identifier: AB:00:D1:33:68:0F:2D:4C:58:E5:6F:8B:5D:DC:58:89:20:FE:92:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/e2d0c2f1-83d2-33a4-9bbe-c2858e1936d8.roa
Signing time:             Mon 19 Oct 2026 13:00:12 +0000
ROA not before:           Mon 19 Oct 2026 13:00:12 +0000
ROA not after:            Sun 17 Jan 2027 14:00:12 +0000
asID:                     20055
IP address blocks:        65.38.48.0/20 maxlen: 20
                          72.35.192.0/20 maxlen: 20
                          216.228.192.0/20 maxlen: 20
                          2607:f248::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/31d3a050-3ee6-45bf-992f-9ac005f3ff84.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/31d3a050-3ee6-45bf-992f-9ac005f3ff84.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 01 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:8d:d8:90:2e:ed:4b:4c:af:ed:01:46:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31d3a050-3ee6-45bf-992f-9ac005f3ff84
        Validity
            Not Before: Oct 19 13:00:12 2026 GMT
            Not After : Jan 17 14:00:12 2027 GMT
        Subject: CN=50579175-e1f4-4526-aa04-fc619566e2c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:b4:2a:5a:74:98:8d:dd:2c:56:aa:d5:8b:f1:
                    d9:ae:2f:54:00:27:99:07:91:cc:47:22:30:a1:d6:
                    ad:7c:1d:89:3c:33:1d:d9:d8:2c:b7:37:de:28:d9:
                    1e:5e:37:b3:ca:08:92:c0:08:c1:db:bc:6c:7d:9c:
                    bf:40:1b:26:60:40:b1:d2:39:f7:82:f0:8f:fe:4f:
                    6b:64:55:d2:8c:ca:78:16:0a:99:55:ab:6c:a4:a1:
                    83:45:1a:11:c5:0a:85:de:47:a2:63:f8:b5:3f:1e:
                    fe:b3:72:21:da:ee:88:b0:c1:db:02:ac:d4:78:1d:
                    d9:df:94:13:7a:5c:fa:21:85:0d:fa:f0:5e:91:e1:
                    15:7e:a3:1b:03:c5:d9:97:03:dd:7e:87:3c:c2:8f:
                    9d:f5:c8:d8:00:f9:57:f2:4e:f1:d6:ea:f7:39:fc:
                    0d:b3:97:7b:9e:31:61:95:a1:a2:88:07:8b:5d:d0:
                    b4:b5:7a:69:77:20:6e:d2:4c:80:2a:58:bc:fa:9c:
                    99:c4:e4:f4:92:28:1d:a5:34:6f:5a:13:a8:17:72:
                    a9:9c:69:df:ea:79:d0:d9:0d:d9:d2:6e:b1:a3:12:
                    6e:9d:48:88:16:76:f8:9c:e3:bb:ea:4b:46:59:e8:
                    f1:f1:3e:75:f9:29:fe:ed:ef:f2:16:c5:18:4f:a1:
                    08:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:91:6A:89:41:36:DC:EA:3A:C2:50:14:70:16:0F:20:81:4F:CD:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/e2d0c2f1-83d2-33a4-9bbe-c2858e1936d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/31d3a050-3ee6-45bf-992f-9ac005f3ff84.crl

            X509v3 Authority Key Identifier:
                keyid:AB:00:D1:33:68:0F:2D:4C:58:E5:6F:8B:5D:DC:58:89:20:FE:92:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.38.48.0/20
                  72.35.192.0/20
                  216.228.192.0/20
                IPv6:
