Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3bb2562a-3f0b-3226-b309-bd208afef175.roa
File:                     3bb2562a-3f0b-3226-b309-bd208afef175.roa (raw, json)
Hash identifier:          z33hkDJjZSXt3428ACySkWv5DpVDAc73c9NEuOlWCxY=
Subject key identifier:   12:76:F5:37:70:08:70:CE:35:0B:42:63:54:DA:95:CC:64:49:8A:3F
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584EA787FF1188BDB0A8043BDD00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3bb2562a-3f0b-3226-b309-bd208afef175.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     30149
IP address blocks:        65.220.38.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 29 Aug 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:ff:11:88:bd:b0:a8:04:3b:dd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=ce71637b-75e7-48cc-9c94-d3fd05f5cf49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:dd:27:77:11:e4:7d:30:e4:f2:16:49:76:63:
                    8c:72:77:ac:3f:68:98:10:6e:22:7d:5b:b7:d9:2a:
                    54:50:dc:66:b6:41:c5:76:42:34:f8:00:c9:2e:c3:
                    3f:f1:d1:97:1a:19:c5:db:a1:79:94:14:0b:82:b3:
                    d5:ce:a3:33:c1:95:e2:63:30:f5:0b:d1:02:27:5b:
                    cf:67:55:22:1c:db:f3:60:80:78:17:48:dc:6e:ea:
                    ca:3d:82:f1:76:b6:99:d7:20:31:e4:1b:c7:87:1d:
                    67:ef:7b:d2:c5:4e:0c:f7:4d:28:2c:40:fe:41:cb:
                    8b:c4:29:15:b6:12:c6:0a:7d:1d:79:f3:9d:42:1c:
                    93:75:2b:48:3d:f4:d4:98:a3:3e:73:53:b3:34:25:
                    b4:7f:10:09:5d:7f:42:4a:02:df:c0:a8:78:10:16:
                    3c:4a:5d:e6:6e:cf:13:3a:ab:09:67:80:48:ac:90:
                    7f:95:90:93:05:62:ae:a9:56:92:66:ba:2b:69:7e:
                    ad:74:58:4d:28:08:eb:94:dd:25:2b:cf:4e:9f:00:
                    fd:96:96:97:5d:18:2f:da:95:05:c9:98:1e:36:bc:
                    04:39:d6:5e:2a:29:50:f3:bb:39:3c:ef:13:e7:78:
                    f9:8e:a1:dc:a1:78:4b:fc:a0:51:01:b9:ff:2c:ff:
                    1d:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:76:F5:37:70:08:70:CE:35:0B:42:63:54:DA:95:CC:64:49:8A:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3bb2562a-3f0b-3226-b309-bd208afef175.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.220.38.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:3b:39:cb:a4:af:ec:d5:12:35:09:fe:5b:a5:79:8c:17:4b:
         ac:d1:cf:0e:2e:db:fd:18:9e:73:eb:55:b2:61:92:61:fa:14:
         3e:29:1b:dc:a9:13:c6:6d:62:28:fc:19:0b:78:d7:9e:85:72:
         d7:a7:61:23:4d:84:43:5c:ca:b5:e1:92:4d:ed:6b:16:db:76:
         ad:8a:07:70:dd:3a:c2:59:7f:b7:e7:5a:64:18:7b:31:33:45:
         4e:8d:32:20:79:65:d6:b0:36:13:3b:b7:ea:7c:6d:23:0e:80:
         cb:9c:13:f4:79:13:c8:5b:d6:22:13:74:ae:09:e3:16:4c:25:
         85:e9:ac:29:e7:56:5e:3d:f0:ef:e3:a2:a6:4c:15:7c:a1:05:
         e0:24:2c:47:68:56:ad:2e:40:11:a8:32:87:db:9a:20:1c:f5:
         13:35:cb:63:0b:d5:e7:a1:b2:d6:b0:33:5d:58:dd:2b:be:30:
         d4:08:d3:8a:2b:be:6b:5b:19:41:4c:3f:6a:9c:a6:0b:98:2a:
         33:7d:71:10:3d:7e:76:32:b7:d0:a5:66:4d:86:ce:4a:e1:b3:
         b2:b8:01:26:49:13:56:e1:c0:e8:25:e2:c3:a1:9a:47:37:9e:
         89:60:e0:3e:40:13:a9:06:14:7f:73:61:b4:cc:bd:0c:6d:6f:
         72:62:58:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 28 01:41:34 2026 by rpki-client