Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f7f28672-dd61-35d4-84cc-9faca80b417c.roa
File:                     f7f28672-dd61-35d4-84cc-9faca80b417c.roa (raw, json)
Hash identifier:          iR5L8Xcoy4KIsuF2EHkFpIVxHHzdqbzToGWXn0p/9zE=
Subject key identifier:   3E:D2:0D:81:54:BF:8F:66:66:52:63:06:AD:17:2F:C8:D1:AC:F3:FA
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584F4974D5AF39E33B38D12A1780
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f7f28672-dd61-35d4-84cc-9faca80b417c.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     7029
IP address blocks:        173.187.153.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:d5:af:39:e3:3b:38:d1:2a:17:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=485819fd-5089-41a0-9f6e-7d4c6de28e7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:16:4a:8a:c8:b0:6f:22:18:3d:e1:8a:b8:20:
                    f4:5c:e0:60:d2:54:a2:c5:b2:70:81:db:d4:b5:67:
                    d3:5e:2c:85:61:04:2c:41:01:0b:8a:c5:f5:f9:4d:
                    56:e5:9e:57:5b:ef:b8:e6:9d:d8:e5:94:f4:62:a3:
                    fd:b5:7c:f9:c9:e2:12:7e:1c:6d:05:7b:76:c3:2b:
                    fa:b1:f4:da:d3:2c:b0:e1:5f:a6:a4:88:47:64:06:
                    3f:50:45:fa:d8:8f:da:d8:2a:ae:28:7e:69:bb:39:
                    3b:3e:ff:72:ae:f0:fa:bd:fc:0f:f5:6b:6b:16:b2:
                    c3:5a:1e:4a:fe:c4:09:ce:33:8a:84:f4:42:e6:44:
                    32:00:a7:24:9f:53:7a:92:69:c0:d8:ea:6f:33:e9:
                    6e:82:6a:ac:91:8f:63:25:d2:43:36:42:e1:d0:51:
                    67:89:e6:0d:07:f7:ff:57:4b:e6:86:87:2a:de:93:
                    2a:f8:36:e0:b5:02:e2:cc:55:bc:7f:2d:ff:4d:eb:
                    77:d3:0b:2e:0b:55:44:2e:1f:c9:2b:e1:e4:dc:42:
                    77:b5:a6:68:7a:8e:f0:e0:b7:f2:02:fc:e8:83:a2:
                    70:e5:88:5f:d8:7c:8a:d5:a4:1b:b2:49:45:d1:7c:
                    6a:e8:84:2b:6a:a2:9a:38:80:51:16:9a:56:47:ab:
                    ef:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:D2:0D:81:54:BF:8F:66:66:52:63:06:AD:17:2F:C8:D1:AC:F3:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f7f28672-dd61-35d4-84cc-9faca80b417c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.187.153.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:0e:25:1b:d3:eb:3b:68:bc:aa:af:1a:5f:0d:ac:5b:84:80:
         3c:6d:20:fa:94:5c:59:4f:b6:64:6a:37:a4:ec:f0:7f:45:bb:
         5a:11:0e:b9:ca:a8:da:71:ff:00:dd:fd:df:96:16:26:15:b8:
         ed:1d:23:af:b7:ad:d4:b7:08:3c:50:a9:8e:74:db:7b:90:45:
         7a:6c:5f:55:ad:29:f0:cd:82:e7:ac:58:3d:dc:bb:bb:45:61:
         b5:c6:b1:51:07:62:f7:9d:4f:bc:e5:a5:3c:7a:71:29:b1:7a:
         5f:2c:eb:ff:a1:22:81:14:08:cf:a3:cb:ad:00:79:28:37:77:
         3b:69:16:59:72:ba:be:5b:e3:78:d3:9a:cc:ea:be:e7:4d:a3:
         5a:a2:fa:9a:bf:58:65:4c:bd:6f:f3:5c:69:3b:66:b5:ef:16:
         9a:b0:b5:05:cc:ea:ef:9e:b2:89:bf:00:eb:93:29:b9:ad:e7:
         4c:16:bd:bb:a5:88:60:b6:24:0c:04:94:d9:5c:14:a2:37:67:
         7f:d8:51:d4:bd:c9:bb:29:46:1d:ad:33:9f:27:f6:9e:18:43:
         25:c3:87:e2:dd:fb:bd:3f:06:a1:ba:5e:9e:19:5f:4a:03:68:
         07:8a:29:1b:f3:5e:2f:50:d7:6a:27:00:ac:b8:1d:3f:3b:84:
         f0:29:80:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 15:01:09 2026 by rpki-client