Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/509a71f7-dfad-32df-bce6-c70e87b41e45.roa
File:                     509a71f7-dfad-32df-bce6-c70e87b41e45.roa (raw, json)
Hash identifier:          pMZyINStKxS1QvfJazaeQJlYNMi52MHCboUhV8fp8dY=
Subject key identifier:   07:B5:BC:24:FD:F5:B0:02:2C:FD:33:0B:D8:37:1D:96:D5:28:8F:11
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584D280557E39B14891ECE571520
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/509a71f7-dfad-32df-bce6-c70e87b41e45.roa
Signing time:             Fri 13 Mar 2026 16:04:40 +0000
ROA not before:           Fri 13 Mar 2026 16:04:40 +0000
ROA not after:            Thu 11 Jun 2026 16:04:40 +0000
asID:                     7029
IP address blocks:        173.189.50.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:28:05:57:e3:9b:14:89:1e:ce:57:15:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Mar 13 16:04:40 2026 GMT
            Not After : Jun 11 16:04:40 2026 GMT
        Subject: CN=b822517b-939a-45b9-ae8d-46b3b12fa56c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:76:9c:fb:27:3e:23:3a:d3:8b:fe:dd:68:82:
                    9c:58:9d:77:79:5f:a1:97:07:74:74:9d:dc:8b:fc:
                    c1:1f:f3:5b:d7:cf:8d:3b:19:4a:36:19:43:8c:ed:
                    2d:90:8c:08:04:4c:e5:e8:d6:95:67:c8:7b:6e:96:
                    6f:5e:44:3a:14:bd:e8:09:e4:e6:88:de:ea:ed:ba:
                    ea:ce:1c:48:5c:f0:b8:d6:e1:5c:a9:a9:db:60:1c:
                    42:39:5c:5b:f5:5f:77:bb:4e:e0:fc:a4:48:40:bf:
                    ac:95:d9:33:35:02:e1:4a:df:31:7d:b1:11:97:b6:
                    08:ed:4e:65:64:e0:24:0f:c4:bb:1d:fc:99:3b:e8:
                    03:79:41:68:a0:02:37:40:84:88:fc:e7:b5:61:31:
                    61:c9:ea:72:ae:84:e7:16:e8:28:aa:62:a4:35:66:
                    6b:73:76:f7:82:6d:26:cb:f9:18:a3:23:a0:2d:de:
                    04:57:25:a7:5e:c0:56:31:29:ba:a9:d2:70:53:a3:
                    fb:3f:41:07:66:74:0d:5f:24:00:6c:f7:a2:bc:22:
                    29:ad:59:d4:4c:d2:42:ba:53:e6:72:2f:4c:c7:56:
                    aa:a3:eb:77:50:2f:44:9f:3a:71:95:83:c1:b1:9c:
                    3a:b6:f7:27:83:3b:7a:06:e2:2a:73:77:12:56:0c:
                    92:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:B5:BC:24:FD:F5:B0:02:2C:FD:33:0B:D8:37:1D:96:D5:28:8F:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/509a71f7-dfad-32df-bce6-c70e87b41e45.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.189.50.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:d2:16:47:ba:ef:97:c3:58:b1:fd:c3:31:a1:d1:cd:1b:35:
         a7:38:9e:8a:88:9e:c5:21:df:e6:d4:ea:66:68:ba:f5:8d:14:
         f2:13:51:c7:6d:81:c1:01:de:54:1e:a4:3a:cb:32:35:d7:89:
         8d:08:a4:7d:23:13:eb:df:13:3e:9f:6a:41:12:e8:cd:ed:10:
         ae:ab:49:f2:fc:a1:e7:04:4b:0b:ef:1c:c3:29:29:46:66:85:
         5b:d3:55:19:0b:96:a7:18:58:12:d7:89:e6:33:89:54:c3:3e:
         f4:a7:ab:bf:91:27:fa:90:52:1c:97:67:e4:cb:15:c3:9d:5d:
         6c:16:27:36:70:a2:65:ed:2a:da:79:60:db:bd:42:8f:ad:3a:
         55:af:15:58:cc:9e:6c:7e:db:70:24:bd:18:16:3b:be:df:ae:
         3f:51:28:47:08:84:ba:30:b1:4a:b5:e0:c1:8d:35:a2:e2:b0:
         f0:50:e4:2a:9f:a4:7d:7f:89:01:82:31:d8:6c:15:d5:f8:cc:
         58:9b:7f:c8:f5:f4:83:19:bd:d1:1d:4b:e4:c4:a4:85:77:69:
         96:f6:ca:65:c8:df:6f:a8:44:17:cf:7d:0e:f2:a2:28:5d:a8:
         ff:f9:0f:3e:7c:32:43:9b:77:9d:5f:9e:28:ff:c5:28:73:e9:
         d7:81:19:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:34:17 2026 by rpki-client