Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e5caf096-a08d-3e2b-a2ce-98a47b1cd8da.roa
File:                     e5caf096-a08d-3e2b-a2ce-98a47b1cd8da.roa (raw, json)
Hash identifier:          xnmDLjW5gPVZXAD0s0KWNmIHhHs1dC8g33p4tUIiRf4=
Subject key identifier:   0D:3C:4E:AA:22:7E:5A:C0:46:27:BE:DE:5B:6C:04:E6:23:F7:2B:A4
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584EDC92209EA5F4F77B883A1A00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e5caf096-a08d-3e2b-a2ce-98a47b1cd8da.roa
Signing time:             Mon 17 Aug 2026 01:00:12 +0000
ROA not before:           Mon 17 Aug 2026 01:00:12 +0000
ROA not after:            Sun 15 Nov 2026 02:00:12 +0000
asID:                     1492
IP address blocks:        65.49.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:dc:92:20:9e:a5:f4:f7:7b:88:3a:1a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Aug 17 01:00:12 2026 GMT
            Not After : Nov 15 02:00:12 2026 GMT
        Subject: CN=306e89d8-ef1f-413b-9b31-4bf6a1771108
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e2:ab:00:ed:53:23:35:e1:b0:af:40:63:e8:
                    f3:76:b7:20:c1:ee:d9:15:75:f4:e5:16:72:e3:1e:
                    5e:e9:d2:b1:ef:f6:5e:5f:9f:ce:28:14:25:84:91:
                    a0:4c:c6:b8:b9:b4:13:51:73:6c:76:e5:4b:58:cb:
                    c2:dc:c3:ec:05:94:18:93:d9:97:c0:e6:38:40:76:
                    3d:1d:7c:9f:01:f7:e0:a6:46:c5:50:5b:ab:da:57:
                    91:3b:1d:22:20:74:5b:4a:a5:d8:de:d0:b7:80:4f:
                    97:3f:72:0d:17:20:a6:a4:5c:e7:31:6b:41:e8:be:
                    09:f2:db:f1:98:86:3a:b6:87:eb:d3:7d:9d:1a:aa:
                    d9:b0:a3:25:61:cd:36:43:a3:e9:1c:1d:95:a0:48:
                    58:f3:27:de:ab:6a:14:d7:04:61:f6:a4:4b:94:b8:
                    18:11:43:a9:e0:29:77:82:81:ba:08:82:81:ee:2a:
                    02:e7:7f:5c:2a:23:60:91:c2:91:94:ad:7f:5a:00:
                    fb:13:51:33:14:f8:21:20:8c:95:0b:2b:06:76:1a:
                    a6:3a:2d:e5:39:a0:02:7b:27:c8:1e:2b:76:f2:84:
                    8f:95:7c:ab:61:a3:97:0e:25:d5:cd:97:2e:5d:9b:
                    31:5d:48:87:bb:51:7e:32:13:1a:27:da:28:bd:79:
                    aa:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:3C:4E:AA:22:7E:5A:C0:46:27:BE:DE:5B:6C:04:E6:23:F7:2B:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e5caf096-a08d-3e2b-a2ce-98a47b1cd8da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.49.127.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:d4:32:64:4d:4d:40:4f:3f:88:d8:37:7b:dd:31:b2:d1:5f:
         a5:99:94:eb:c4:93:54:17:ae:8c:a5:04:ba:aa:1b:0b:6c:4b:
         12:44:53:c6:b9:5a:89:5f:62:60:45:ff:40:be:00:3d:ef:79:
         06:ec:ac:d2:1b:fb:57:0f:5e:19:e5:48:92:17:94:6d:a7:28:
         93:ed:f2:02:18:47:ca:f7:09:c2:03:00:31:ca:1e:ae:c7:36:
         51:cc:ef:f6:86:57:bb:a4:c4:a8:47:47:eb:f6:6f:93:da:11:
         0a:df:2b:fe:28:cf:b9:b1:49:ec:c5:84:55:6b:01:ee:a1:29:
         e4:70:8c:6e:23:0e:0e:c8:1e:5a:52:7e:dd:e8:ed:af:ce:da:
         74:63:f2:42:73:5e:21:63:d6:8a:40:e9:71:d4:ad:42:9c:88:
         06:76:b8:66:56:48:92:cc:64:18:72:d5:49:92:1a:16:8d:e9:
         bf:b6:d5:08:f2:7c:f2:3c:81:66:8b:88:13:e3:13:1b:e8:a2:
         0a:70:13:4c:bf:98:11:37:1e:79:87:be:3e:d7:11:53:c5:40:
         86:45:4e:08:eb:bc:0f:41:65:9c:33:50:0a:41:c5:6b:34:81:
         e9:db:f2:d9:bd:75:96:62:0b:d6:3d:6e:2f:79:98:d4:13:8e:
         a7:b3:ba:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 06:16:13 2026 by rpki-client