Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9a5359b7-3b6d-395b-aaa5-32ec89ab1cd9.roa
File:                     9a5359b7-3b6d-395b-aaa5-32ec89ab1cd9.roa (raw, json)
Hash identifier:          nl9rjjtdLc4DXxbscgTiKTrww9qc21MEu0SzrxI68Bk=
Subject key identifier:   13:BB:9C:D5:03:C5:DB:32:F8:4E:29:C1:22:0B:2F:65:EF:22:FC:35
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584F497F61472E15FDDAD15D3880
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9a5359b7-3b6d-395b-aaa5-32ec89ab1cd9.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     7029
IP address blocks:        98.17.160.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:7f:61:47:2e:15:fd:da:d1:5d:38:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=086b4673-7691-4961-90d4-871d11072fa0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:6b:38:7b:70:3e:a2:ae:5c:34:f3:68:32:15:
                    db:f1:a9:32:11:83:64:e0:4e:08:dc:76:02:bc:97:
                    65:48:58:05:7e:c8:85:06:1d:38:36:70:3e:39:de:
                    92:f4:28:b3:55:be:4d:24:83:72:4f:d4:48:2b:bd:
                    69:64:54:30:32:73:21:61:a4:22:b4:17:53:af:57:
                    15:4f:a3:de:43:a0:0a:4f:f6:ec:c1:00:10:6f:b4:
                    07:5b:45:43:19:53:da:1e:6a:23:fe:59:5a:16:a8:
                    79:bd:ea:b8:08:9e:a6:ae:a6:b9:31:f6:37:b3:15:
                    11:ae:ce:ae:b9:82:2b:33:de:7c:4f:7b:fa:c6:58:
                    4b:f2:dd:45:bd:93:3d:b3:ae:23:15:cd:e6:ce:d0:
                    bd:60:5c:ed:ee:16:97:69:d1:fc:05:a1:c5:66:38:
                    94:be:be:94:5f:31:ff:04:06:28:5e:d0:15:4d:3a:
                    40:a7:c0:2a:ae:50:1a:43:e1:ad:08:40:dc:ae:c3:
                    6f:c2:31:86:35:63:39:85:a9:07:69:bd:4d:d4:ad:
                    16:be:87:07:82:0a:fd:da:8c:f4:70:29:80:e8:05:
                    ca:14:ed:23:39:f3:32:7b:a7:97:3c:00:e6:70:d1:
                    cb:a2:1a:e7:18:53:b8:ce:0b:96:1f:94:36:de:43:
                    2a:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:BB:9C:D5:03:C5:DB:32:F8:4E:29:C1:22:0B:2F:65:EF:22:FC:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9a5359b7-3b6d-395b-aaa5-32ec89ab1cd9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.17.160.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:fb:ef:4f:ca:76:3e:ea:a9:00:8a:ff:d5:5b:1a:e8:e1:09:
         9f:7f:96:a6:82:4b:1c:06:e6:82:63:99:79:1b:fb:91:97:b1:
         02:3e:07:12:2c:49:54:b2:dc:e2:88:63:5d:33:67:6a:58:96:
         2b:95:45:ae:26:68:00:79:7c:78:47:95:dc:ef:9b:b2:7a:9c:
         70:3b:91:6c:31:19:1d:a7:9d:5c:0e:de:22:28:9d:a0:0d:fd:
         75:95:95:2d:93:03:8a:de:d7:81:55:37:99:8b:87:02:e2:31:
         0e:35:03:47:61:ea:19:81:fd:30:96:03:6d:15:b7:81:41:34:
         3c:4a:63:fc:51:43:ab:29:22:bd:76:7b:67:12:62:34:6e:60:
         44:22:3a:75:04:e9:55:81:19:fe:2d:57:72:0e:dc:d0:a9:ba:
         46:91:e6:1a:ff:f4:41:7e:1d:12:27:32:18:ad:03:08:ce:a9:
         87:07:60:a1:b3:c9:2a:0f:7d:d9:9b:bb:04:5e:59:d0:10:1e:
         61:0e:58:90:43:e4:3c:21:b2:d9:b5:bc:5a:3f:9d:c4:a2:28:
         0e:aa:b4:a5:f1:27:56:1b:d3:c7:fb:d1:a4:73:56:2c:98:04:
         dd:59:da:f7:fe:c2:bb:6c:f4:0c:33:22:69:d6:38:e2:f5:cb:
         8c:af:ce:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 21:33:20 2026 by rpki-client