Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3f5e10fb-cfa1-3260-8869-7d2f11c2bb91.roa
File:                     3f5e10fb-cfa1-3260-8869-7d2f11c2bb91.roa (raw, json)
Hash identifier:          Xjh+h/Q3Kq5TIeNubnldz7pSuVG76cotbFrWnItoinM=
Subject key identifier:   89:B4:9C:EA:8B:9B:76:18:9A:48:E5:19:73:74:68:08:FC:01:C2:44
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584EDC9232ADA8114A24F59AB890
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3f5e10fb-cfa1-3260-8869-7d2f11c2bb91.roa
Signing time:             Mon 17 Aug 2026 01:00:12 +0000
ROA not before:           Mon 17 Aug 2026 01:00:12 +0000
ROA not after:            Sun 15 Nov 2026 02:00:12 +0000
asID:                     11734
IP address blocks:        65.49.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 30 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:dc:92:32:ad:a8:11:4a:24:f5:9a:b8:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Aug 17 01:00:12 2026 GMT
            Not After : Nov 15 02:00:12 2026 GMT
        Subject: CN=8dbb8229-cdf7-4b59-a55a-12ac44571f05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:de:de:94:f5:55:71:eb:a3:b6:77:96:e6:48:
                    47:63:7d:42:52:94:6b:16:f6:03:93:87:41:14:df:
                    7c:62:53:ee:4e:a5:2f:61:a8:31:29:db:e9:63:7a:
                    23:24:6a:59:7b:25:16:41:1d:78:6e:74:a2:65:ae:
                    91:51:f7:f2:d8:86:d8:25:8a:c1:ce:a2:5a:38:df:
                    1b:ea:24:96:68:a2:97:6f:f5:37:40:d5:ca:c4:c5:
                    a0:5e:4e:bb:f0:d2:55:9a:29:8e:1a:7e:00:94:72:
                    14:34:49:9a:ba:59:43:0a:0a:b4:ec:6c:4d:41:ff:
                    70:ac:80:df:8d:12:63:fc:4f:47:1a:6b:5e:e4:53:
                    0a:b0:a3:03:bf:eb:6f:d3:04:46:00:a1:1b:a1:d0:
                    0d:3e:05:11:a6:fb:5d:ae:fd:a0:90:15:52:2e:a6:
                    da:49:dd:79:9a:8e:6b:ec:07:8b:aa:49:e2:78:e1:
                    89:9c:b4:95:27:8a:6e:79:ca:d7:ea:20:d0:41:80:
                    74:f2:7c:1c:5e:0b:c9:ea:31:76:88:a2:b5:e4:4f:
                    fa:7e:15:e0:5e:0d:1f:8b:d8:bd:86:39:5f:8b:73:
                    18:d2:f8:5d:b9:c8:44:7e:87:d3:8e:ab:b7:0f:62:
                    b8:36:97:3a:4b:7f:cd:38:3e:49:4b:d8:96:f8:85:
                    37:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:B4:9C:EA:8B:9B:76:18:9A:48:E5:19:73:74:68:08:FC:01:C2:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3f5e10fb-cfa1-3260-8869-7d2f11c2bb91.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.49.26.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bf:a1:42:22:9b:0a:aa:fa:58:3b:cb:65:54:b1:ce:c2:0b:bf:
         a0:cb:63:36:22:81:5f:e9:0e:1d:4e:64:fc:f7:1a:41:8c:57:
         a5:5b:44:82:54:4e:72:8b:0a:1f:67:16:90:0a:60:eb:7e:6a:
         23:07:ef:f0:b9:63:f3:e8:57:03:77:c1:e6:2c:8f:55:1a:3f:
         a9:db:a9:62:d2:a8:56:5e:1e:95:a0:33:7b:2d:bf:9b:0b:13:
         e8:7a:35:56:8e:87:35:bc:81:e7:fc:28:10:b0:04:30:cb:93:
         14:d1:90:4b:d6:ed:75:4b:32:ff:64:08:e0:ca:2a:55:16:80:
         19:eb:f6:34:ef:3a:7b:6c:d8:c7:c6:1f:c4:f7:76:f9:62:71:
         28:84:ce:e8:3a:1b:03:cc:f7:14:ba:67:57:e3:44:e3:40:1c:
         43:1f:94:50:55:8c:6c:a4:8f:3d:0d:1a:0c:5f:00:0f:ea:e0:
         fe:35:ce:b3:4b:37:85:a7:6a:f8:f1:ee:31:05:11:ed:fc:b6:
         83:82:82:51:0e:7b:bd:7d:28:75:13:dd:f9:a7:e7:72:ee:90:
         3d:25:b8:f6:53:b6:47:4d:40:1d:a0:b8:74:9a:76:05:fe:c2:
         81:ef:17:d9:a1:11:81:77:2c:34:3e:3e:23:9b:d5:b7:bf:69:
         10:dd:23:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 29 04:53:17 2026 by rpki-client