Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9acebd4e-10d7-44b3-802e-4efe607dd4e3/321af030-02a0-3657-a888-5ff509ca35d1.roa
File:                     321af030-02a0-3657-a888-5ff509ca35d1.roa (raw, json)
Hash identifier:          QCDmOyC0I3N0EAPwJ2uFnkM0O3MNPMjTPECgRemtX/o=
Subject key identifier:   07:30:DC:C5:FB:99:1D:A1:2B:20:FC:8F:26:FA:25:55:03:1C:67:04
Certificate issuer:       /CN=9acebd4e-10d7-44b3-802e-4efe607dd4e3
Certificate serial:       010D0C9F4328584DCDC5AB2E2D6E417D9B8FC8A0
Authority key identifier: AA:97:35:3D:93:AC:AD:D5:70:FB:DB:56:2D:A5:D4:0F:56:55:74:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9acebd4e-10d7-44b3-802e-4efe607dd4e3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9acebd4e-10d7-44b3-802e-4efe607dd4e3/321af030-02a0-3657-a888-5ff509ca35d1.roa
Signing time:             Tue 12 May 2026 01:00:24 +0000
ROA not before:           Tue 12 May 2026 01:00:24 +0000
ROA not after:            Mon 10 Aug 2026 01:00:24 +0000
asID:                     14618
IP address blocks:        65.38.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9acebd4e-10d7-44b3-802e-4efe607dd4e3/9acebd4e-10d7-44b3-802e-4efe607dd4e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9acebd4e-10d7-44b3-802e-4efe607dd4e3/9acebd4e-10d7-44b3-802e-4efe607dd4e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9acebd4e-10d7-44b3-802e-4efe607dd4e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cd:c5:ab:2e:2d:6e:41:7d:9b:8f:c8:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9acebd4e-10d7-44b3-802e-4efe607dd4e3
        Validity
            Not Before: May 12 01:00:24 2026 GMT
            Not After : Aug 10 01:00:24 2026 GMT
        Subject: CN=44b66a8e-d717-4b39-a72a-438b291d81b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:4d:ac:8d:94:4d:8e:10:97:86:b5:a1:2b:e8:
                    ea:cf:99:70:69:b2:d4:e8:5f:99:e1:53:b4:46:a8:
                    dd:d7:8a:00:ff:8a:b0:51:cd:1c:44:34:f5:b6:10:
                    c9:35:32:c5:fb:14:c4:93:5c:c2:7b:32:07:dd:82:
                    c2:2e:29:a4:e5:e1:07:6d:13:2e:e6:64:07:26:d9:
                    29:d0:c1:de:24:f8:31:e6:dd:21:1a:30:b8:4e:92:
                    f6:45:2c:36:cd:b1:18:e6:d2:76:4d:0f:00:d9:24:
                    49:b6:dd:33:24:72:52:55:8e:63:9b:2f:c7:a2:dd:
                    92:fd:29:f0:09:ec:b5:a9:18:2d:80:56:5f:aa:d1:
                    45:ee:4f:bc:fe:a9:04:3b:3d:11:37:37:37:3e:a5:
                    12:b6:32:87:a9:f1:0e:90:7f:65:08:86:2b:bd:dc:
                    e3:ef:75:ed:7b:55:4d:d6:9f:3c:11:7c:53:25:aa:
                    29:c5:5b:ec:65:0e:ae:85:1d:4d:e9:bb:02:7f:ad:
                    a7:9f:33:42:82:87:94:c9:b5:ad:79:90:84:c8:77:
                    10:55:31:61:1c:92:06:ca:b3:4b:32:08:29:88:e7:
                    94:11:f3:a0:b4:69:04:8b:fa:ed:b9:ef:90:a6:78:
                    62:2a:23:3c:81:9a:c1:5a:03:9c:e0:75:2d:69:eb:
                    a7:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:30:DC:C5:FB:99:1D:A1:2B:20:FC:8F:26:FA:25:55:03:1C:67:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9acebd4e-10d7-44b3-802e-4efe607dd4e3/321af030-02a0-3657-a888-5ff509ca35d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9acebd4e-10d7-44b3-802e-4efe607dd4e3/9acebd4e-10d7-44b3-802e-4efe607dd4e3.crl

