Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/549d74e3-f625-3ef3-96be-5a6bff7bb1e1.roa
File:                     549d74e3-f625-3ef3-96be-5a6bff7bb1e1.roa (raw, json)
Hash identifier:          umNjmaGFrUeE5+qXw7gUfCN2kcbRYuXnuN/T84jHT6Y=
Subject key identifier:   97:77:40:7F:E4:62:BD:7A:07:60:67:47:B0:89:C0:A1:00:95:A0:BF
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584F51D2B79B760C32F7C835B800
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/549d74e3-f625-3ef3-96be-5a6bff7bb1e1.roa
Signing time:             Mon 28 Sep 2026 01:00:12 +0000
ROA not before:           Mon 28 Sep 2026 01:00:12 +0000
ROA not after:            Sun 27 Dec 2026 02:00:12 +0000
asID:                     7029
IP address blocks:        75.91.148.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 Oct 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:51:d2:b7:9b:76:0c:32:f7:c8:35:b8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Sep 28 01:00:12 2026 GMT
            Not After : Dec 27 02:00:12 2026 GMT
        Subject: CN=6b755d89-6ca7-4465-bb26-ece3628b040a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:34:64:ac:bf:75:a9:73:d3:3b:8e:1d:94:1a:
                    46:a9:b7:f1:8a:51:30:a9:8e:7c:86:76:d3:2b:e3:
                    a5:a8:1d:81:85:44:22:77:d6:62:de:5f:1b:ba:9b:
                    2e:19:b3:8b:7f:73:15:3c:1d:1d:cb:17:df:63:3b:
                    12:e9:bb:ee:28:76:0d:21:72:19:a7:04:c7:00:74:
                    aa:f2:d7:2e:23:7b:af:ef:ae:5d:f1:55:0a:46:60:
                    cc:69:9e:d5:7d:2d:32:b9:df:50:4a:fd:76:fd:94:
                    f6:8e:6b:b8:a0:dd:19:23:b9:e7:44:72:b5:48:87:
                    b0:2e:71:19:ce:42:d4:ae:11:11:d0:71:57:c6:1f:
                    5b:d3:ca:74:78:29:b5:16:da:b4:3b:46:d4:67:b0:
                    d8:3e:0a:2d:80:b1:bb:f5:73:f7:7f:27:99:cf:a7:
                    e2:17:49:33:39:66:25:54:de:2c:ef:b6:a6:1e:de:
                    09:aa:ee:7c:da:e2:7d:ce:48:9c:fa:f6:03:5a:c5:
                    b7:cb:6e:90:00:fb:81:b3:01:8c:56:6c:93:cd:2d:
                    ec:0e:2c:b7:59:48:ac:6c:31:55:4f:0b:67:82:f8:
                    6b:56:c5:7e:86:46:cb:a5:ca:ef:3d:f4:a6:02:79:
                    bb:cf:b1:7d:68:8f:a9:2c:f9:80:f2:c0:65:9c:60:
                    1f:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:77:40:7F:E4:62:BD:7A:07:60:67:47:B0:89:C0:A1:00:95:A0:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/549d74e3-f625-3ef3-96be-5a6bff7bb1e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.91.148.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:aa:cf:c7:8f:13:0e:55:5f:4c:b8:07:06:6c:73:16:42:67:
         2b:1b:09:b4:48:a2:01:9d:f2:21:97:77:ba:0c:47:39:a4:4a:
         07:ff:67:84:e2:60:72:e0:5f:47:c2:e7:6a:2f:37:f2:32:b5:
         2d:c4:3c:2f:a6:d3:cb:6c:b7:66:99:4c:95:fb:55:da:95:b4:
         93:6e:f9:19:e6:1c:80:48:a7:dc:6a:7c:b7:94:1d:da:66:33:
         42:a4:d9:64:ac:19:f6:cf:c7:67:28:f6:56:d8:2f:90:06:a1:
         39:7f:cd:97:e7:52:6c:d1:87:2f:26:22:fb:6c:1d:36:ea:ae:
         38:e5:d6:db:28:91:d6:37:e1:55:eb:1a:f1:00:ab:fc:c7:c3:
         9a:17:43:11:ea:1b:16:eb:c4:71:5b:f8:a4:86:b6:d0:20:9b:
         94:fe:d9:21:71:a7:da:44:31:1b:08:de:70:9c:27:54:6c:98:
         db:68:c0:1e:e4:51:14:97:b7:29:c8:8f:3d:24:24:88:18:df:
         a1:86:52:0c:7e:03:6c:1c:9c:3d:c5:29:f0:31:f0:36:03:3c:
         f1:da:b5:79:4d:8f:30:90:24:8f:f3:f1:56:43:19:08:7f:fb:
         b2:93:03:f3:78:17:85:a4:e8:0d:87:70:a1:36:eb:60:0c:9b:
         5b:79:b1:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 20:31:38 2026 by rpki-client