Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/3e96bee1-0926-31fa-b07d-34bb1844597d.roa
File:                     3e96bee1-0926-31fa-b07d-34bb1844597d.roa (raw, json)
Hash identifier:          k5bOiwQzBVeLFiQ0bHDD+ZBogHm+i+RMtkUcQ+cuEng=
Subject key identifier:   D8:6E:E4:C5:E5:10:13:9A:B0:6D:81:79:7B:6C:9D:86:27:6F:AE:1A
Certificate issuer:       /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
Certificate serial:       010D0C9F4328584FD25BE23C40BCB846B29DBF00
Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/3e96bee1-0926-31fa-b07d-34bb1844597d.roa
Signing time:             Fri 13 Nov 2026 02:00:14 +0000
ROA not before:           Fri 13 Nov 2026 02:00:14 +0000
ROA not after:            Thu 11 Feb 2027 02:00:14 +0000
asID:                     11404
IP address blocks:        65.50.192.0/19 maxlen: 29
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Nov 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:d2:5b:e2:3c:40:bc:b8:46:b2:9d:bf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
        Validity
            Not Before: Nov 13 02:00:14 2026 GMT
            Not After : Feb 11 02:00:14 2027 GMT
        Subject: CN=cc6714a8-b6ba-4834-a11c-9221896a446e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:b6:64:26:60:8a:13:65:d2:23:96:13:01:9b:
                    21:b8:49:a7:95:15:75:90:8e:af:e1:0f:29:44:c2:
                    71:79:68:97:bc:fb:12:05:5b:f3:52:99:85:c9:cd:
                    d4:f0:52:2c:df:79:cf:71:2e:68:3f:d2:12:08:57:
                    6e:4e:44:28:c0:ec:b5:b9:94:e6:fd:16:1b:d6:be:
                    df:9f:87:70:c9:ea:30:76:2f:47:9d:ba:64:16:54:
                    dd:78:bb:2d:df:9b:93:a7:99:26:80:20:79:8c:4c:
                    9f:87:70:9c:4f:25:a0:e3:53:79:ce:a1:32:82:3e:
                    e7:7b:a1:d6:bf:51:7a:68:0f:f3:ae:74:72:5b:8e:
                    bd:4d:82:b7:0c:3b:46:93:91:54:3e:f0:51:8b:f5:
                    5f:9b:bb:73:8e:98:da:ff:ab:9d:c3:2c:db:0e:bb:
                    21:d7:09:f9:50:e1:34:bf:e5:19:29:b8:18:b1:db:
                    e4:b9:72:1f:45:2d:da:92:cb:24:43:0e:8b:4b:7b:
                    3b:2f:c9:78:18:6b:c7:07:77:f7:38:d8:3e:05:ef:
                    f8:5f:37:18:de:25:f1:ad:50:76:cd:69:bb:dd:a8:
                    4a:ee:af:fa:87:8d:5c:1b:d4:b9:2e:8a:e8:35:34:
                    ae:46:68:50:23:12:c0:fb:14:de:48:bf:e4:0b:f5:
                    14:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:6E:E4:C5:E5:10:13:9A:B0:6D:81:79:7B:6C:9D:86:27:6F:AE:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/3e96bee1-0926-31fa-b07d-34bb1844597d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl

            X509v3 Authority Key Identifier:
                keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.50.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:5f:72:29:7f:e1:81:86:88:7e:6e:1e:7d:12:71:81:8b:9d:
         c8:ef:34:96:91:1f:54:6b:5a:85:a6:53:3e:06:f2:3f:01:58:
         cc:1f:6b:d3:f0:89:32:03:4b:b6:63:23:93:e3:7b:5d:0d:da:
         dc:a3:f0:86:9c:0c:9c:8f:b4:bf:f8:fc:f2:6c:4b:80:36:09:
         01:07:02:61:78:fc:75:8a:bd:b7:45:b0:29:10:b3:72:7c:60:
         f4:c5:e9:4d:42:56:d1:cd:11:a3:7b:93:b1:c3:16:74:5e:7a:
         44:02:ce:85:90:ac:2e:78:69:58:2c:9f:45:3c:5a:4f:04:89:
         ca:31:5b:d4:cb:36:0c:ab:38:70:be:a1:d3:dd:62:ce:32:b1:
         47:21:b7:07:62:9f:7f:5d:d1:fe:6a:b9:7a:62:63:23:8f:04:
         6e:23:a7:59:93:6c:3d:58:e0:cc:fb:9f:e5:29:b1:92:35:99:
         94:1a:be:a6:34:45:11:33:c5:5f:93:ba:59:41:0a:e6:f1:49:
         35:b9:dd:40:c6:ea:6c:cb:27:d8:a8:69:72:d8:4d:1a:d8:d5:
         da:3c:12:5b:2b:03:bc:fb:92:d9:1f:21:4e:f9:f5:ca:6a:35:
         6d:74:53:1e:15:34:cd:ef:ae:5f:b2:37:82:42:ba:15:85:2b:
         c3:81:99:6d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE/SW+I8QLy4RrKdvwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk
OTg5MB4XDTI2MTExMzAyMDAxNFoXDTI3MDIxMTAyMDAxNFowLzEtMCsGA1UEAxMk
Y2M2NzE0YTgtYjZiYS00ODM0LWExMWMtOTIyMTg5NmE0NDZlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlbZkJmCKE2XSI5YTAZshuEmnlRV1kI6v4Q8p
RMJxeWiXvPsSBVvzUpmFyc3U8FIs33nPcS5oP9ISCFduTkQowOy1uZTm/RYb1r7f
n4dwyeowdi9HnbpkFlTdeLst35uTp5kmgCB5jEyfh3CcTyWg41N5zqEygj7ne6HW
v1F6aA/zrnRyW469TYK3DDtGk5FUPvBRi/Vfm7tzjpja/6udwyzbDrsh1wn5UOE0
v+UZKbgYsdvkuXIfRS3aksskQw6LS3s7L8l4GGvHB3f3ONg+Be/4XzcY3iXxrVB2
zWm73ahK7q/6h41cG9S5LoroNTSuRmhQIxLA+xTeSL/kC/UUhwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNhu5MXlEBOasG2BeXtsnYYnb64aMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk
OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvM2U5NmJlZTEtMDkyNi0z
MWZhLWIwN2QtMzRiYjE4NDQ1OTdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky
MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk
ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2
MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQTLAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA5fcil/4YGGiH5uHn0ScYGLncjvNJaRH1RrWoWmUz4G8j8BWMwfa9Pw
iTIDS7ZjI5Pje10N2tyj8IacDJyPtL/4/PJsS4A2CQEHAmF4/HWKvbdFsCkQs3J8
YPTF6U1CVtHNEaN7k7HDFnReekQCzoWQrC54aVgsn0U8Wk8EicoxW9TLNgyrOHC+
odPdYs4ysUchtwdin39d0f5quXpiYyOPBG4jp1mTbD1Y4Mz7n+UpsZI1mZQavqY0
RREzxV+TullBCubxSTW53UDG6mzLJ9ioaXLYTRrY1do8ElsrA7z7ktkfIU759cpq
NW10Ux4VNM3vrl+yN4JCuhWFK8OBmW0=
-----END CERTIFICATE-----
Generated at Sun Nov 15 14:11:46 2026 by rpki-client