Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2dcb2c67-c7de-39fd-8f06-dd4bc2bdf746.roa
File:                     2dcb2c67-c7de-39fd-8f06-dd4bc2bdf746.roa (raw, json)
Hash identifier:          ZRb8KfZcyLY/MgR6LWYBbXALOUf6aX+2fL5ASn21tx4=
Subject key identifier:   74:1C:9A:B7:A7:47:DC:A4:B1:A7:02:82:BE:60:1A:92:DE:5D:A7:CD
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584FA42DE89C785A407DF3C812C0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2dcb2c67-c7de-39fd-8f06-dd4bc2bdf746.roa
Signing time:             Tue 27 Oct 2026 13:00:13 +0000
ROA not before:           Tue 27 Oct 2026 13:00:13 +0000
ROA not after:            Mon 25 Jan 2027 14:00:13 +0000
asID:                     7029
IP address blocks:        98.19.32.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Nov 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:a4:2d:e8:9c:78:5a:40:7d:f3:c8:12:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Oct 27 13:00:13 2026 GMT
            Not After : Jan 25 14:00:13 2027 GMT
        Subject: CN=05a4e009-4d1b-4437-bfe2-49d9de5a8e26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c6:3a:63:e5:d2:6f:00:f3:62:18:36:2d:e8:
                    c6:4d:2c:42:7f:ec:82:89:31:a7:95:ce:67:c5:20:
                    3a:26:69:b4:c2:14:e7:30:01:2f:a1:d0:b5:c8:da:
                    c3:a0:bd:72:f8:2f:a9:2b:09:3f:c2:a1:1f:1d:26:
                    d5:a8:4e:01:d9:f3:93:e0:37:57:2f:b2:3c:3a:77:
                    43:1c:6a:e0:04:d5:11:74:e9:aa:f1:0b:62:85:e1:
                    8d:c8:85:4a:a1:3f:eb:a6:7d:63:bc:2e:89:c7:90:
                    57:69:d9:a0:db:6c:5e:7f:70:d3:59:06:9a:ce:96:
                    07:fc:98:e2:b3:df:bb:f9:4f:d7:96:c1:51:cb:50:
                    26:3f:32:91:61:d2:2e:eb:e0:e9:1d:65:6b:15:75:
                    72:50:3e:54:6b:a4:13:53:81:76:66:1d:04:89:53:
                    46:a8:05:12:22:95:18:75:f6:f7:f1:7c:7a:47:7d:
                    4b:e4:88:cf:c4:04:0b:04:74:d8:56:80:9f:6c:8a:
                    2a:b0:b3:ef:53:f7:bb:d7:53:77:46:07:a3:bb:77:
                    3a:28:5a:a3:6d:1e:ac:24:f6:c0:c8:c5:f2:e6:23:
                    f0:fe:60:28:4c:b5:46:85:10:d0:ae:a5:3b:37:21:
                    0d:87:51:a7:69:74:26:65:b5:59:4e:9d:74:d9:e2:
                    88:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:1C:9A:B7:A7:47:DC:A4:B1:A7:02:82:BE:60:1A:92:DE:5D:A7:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2dcb2c67-c7de-39fd-8f06-dd4bc2bdf746.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.19.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:28:d5:f8:5a:73:ed:38:be:2a:11:d6:0e:6b:ef:fc:bd:cd:
         a3:d2:90:fd:94:ad:70:57:3f:88:04:03:53:c4:d5:75:5d:24:
         93:8f:e8:00:6d:db:97:1b:0b:86:2e:30:a7:98:e8:49:81:7f:
         87:6a:b5:aa:9f:d7:df:58:99:1c:0c:97:5e:82:7e:c6:87:3b:
         5e:d0:11:49:85:d7:b0:a4:6b:7c:82:34:52:68:38:e1:1f:76:
         22:de:c2:80:b4:ee:1f:80:f2:4e:b4:7c:19:9e:a2:c8:1b:51:
         ab:5d:33:84:11:d2:bd:8b:ce:ad:90:94:fb:c7:52:17:6c:e9:
         fe:7f:0b:fc:d3:ed:9b:34:a7:56:6e:3d:a5:05:80:1b:47:19:
         8f:58:17:28:60:8b:b9:97:bf:f8:7f:66:6e:09:8a:ad:b7:c5:
         c7:0c:aa:36:fa:03:60:93:ac:a7:05:1f:28:f0:9e:07:b9:15:
         ca:0b:c1:dc:99:64:ce:1a:3e:78:80:d3:f2:10:5b:ba:b1:6f:
         81:c3:12:e3:44:05:12:c9:a0:45:0a:a7:4e:13:81:9d:c2:c8:
         ce:5d:90:06:ff:65:a1:5e:dd:f1:ca:b9:88:1c:39:ba:46:0c:
         80:92:9e:7a:87:b1:17:a2:0b:8b:9c:2c:54:5d:2d:5f:05:60:
         d4:c0:0c:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 21:03:35 2026 by rpki-client