Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/09c0e019-397b-38de-81b2-2590c6a1d473.roa
File:                     09c0e019-397b-38de-81b2-2590c6a1d473.roa (raw, json)
Hash identifier:          mWbJdSw1lJH7bFcLRCD2YYe5wmtUeDzBeT6nOuUlfCA=
Subject key identifier:   D4:D1:BB:93:89:1D:01:01:F9:EF:64:D2:F8:CB:7F:8E:E1:30:DC:40
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584D300A9372E068EC9EE396D8C0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/09c0e019-397b-38de-81b2-2590c6a1d473.roa
Signing time:             Mon 16 Mar 2026 13:00:40 +0000
ROA not before:           Mon 16 Mar 2026 13:00:40 +0000
ROA not after:            Sun 14 Jun 2026 13:00:40 +0000
asID:                     7029
IP address blocks:        63.131.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:30:0a:93:72:e0:68:ec:9e:e3:96:d8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Mar 16 13:00:40 2026 GMT
            Not After : Jun 14 13:00:40 2026 GMT
        Subject: CN=1a035b9f-acd5-4cfc-bf47-e2b49b348e56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:46:f6:8e:59:44:85:ce:3d:42:fa:d2:2d:b4:
                    8a:34:67:02:0f:67:db:ec:80:d1:1f:db:e1:0d:7a:
                    44:d2:88:c5:65:74:60:81:50:9c:ef:7d:e0:b6:a4:
                    d6:0f:c1:7b:5a:a4:3a:9d:a3:aa:19:12:0a:88:7e:
                    eb:a3:82:17:ec:8f:48:83:f6:9d:58:83:06:a9:2c:
                    a5:98:c3:d9:d9:68:ec:75:8e:6e:01:15:c0:5e:69:
                    eb:db:24:86:cb:66:3a:43:2f:92:d5:f6:d8:48:17:
                    d3:01:37:79:b1:b8:a3:b7:19:8f:e8:08:56:b8:ab:
                    e2:17:06:9a:29:c7:a1:01:6a:0e:62:59:dd:86:e3:
                    11:f8:2c:db:ad:89:cc:55:5c:90:2a:5e:e2:46:cc:
                    f9:41:65:75:16:ec:fe:60:40:fe:7b:50:b3:6c:3c:
                    b5:d7:5f:d3:a3:9b:3d:36:f1:11:fe:f7:73:1c:5c:
                    bc:6b:54:df:e8:32:6d:c8:ab:09:df:df:20:44:da:
                    0f:fe:3b:a7:de:c7:80:43:9d:c4:72:42:78:c5:29:
                    05:a4:06:ab:09:b1:2d:7c:ef:b1:e9:cc:52:97:94:
                    a7:e9:cf:e7:af:22:5f:d8:85:17:17:08:d4:dd:b0:
                    7d:4b:2c:8b:b8:60:c4:ec:4a:f9:1f:b9:cd:b0:45:
                    bd:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:D1:BB:93:89:1D:01:01:F9:EF:64:D2:F8:CB:7F:8E:E1:30:DC:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/09c0e019-397b-38de-81b2-2590c6a1d473.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.131.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:4d:ad:13:0b:2a:ae:2a:35:e4:c2:eb:8d:7f:a2:5d:41:b9:
         c2:9b:4b:6f:6b:52:3e:d1:66:03:db:05:d4:19:ee:0b:aa:fb:
         bf:17:c7:9e:85:29:3d:b8:68:06:c1:47:88:87:be:db:08:aa:
         ab:62:e8:60:d7:7b:d2:d2:ac:d1:50:36:07:a3:b1:42:c7:01:
         24:c4:d0:87:27:bb:3b:58:65:f5:98:70:bd:d4:c3:09:9b:24:
         84:f0:42:de:0e:34:eb:ed:ab:b4:32:98:54:cf:2a:d5:cc:6d:
         32:5e:67:e8:cd:eb:95:7d:0e:ad:3f:d9:7d:5b:0e:af:a7:c1:
         37:f4:69:17:d2:cf:37:bc:1f:13:b2:f8:f3:c3:63:f8:53:fa:
         05:af:7d:7c:e8:95:4a:62:ca:20:88:35:d6:ee:63:de:9f:5b:
         c6:b0:d2:eb:dd:ce:1d:35:01:c5:ac:7c:3f:84:7a:cb:65:b0:
         80:4e:8e:b8:c3:55:85:ef:d6:7d:8a:9d:bb:f5:1a:ed:5b:32:
         50:6f:15:aa:a9:ed:2c:9d:1e:91:f9:be:83:3a:9a:de:7a:64:
         4b:95:05:c9:3f:01:58:61:6c:b2:8f:bb:5f:20:79:a4:be:b1:
         61:c1:48:e3:0c:be:db:70:5f:01:05:6f:75:ac:49:83:5c:84:
         55:50:91:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:45:07 2026 by rpki-client