Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/738c17a2-1f55-484e-b889-1ddc32f43ebf/2f0e773d-0a6c-3bc5-9fc5-722b00ae3d6c.roa
File:                     2f0e773d-0a6c-3bc5-9fc5-722b00ae3d6c.roa (raw, json)
Hash identifier:          tnh5s5HqQ6Jpr8YrbB37/U7FrQ5EusbXZuaPtNw03kE=
Subject key identifier:   14:2D:FD:DE:33:72:1F:BE:03:95:EF:12:87:DD:AC:0E:76:36:A5:C8
Certificate issuer:       /CN=738c17a2-1f55-484e-b889-1ddc32f43ebf
Certificate serial:       010D0C9F4328584F4974B2B32AABE7DAA5CC8380
Authority key identifier: 07:B7:05:2D:90:9C:ED:75:93:0A:15:88:37:E5:67:A6:C4:86:9F:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/738c17a2-1f55-484e-b889-1ddc32f43ebf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/738c17a2-1f55-484e-b889-1ddc32f43ebf/2f0e773d-0a6c-3bc5-9fc5-722b00ae3d6c.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     14369
IP address blocks:        65.79.240.0/24 maxlen: 24
                          65.79.241.0/24 maxlen: 24
                          65.79.242.0/24 maxlen: 24
                          65.79.243.0/24 maxlen: 24
                          65.79.244.0/24 maxlen: 24
                          65.79.245.0/24 maxlen: 24
                          65.79.246.0/24 maxlen: 24
                          65.79.247.0/24 maxlen: 24
                          65.79.248.0/24 maxlen: 24
                          65.79.249.0/24 maxlen: 24
                          65.79.250.0/24 maxlen: 24
                          65.79.251.0/24 maxlen: 24
                          65.79.252.0/24 maxlen: 24
                          65.79.253.0/24 maxlen: 24
                          65.79.254.0/24 maxlen: 24
                          65.79.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/738c17a2-1f55-484e-b889-1ddc32f43ebf/738c17a2-1f55-484e-b889-1ddc32f43ebf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/738c17a2-1f55-484e-b889-1ddc32f43ebf/738c17a2-1f55-484e-b889-1ddc32f43ebf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/738c17a2-1f55-484e-b889-1ddc32f43ebf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:b2:b3:2a:ab:e7:da:a5:cc:83:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=738c17a2-1f55-484e-b889-1ddc32f43ebf
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=a5b0cd79-ef5b-419e-8c8c-0e3439f7850c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:39:a4:64:1f:98:55:56:bf:14:50:b6:8c:29:
                    21:5f:b3:9a:41:91:f4:7f:84:28:43:71:7f:dc:8e:
                    51:2a:85:5a:f3:9e:1e:84:59:59:d1:5e:66:27:25:
                    60:55:c4:58:d0:41:64:2d:74:ab:9d:2e:45:fa:ae:
                    2d:03:90:0f:bd:45:3c:6c:70:b9:6d:26:dd:9b:c6:
                    62:a4:de:81:21:ef:9b:3b:b7:80:a0:49:f8:dd:fd:
                    30:46:e6:33:ec:fb:0d:aa:14:c8:97:a3:6c:be:22:
                    a6:85:e5:07:e3:86:b4:bf:19:c5:47:bb:6b:04:40:
                    8a:71:f4:fb:8a:ff:bb:d6:8c:ed:4d:bd:16:67:cf:
                    63:db:0a:30:ff:eb:b2:65:36:83:78:20:40:71:0e:
                    96:3f:da:a9:a9:af:81:96:8a:4b:bd:17:6c:dc:05:
                    c4:78:59:9a:32:93:28:14:7d:67:e4:bd:0d:1d:59:
                    f9:d0:b0:81:bd:d1:1f:f2:e2:7b:c3:3d:2c:27:8e:
                    af:7e:4d:b8:e7:77:a4:5a:c2:17:04:cf:16:4f:70:
                    d8:bd:9b:37:65:20:db:6e:3b:9a:04:5d:77:ef:b6:
                    5c:8d:90:af:f0:9a:8c:d3:98:8e:19:e3:eb:fd:9a:
                    96:67:f4:43:98:75:56:40:fa:1e:65:58:a3:a1:d6:
                    b9:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:2D:FD:DE:33:72:1F:BE:03:95:EF:12:87:DD:AC:0E:76:36:A5:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/738c17a2-1f55-484e-b889-1ddc32f43ebf/2f0e773d-0a6c-3bc5-9fc5-722b00ae3d6c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/738c17a2-1f55-484e-b889-1ddc32f43ebf/738c17a2-1f55-484e-b889-1ddc32f43ebf.crl

            X509v3 Authority Key Identifier:
                keyid:07:B7:05:2D:90:9C:ED:75:93:0A:15:88:37:E5:67:A6:C4:86:9F:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/738c17a2-1f55-484e-b889-1ddc32f43ebf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.79.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:c0:ec:15:3c:79:e0:ed:08:3b:0e:36:87:9f:10:25:65:34:
         5d:c5:08:02:dc:b8:b1:b3:72:55:ee:a0:75:2d:c7:aa:00:4c:
         3b:49:ae:03:60:8a:c4:00:34:08:cf:c2:9f:1b:7d:64:93:c9:
         2b:b4:c3:ba:c9:e3:38:8e:50:97:50:a4:3a:e9:03:f1:c9:1e:
         d7:c3:6a:6c:6f:cc:45:ce:a8:51:ca:7a:93:0b:fc:4a:50:11:
         43:83:c9:aa:2e:c4:8f:81:3a:a8:d0:dc:af:6d:6e:81:09:f4:
         8c:58:79:7c:a0:38:ed:e2:36:48:e1:0a:f3:a3:7c:f6:cc:0b:
         f4:2f:68:51:15:b6:d2:ed:4d:db:05:6a:64:52:a8:c9:ce:6b:
         be:34:b0:c3:64:6d:51:97:46:9c:47:e6:e3:5a:bd:7a:a8:b4:
         32:fc:2d:5d:18:8b:33:4c:7d:47:0d:71:0c:8f:4a:73:22:bf:
         d2:b5:df:d9:12:3c:7d:63:21:7c:37:88:d4:bd:08:81:d4:cb:
         70:7f:82:ce:69:d5:ca:c4:72:85:1f:d4:4b:cd:17:97:71:12:
         6c:f7:0b:5e:46:dc:d1:2d:5b:13:80:a8:fc:ef:ad:0d:91:f1:
         0f:0d:2c:97:8c:d7:55:81:19:76:92:52:06:44:b3:a2:73:a0:
         e8:d3:73:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 19:11:32 2026 by rpki-client