                  2607:f248::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:a4:55:2f:e8:b1:a6:f9:c4:a3:ee:25:67:e2:5b:72:92:ec:
         f8:a6:28:e8:0c:55:a9:33:9a:06:d5:8d:4e:4d:2c:ff:5a:81:
         00:da:5f:f3:50:aa:60:e8:0a:42:8b:70:68:cc:4c:7b:a4:b2:
         c5:2d:b9:30:3b:2d:b5:da:3b:db:b0:1f:4b:8d:ca:e0:d3:5f:
         da:d3:b7:60:45:a7:fb:bd:58:c7:d1:ce:f3:13:a2:19:d6:c0:
         9b:e4:d7:79:c9:7f:bb:a6:9f:52:ff:1f:b9:fb:2d:d5:57:65:
         d2:ae:98:cb:24:55:a1:fc:1a:94:2d:5b:ea:33:bb:35:12:f1:
         79:10:2c:be:7a:15:92:a2:78:b1:79:1d:2e:38:85:68:e3:a7:
         a5:58:e9:43:7d:e2:51:dd:6a:08:23:92:d0:97:43:50:75:bb:
         a0:9f:26:a0:88:da:af:9e:be:2c:62:8c:66:3c:72:52:0b:09:
         9a:30:0d:e3:e0:35:84:e8:ea:2d:9c:56:c4:72:84:14:eb:91:
         8d:06:41:64:32:4d:9c:cf:38:4b:60:d0:bd:e1:47:bc:b1:2f:
         93:ee:99:06:b6:a3:f3:48:08:62:c4:61:98:12:b0:ea:cc:54:
         12:0e:a0:31:21:65:01:23:58:aa:c6:27:cc:1a:04:3e:7d:e4:
         33:a6:cb:04
-----BEGIN CERTIFICATE-----
MIIGXjCCBUagAwIBAgIUAQ0Mn0MoWE+N2JAu7UtMr+0BRgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzFkM2EwNTAtM2VlNi00NWJmLTk5MmYtOWFjMDA1ZjNm
Zjg0MB4XDTI2MTAxOTEzMDAxMloXDTI3MDExNzE0MDAxMlowLzEtMCsGA1UEAxMk
NTA1NzkxNzUtZTFmNC00NTI2LWFhMDQtZmM2MTk1NjZlMmMzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkrQqWnSYjd0sVqrVi/HZri9UACeZB5HMRyIw
odatfB2JPDMd2dgstzfeKNkeXjezygiSwAjB27xsfZy/QBsmYECx0jn3gvCP/k9r
ZFXSjMp4FgqZVatspKGDRRoRxQqF3keiY/i1Px7+s3Ih2u6IsMHbAqzUeB3Z35QT
elz6IYUN+vBekeEVfqMbA8XZlwPdfoc8wo+d9cjYAPlX8k7x1ur3OfwNs5d7njFh
laGiiAeLXdC0tXppdyBu0kyAKli8+pyZxOT0kigdpTRvWhOoF3KpnGnf6nnQ2Q3Z
0m6xoxJunUiIFnb4nOO76ktGWejx8T51+Sn+7e/yFsUYT6EIowIDAQABo4IDcDCC
A2wwHQYDVR0OBBYEFMeRaolBNtzqOsJQFHAWDyCBT81KMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMWQz
YTA1MC0zZWU2LTQ1YmYtOTkyZi05YWMwMDVmM2ZmODQvZTJkMGMyZjEtODNkMi0z
M2E0LTliYmUtYzI4NThlMTkzNmQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzFkM2EwNTAtM2VlNi00NWJmLTk5
MmYtOWFjMDA1ZjNmZjg0LzMxZDNhMDUwLTNlZTYtNDViZi05OTJmLTlhYzAwNWYz
ZmY4NC5jcmwwHwYDVR0jBBgwFoAUqwDRM2gPLUxY5W+LXdxYiSD+kuswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8zMWQzYTA1MC0zZWU2LTQ1YmYtOTkyZi05YWMw
MDVmM2ZmODQuY2VyMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQEQSYwAwQE
SCPAAwQE2OTAMA0EAgACMAcDBQAmB/JIMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH
DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz
L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBABSkVS/osab5xKPuJWfi
W3KS7PimKOgMVakzmgbVjU5NLP9agQDaX/NQqmDoCkKLcGjMTHukssUtuTA7LbXa
O9uwH0uNyuDTX9rTt2BFp/u9WMfRzvMTohnWwJvk13nJf7umn1L/H7n7LdVXZdKu
mMskVaH8GpQtW+ozuzUS8XkQLL56FZKieLF5HS44hWjjp6VY6UN94lHdaggjktCX
Q1B1u6CfJqCI2q+evixijGY8clILCZowDePgNYTo6i2cVsRyhBTrkY0GQWQyTZzP
OEtg0L3hR7yxL5PumQa2o/NICGLEYZgSsOrMVBIOoDEhZQEjWKrGJ8waBD595DOm
ywQ=
-----END CERTIFICATE-----
Generated at Sat Oct 31 15:22:42 2026 by rpki-client