Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/c2b7abbc-ca57-332b-9afe-f1dc2913f252.roa
File:                     c2b7abbc-ca57-332b-9afe-f1dc2913f252.roa (raw, json)
Hash identifier:          WX2FSvTL+cCc7B/08jY9CDSycFc83q/s0hyMPg48ZRw=
Subject key identifier:   2B:AA:72:46:A4:0D:F3:05:E5:9A:19:A7:1E:86:8B:48:01:00:E0:6D
Certificate issuer:       /CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
Certificate serial:       010D0C9F4328584F067230D04D44D29727AAE000
Authority key identifier: DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/c2b7abbc-ca57-332b-9afe-f1dc2913f252.roa
Signing time:             Tue 01 Sep 2026 01:00:12 +0000
ROA not before:           Tue 01 Sep 2026 01:00:12 +0000
ROA not after:            Mon 30 Nov 2026 02:00:12 +0000
asID:                     399208
IP address blocks:        65.51.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:06:72:30:d0:4d:44:d2:97:27:aa:e0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
        Validity
            Not Before: Sep  1 01:00:12 2026 GMT
            Not After : Nov 30 02:00:12 2026 GMT
        Subject: CN=06a9c1eb-ee29-4772-8228-2ec22df693f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:0b:df:ef:82:26:cc:19:31:86:54:10:b6:21:
                    23:a0:cf:9a:7b:2e:c5:98:9a:11:e0:4c:4b:12:2c:
                    74:1f:a6:fb:92:ba:a6:a5:1c:b5:9d:cf:f9:d4:14:
                    25:6b:46:e1:dc:50:99:10:a3:e1:99:81:2b:1e:8e:
                    76:76:23:4f:72:97:9d:36:44:d6:25:cf:35:d8:f3:
                    81:8f:ed:23:42:52:e3:b5:a7:13:22:f1:ee:39:9b:
                    07:96:96:28:29:ef:1a:31:d4:b6:63:0e:b7:c7:76:
                    51:0c:9b:a0:cf:d2:7a:3e:bd:4d:69:6b:02:ba:1c:
                    7b:61:3f:37:fd:8f:fc:7e:26:e2:e8:5a:b1:74:00:
                    a6:88:a7:c0:bd:72:26:4a:ae:c8:e0:e6:d3:f7:e2:
                    64:9b:b8:77:a5:7a:82:00:82:5f:0b:f2:bc:87:d7:
                    10:7c:ab:b3:96:11:6d:30:9e:90:e4:d4:72:e6:f4:
                    0d:aa:22:91:83:c5:c2:76:e9:2e:dc:c7:8c:d0:19:
                    f1:3e:ea:81:b8:30:73:bc:28:84:38:b2:87:83:1d:
                    db:92:99:6f:b0:1a:f0:40:a8:e9:e4:dd:bb:91:8b:
                    7d:44:35:79:11:77:2d:75:63:82:2f:46:81:75:77:
                    14:1c:d8:a8:02:20:01:a9:b5:e0:ca:ea:1c:7e:65:
                    bd:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:AA:72:46:A4:0D:F3:05:E5:9A:19:A7:1E:86:8B:48:01:00:E0:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/c2b7abbc-ca57-332b-9afe-f1dc2913f252.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl

            X509v3 Authority Key Identifier:
                keyid:DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.51.129.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:3b:c1:bc:90:63:9d:17:82:f0:a4:3c:ea:fc:fa:0a:04:f8:
         b5:74:ad:14:b8:54:c7:81:8f:96:8a:e5:e4:0c:14:e8:95:da:
         cc:75:7c:cd:35:ee:4f:bd:e9:7a:c3:ce:fe:21:de:3b:c5:61:
         83:f5:d5:48:cd:2a:57:f1:a5:2f:06:c5:97:33:db:9b:45:04:
         05:51:ca:ce:9d:72:b9:50:e7:88:91:41:d8:77:07:39:ac:68:
         b7:5e:ea:08:eb:a2:bd:1c:4f:3e:2a:b4:70:cf:46:01:22:19:
         b3:e3:bb:8a:aa:e8:11:48:ce:d6:9d:1d:9b:92:14:9b:6a:09:
         ad:4a:74:cc:a5:a4:61:18:84:78:4a:61:93:8b:32:29:89:02:
         3b:7b:85:74:e8:45:47:f2:b7:42:53:20:e3:d1:99:e5:42:17:
         cb:09:dd:0b:3b:93:75:67:b7:3e:1b:53:e9:d3:e5:91:08:49:
         c6:bc:47:d6:d1:71:d9:27:b4:2b:1f:9a:c8:51:3b:30:2a:e1:
         04:31:69:33:ef:28:3d:b3:37:0b:ee:e8:ab:ba:3d:5d:1d:fd:
         24:f6:b6:62:5e:e4:b3:86:bb:36:78:00:59:d8:1f:e0:42:8c:
         1c:82:85:57:0b:0d:9a:55:00:ef:af:68:73:30:50:f1:fd:73:
         cd:a7:53:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 10:04:08 2026 by rpki-client