Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/95930e38-caf9-3daf-b9f8-9826c8d04a30.roa
File:                     95930e38-caf9-3daf-b9f8-9826c8d04a30.roa (raw, json)
Hash identifier:          ldTEMH39wGpKxqQMY2HoxDPQHlfqy3uVXYPNPfk3Dpo=
Subject key identifier:   E6:B9:3B:80:6D:23:ED:CC:EC:59:0E:CF:B1:59:1E:DA:7B:03:CC:5E
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584E94EA82397445D59989395080
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/95930e38-caf9-3daf-b9f8-9826c8d04a30.roa
Signing time:             Wed 22 Jul 2026 09:00:11 +0000
ROA not before:           Wed 22 Jul 2026 09:00:11 +0000
ROA not after:            Tue 20 Oct 2026 09:00:11 +0000
asID:                     7029
IP address blocks:        209.253.166.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:94:ea:82:39:74:45:d5:99:89:39:50:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Jul 22 09:00:11 2026 GMT
            Not After : Oct 20 09:00:11 2026 GMT
        Subject: CN=80696b37-b9d7-41cb-b54d-6c43e9857cf2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:cc:f9:c4:41:15:a0:75:bd:c6:66:02:fd:83:
                    a6:74:35:04:95:eb:c1:5d:b9:6e:9b:a9:bc:61:4d:
                    bc:19:20:f7:45:19:8e:b4:e0:dc:7b:56:92:93:68:
                    0c:7f:99:6f:39:46:dc:57:5d:0b:3a:6d:c2:29:55:
                    d5:42:dc:1e:3d:57:09:bc:3b:bd:18:9a:04:eb:f2:
                    23:50:ab:e2:bc:8e:55:47:14:1a:75:ab:99:fd:d4:
                    7b:01:9d:db:44:34:29:ab:02:ff:39:58:c0:87:34:
                    16:61:07:39:3c:77:ef:d1:3e:2a:69:1f:15:f0:b7:
                    5d:a4:fc:70:21:b4:ae:a4:dc:77:43:ff:52:2a:bf:
                    9d:e9:11:e8:2a:da:a6:3c:f6:78:f3:15:3e:a2:ef:
                    21:2d:7c:dd:b7:73:8a:07:f3:6b:31:d5:4e:43:3a:
                    39:db:9c:93:ec:a0:7f:95:32:36:ea:7f:a6:c1:80:
                    2a:75:f7:88:5c:49:2b:6b:a8:0b:b0:b0:fc:aa:14:
                    11:3a:89:6f:84:80:46:db:05:fa:87:c1:85:8d:ae:
                    9f:23:01:26:3a:b6:e2:fe:8b:e9:30:9f:a3:a7:1a:
                    2c:0a:a7:07:86:e0:62:ec:33:06:09:02:9e:79:97:
                    08:5e:b2:af:59:e8:94:fc:e8:3c:68:71:95:1d:58:
                    18:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:B9:3B:80:6D:23:ED:CC:EC:59:0E:CF:B1:59:1E:DA:7B:03:CC:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/95930e38-caf9-3daf-b9f8-9826c8d04a30.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.253.166.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:9c:1d:eb:d7:ae:be:8c:e2:57:4d:6e:f8:a1:fb:16:b0:3c:
         78:d6:b3:89:1b:bd:7c:02:9f:e2:0b:05:db:df:53:1a:f8:6e:
         a8:91:d7:78:7f:8c:59:fd:69:36:17:38:8d:be:9c:2d:45:30:
         2d:e1:f9:a7:f1:bd:a7:f4:53:8c:e1:8a:63:54:1f:ef:98:b8:
         5b:db:5e:d0:39:ba:27:07:1b:b2:ac:44:b0:4d:75:bd:31:37:
         04:1c:be:3a:04:d5:2e:46:98:ac:a2:d4:34:af:45:85:51:72:
         99:f5:1f:b7:cf:10:2f:dc:0d:46:c8:78:ee:28:27:f5:bc:21:
         ed:88:97:40:88:5c:d9:ec:ec:2d:72:d4:15:07:98:21:a2:3e:
         c1:c1:79:7c:a8:db:f1:4a:2a:63:d5:7d:50:50:69:00:d6:a8:
         a5:3b:1d:2b:1f:39:7a:d8:ae:28:39:d0:f3:02:f7:9c:aa:c7:
         2e:86:5a:20:58:b3:3e:79:7e:66:e3:75:a1:f4:dc:65:e1:75:
         c9:e9:e2:d4:48:15:55:fc:18:33:39:43:ac:4a:fc:9f:3f:4c:
         b4:1c:48:e8:76:68:e3:62:46:0b:c5:9c:e4:e3:2f:45:0c:e4:
         c1:77:b9:e4:ca:2e:55:cb:34:37:b5:66:34:fb:81:31:84:54:
         25:88:4c:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:37:12 2026 by rpki-client