Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b9b8028-72e5-488e-971c-54bd1e51f064/d46bde8b-c4af-3c7c-b58a-db64c47da4bb.roa
File:                     d46bde8b-c4af-3c7c-b58a-db64c47da4bb.roa (raw, json)
Hash identifier:          ILl9mhxjr/mtJGa/6w5cyVqfiJm1R4F2TKpVUWJ3WIw=
Subject key identifier:   72:A7:3C:DB:21:D0:9A:A7:3C:09:37:70:2C:8F:0B:A8:A5:F4:96:40
Certificate issuer:       /CN=3b9b8028-72e5-488e-971c-54bd1e51f064
Certificate serial:       010D0C9F4328584EA7880BECA0D91942003D7680
Authority key identifier: 5F:8B:61:30:92:66:A4:EA:82:F9:CD:58:0F:27:90:55:72:01:AA:BD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b9b8028-72e5-488e-971c-54bd1e51f064.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b9b8028-72e5-488e-971c-54bd1e51f064/d46bde8b-c4af-3c7c-b58a-db64c47da4bb.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     16509
IP address blocks:        65.98.146.0/24 maxlen: 24
                          65.98.206.0/24 maxlen: 24
                          65.98.214.0/24 maxlen: 24
                          65.98.228.0/24 maxlen: 24
                          65.98.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b9b8028-72e5-488e-971c-54bd1e51f064/3b9b8028-72e5-488e-971c-54bd1e51f064.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b9b8028-72e5-488e-971c-54bd1e51f064/3b9b8028-72e5-488e-971c-54bd1e51f064.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b9b8028-72e5-488e-971c-54bd1e51f064.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:0b:ec:a0:d9:19:42:00:3d:76:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b9b8028-72e5-488e-971c-54bd1e51f064
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=873ced50-3136-485d-913c-c4d15d5526b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:7b:c3:a5:9f:8f:e2:df:6b:96:8a:7b:3e:ee:
                    24:2c:ce:a4:38:58:01:76:7c:69:c2:84:35:cb:e4:
                    65:43:c2:29:15:be:57:79:89:ce:ea:bf:04:f0:a9:
                    ca:44:a4:3a:4c:8f:65:46:44:41:59:bf:7a:73:4c:
                    7c:48:35:b6:38:c8:06:9c:35:9c:8f:44:5f:f6:b7:
                    27:b3:07:f7:36:48:f9:cf:ff:5b:78:9f:bc:e9:5b:
                    be:74:3a:84:5d:1c:7d:8f:b4:d1:b5:9f:ac:2b:67:
                    b6:52:9e:7b:19:28:7a:c0:5c:ad:76:0a:f7:91:cf:
                    2f:37:6c:ee:b9:d2:bb:2e:61:52:d4:4f:4c:fb:fa:
                    94:ad:8f:32:e6:b8:8c:8e:2e:1c:64:44:b0:4f:f3:
                    0e:7d:fe:5d:79:24:1d:27:7c:93:99:c3:fb:11:23:
                    aa:22:cb:61:d4:2b:5e:ec:7a:86:07:78:76:f5:21:
                    18:5b:c7:1e:77:36:56:cc:ce:a5:25:f1:03:c2:da:
                    de:6a:48:69:e3:9f:d5:5b:a7:db:75:26:20:c5:9f:
                    5b:8b:e7:a8:74:f0:a6:84:f0:4f:a0:cb:da:06:90:
                    9d:33:ea:8b:2c:e0:c0:63:60:7f:c2:dc:d5:b7:57:
                    33:e1:2a:78:ef:b1:af:35:b5:52:94:7d:d2:50:19:
                    eb:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:A7:3C:DB:21:D0:9A:A7:3C:09:37:70:2C:8F:0B:A8:A5:F4:96:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b9b8028-72e5-488e-971c-54bd1e51f064/d46bde8b-c4af-3c7c-b58a-db64c47da4bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b9b8028-72e5-488e-971c-54bd1e51f064/3b9b8028-72e5-488e-971c-54bd1e51f064.crl

            X509v3 Authority Key Identifier:
                keyid:5F:8B:61:30:92:66:A4:EA:82:F9:CD:58:0F:27:90:55:72:01:AA:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b9b8028-72e5-488e-971c-54bd1e51f064.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.98.146.0/24
                  65.98.206.0/24
                  65.98.214.0/24
                  65.98.228.0/24
                  65.98.250.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:7f:e0:7b:15:50:e5:33:36:c7:83:81:39:d9:ff:74:19:48:
         56:36:c6:aa:64:c4:fe:02:3c:4f:b0:c9:7b:1b:2d:1f:70:38:
         0d:ac:e5:38:f0:5e:2f:4c:f5:e5:ce:20:7a:80:dd:9c:d0:38:
         3a:4a:7c:cc:37:12:2b:4b:3b:3c:24:4d:3d:5f:0b:aa:1c:05:
         a1:d6:ed:fa:f2:04:f0:44:e3:86:13:c9:32:fc:da:5c:86:86:
         06:d0:a1:36:d5:eb:cc:f5:1f:a9:67:bf:2f:ac:5c:cb:4c:9a:
         56:fe:39:a8:2c:5e:5c:c9:f8:d1:42:7e:ef:7a:26:fa:a7:31:
         6b:68:b1:c4:e7:70:7c:6e:b8:a3:c2:d2:a9:57:8d:e1:38:50:
         61:f5:54:e6:81:0a:39:ff:d0:42:6e:b4:5a:05:a7:0d:70:22:
         c7:35:2b:f2:a7:68:14:52:e6:9e:6f:d3:b3:88:24:1b:62:d8:
         36:c0:0a:88:6a:4c:92:14:32:a8:34:dd:04:5e:a8:17:ab:5a:
         03:43:dd:03:55:8c:d6:2c:29:a1:26:10:e8:ab:d0:b0:cb:86:
         a0:63:69:67:fe:70:cf:c9:ae:89:4c:f1:58:9e:03:c0:3f:12:
         af:e5:cf:b0:20:40:69:8b:76:81:ff:df:dd:51:c7:bb:6e:a3:
         5a:55:b4:d6
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Aug 21 00:19:00 2026 by rpki-client