            X509v3 Authority Key Identifier:
                keyid:AA:97:35:3D:93:AC:AD:D5:70:FB:DB:56:2D:A5:D4:0F:56:55:74:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9acebd4e-10d7-44b3-802e-4efe607dd4e3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.38.126.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:3e:11:99:54:52:a1:c2:40:5b:5a:7d:24:ac:b3:fc:00:47:
         91:d9:61:1f:31:db:26:dd:f1:05:c6:e2:ec:8f:76:0f:f1:82:
         fc:a5:06:1f:22:40:13:c3:f5:ff:c4:14:2a:ed:4c:f2:08:87:
         dd:88:6d:95:6e:a3:2e:05:1f:29:62:ab:3c:2d:83:22:5d:2f:
         d1:9d:37:99:51:68:e6:62:61:c0:2f:fd:94:61:6a:22:57:60:
         04:26:49:34:34:6d:e3:e5:6e:b5:3e:aa:bf:51:f6:8f:ff:69:
         ea:30:c3:b5:64:c0:f5:a5:cc:1e:6b:a3:13:b0:e6:92:5a:6c:
         68:96:e1:0a:0a:9f:b7:ef:00:e0:73:2c:9e:a4:81:76:21:ee:
         0e:07:65:bc:3e:fb:af:52:a3:94:d4:42:dd:d7:c3:06:4e:fa:
         31:8f:6d:f8:de:b3:96:13:61:b9:b9:dc:fe:36:20:98:d1:2f:
         74:31:c3:e0:a6:a5:73:b3:0e:51:5d:38:fe:27:33:fb:05:e1:
         14:06:30:a3:d2:2f:95:e8:ec:67:f7:2c:05:47:50:d9:1c:5a:
         19:52:db:98:2c:79:bd:e8:62:f5:35:fd:8e:17:e4:4f:72:47:
         89:c5:b1:db:89:ac:3c:01:7d:32:2a:fd:48:9d:a5:a9:24:43:
         0b:20:53:2d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3NxasuLW5BfZuPyKAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWFjZWJkNGUtMTBkNy00NGIzLTgwMmUtNGVmZTYwN2Rk
NGUzMB4XDTI2MDUxMjAxMDAyNFoXDTI2MDgxMDAxMDAyNFowLzEtMCsGA1UEAxMk
NDRiNjZhOGUtZDcxNy00YjM5LWE3MmEtNDM4YjI5MWQ4MWI0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxE2sjZRNjhCXhrWhK+jqz5lwabLU6F+Z4VO0
Rqjd14oA/4qwUc0cRDT1thDJNTLF+xTEk1zCezIH3YLCLimk5eEHbRMu5mQHJtkp
0MHeJPgx5t0hGjC4TpL2RSw2zbEY5tJ2TQ8A2SRJtt0zJHJSVY5jmy/Hot2S/Snw
Cey1qRgtgFZfqtFF7k+8/qkEOz0RNzc3PqUStjKHqfEOkH9lCIYrvdzj73Xte1VN
1p88EXxTJaopxVvsZQ6uhR1N6bsCf62nnzNCgoeUybWteZCEyHcQVTFhHJIGyrNL
MggpiOeUEfOgtGkEi/rtue+QpnhiKiM8gZrBWgOc4HUtaeunKQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAcw3MX7mR2hKyD8jyb6JVUDHGcEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy85YWNl
YmQ0ZS0xMGQ3LTQ0YjMtODAyZS00ZWZlNjA3ZGQ0ZTMvMzIxYWYwMzAtMDJhMC0z
NjU3LWE4ODgtNWZmNTA5Y2EzNWQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOWFjZWJkNGUtMTBkNy00NGIzLTgw
MmUtNGVmZTYwN2RkNGUzLzlhY2ViZDRlLTEwZDctNDRiMy04MDJlLTRlZmU2MDdk
ZDRlMy5jcmwwHwYDVR0jBBgwFoAUqpc1PZOsrdVw+9tWLaXUD1ZVdGEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy85YWNlYmQ0ZS0xMGQ3LTQ0YjMtODAyZS00ZWZl
NjA3ZGQ0ZTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQSZ+MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG4+EZlUUqHCQFtafSSss/wAR5HZYR8x2ybd8QXG4uyPdg/xgvylBh8i
QBPD9f/EFCrtTPIIh92IbZVuoy4FHyliqzwtgyJdL9GdN5lRaOZiYcAv/ZRhaiJX
YAQmSTQ0bePlbrU+qr9R9o//aeoww7VkwPWlzB5roxOw5pJabGiW4QoKn7fvAOBz
LJ6kgXYh7g4HZbw++69So5TUQt3XwwZO+jGPbfjes5YTYbm53P42IJjRL3Qxw+Cm
pXOzDlFdOP4nM/sF4RQGMKPSL5Xo7Gf3LAVHUNkcWhlS25gseb3oYvU1/Y4X5E9y
R4nFsduJrDwBfTIq/UidpakkQwsgUy0=
-----END CERTIFICATE-----
Generated at Wed May 13 08:36:19 2026 by rpki-client