Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a77b0085-1c04-3cac-ba52-cfc0545d4ac5.roa
File:                     a77b0085-1c04-3cac-ba52-cfc0545d4ac5.roa (raw, json)
Hash identifier:          j7Vm3QNZTEZhUVvzrJEPBp/cErjG5a1d6M5CWTsElTA=
Subject key identifier:   9E:1A:0A:23:D4:8D:8B:7C:B5:01:34:26:EF:43:B4:91:84:9C:60:E9
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584D2D3F9275367384A2D0275FD0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a77b0085-1c04-3cac-ba52-cfc0545d4ac5.roa
Signing time:             Sun 15 Mar 2026 13:00:41 +0000
ROA not before:           Sun 15 Mar 2026 13:00:41 +0000
ROA not after:            Sat 13 Jun 2026 13:00:41 +0000
asID:                     7029
IP address blocks:        174.130.208.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:2d:3f:92:75:36:73:84:a2:d0:27:5f:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Mar 15 13:00:41 2026 GMT
            Not After : Jun 13 13:00:41 2026 GMT
        Subject: CN=021cb384-02a9-415a-93ca-b3425db2623c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:98:ac:c7:7e:bf:3f:a0:c7:7c:f5:23:0a:c7:
                    80:a7:cb:b0:ed:8e:a2:52:1d:c6:42:3c:f7:90:be:
                    cd:3d:8a:a3:05:b4:53:3e:b0:24:9a:a4:20:c8:64:
                    06:bd:f5:23:ed:75:a4:f2:0a:76:5f:ef:cc:94:c1:
                    88:1b:f4:2d:54:49:1d:65:64:ae:c7:bb:4e:3b:1b:
                    83:ed:86:b1:9d:af:f0:b1:6e:c1:63:27:1e:6e:24:
                    0c:c1:e2:fd:51:c4:17:a1:5f:e0:0f:7d:58:ea:6c:
                    85:a2:4d:61:29:51:f8:ee:8b:e9:78:4e:86:57:fe:
                    03:88:21:cf:85:db:f2:3a:19:10:d0:54:c2:56:12:
                    33:ae:04:7a:da:9d:ea:8d:5f:cf:8c:40:22:62:fc:
                    ea:4d:91:1c:c5:32:ff:4f:28:86:90:a1:8c:e3:dc:
                    9d:5a:ed:92:ac:81:d7:48:b1:0c:ec:fe:16:9e:b3:
                    7f:fa:0c:b3:d0:c0:94:58:1a:9b:a3:bf:8c:09:95:
                    00:5e:40:3d:6e:aa:7c:42:53:46:88:3d:bf:53:93:
                    cc:3b:1d:4e:43:b3:e3:0f:b7:c7:fb:6e:79:36:bd:
                    6b:74:49:29:99:d9:aa:87:88:f7:78:34:5b:83:b2:
                    78:f6:b5:9a:b9:b6:ee:9b:b2:98:6d:ca:91:6d:47:
                    71:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:1A:0A:23:D4:8D:8B:7C:B5:01:34:26:EF:43:B4:91:84:9C:60:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a77b0085-1c04-3cac-ba52-cfc0545d4ac5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.130.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:06:66:c9:6c:bd:ba:c0:d4:15:9d:e7:2d:b8:23:74:7b:0a:
         8e:7d:7c:6d:d3:29:66:e2:55:51:60:1d:99:91:f2:5f:22:16:
         68:4e:a7:1d:6d:43:0a:70:bf:7c:87:d1:f6:bb:9a:f1:b5:73:
         1a:7e:be:d4:c6:d8:f4:ef:27:0c:27:8e:28:a5:e1:16:44:76:
         7b:1a:38:38:46:23:f1:83:73:cd:25:09:91:02:11:70:5b:14:
         ce:0a:b1:85:6c:98:e9:6c:a0:28:4a:54:01:b8:3f:c7:83:9d:
         54:76:fa:3e:c0:65:c3:a0:1d:31:34:cc:a3:14:7e:b5:ef:22:
         5d:51:9c:18:a4:24:f5:58:06:cf:5b:fc:55:c4:f8:72:dd:de:
         67:d6:15:b6:42:cb:a8:b1:d5:b2:e5:a1:90:de:77:ad:ff:58:
         85:94:5e:81:2f:8d:c6:9b:d2:af:4a:30:c5:62:ac:25:99:3e:
         2a:2b:fe:52:aa:3a:de:fd:aa:72:da:36:4d:23:2f:8a:11:68:
         41:da:2a:ff:e7:0f:e4:e4:ed:00:de:32:ee:8b:80:e1:f4:03:
         6d:05:5a:67:7d:cf:92:4a:83:22:85:44:ba:5f:a7:49:6b:9f:
         8c:0c:c9:ca:9d:44:37:01:b6:26:c1:4c:f7:86:58:15:a9:08:
         e9:e9:90:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:42:31 2026 by rpki-client