Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7bdd3c11-6583-4dc4-a05b-bbdcdfdcd272/b49d1b93-c2b5-3691-86ae-33c7b9f6e6bf.roa
File:                     b49d1b93-c2b5-3691-86ae-33c7b9f6e6bf.roa (raw, json)
Hash identifier:          vdOaaNmAkegvkerabgHiKXu53Ql+kURkgPp7Cs6CvWA=
Subject key identifier:   DF:4E:E1:66:9B:37:C4:FF:47:D1:A1:A0:29:3C:5F:72:CE:D8:D1:C9
Certificate issuer:       /CN=7bdd3c11-6583-4dc4-a05b-bbdcdfdcd272
Certificate serial:       010D0C9F4328584E3A2F146605914A63AA1DFE00
Authority key identifier: 2A:03:B4:01:A5:51:2C:BF:C3:1B:2E:80:CF:84:43:5F:4A:80:3B:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7bdd3c11-6583-4dc4-a05b-bbdcdfdcd272.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7bdd3c11-6583-4dc4-a05b-bbdcdfdcd272/b49d1b93-c2b5-3691-86ae-33c7b9f6e6bf.roa
Signing time:             Fri 19 Jun 2026 21:00:12 +0000
ROA not before:           Fri 19 Jun 2026 21:00:12 +0000
ROA not after:            Thu 17 Sep 2026 21:00:12 +0000
asID:                     7925
IP address blocks:        129.71.0.0/16 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7bdd3c11-6583-4dc4-a05b-bbdcdfdcd272/7bdd3c11-6583-4dc4-a05b-bbdcdfdcd272.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7bdd3c11-6583-4dc4-a05b-bbdcdfdcd272/7bdd3c11-6583-4dc4-a05b-bbdcdfdcd272.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7bdd3c11-6583-4dc4-a05b-bbdcdfdcd272.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3a:2f:14:66:05:91:4a:63:aa:1d:fe:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bdd3c11-6583-4dc4-a05b-bbdcdfdcd272
        Validity
            Not Before: Jun 19 21:00:12 2026 GMT
            Not After : Sep 17 21:00:12 2026 GMT
        Subject: CN=5c21eb47-0c31-43f3-8661-fbc6e1b590ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:94:ac:43:08:51:e1:4c:7a:74:d5:ed:3b:2d:
                    66:2c:13:82:dd:fc:6d:a9:ab:56:b4:e6:95:40:78:
                    eb:70:55:49:00:99:0f:a7:2d:43:16:da:29:cd:eb:
                    f8:86:c3:c5:45:8a:e9:ad:03:78:15:fd:8b:0b:8e:
                    ed:ce:b8:8a:a7:42:dc:3a:76:78:4a:0e:f7:c9:87:
                    68:eb:ef:af:6e:c8:89:0d:5b:71:3c:76:65:3b:58:
                    fe:6e:03:af:99:d1:b6:68:eb:55:dd:3c:a3:fe:23:
                    1a:f4:1b:2b:1a:06:82:81:61:8b:ba:4b:1c:f3:dc:
                    91:d1:2b:12:d9:ae:eb:bc:6b:06:9c:57:c4:1b:12:
                    b9:4c:03:ed:37:dc:de:66:2b:55:80:53:a1:e5:37:
                    41:40:fb:27:e2:27:2f:a5:7f:1b:af:02:ca:f9:c3:
                    98:4e:5f:68:71:4d:f9:52:d2:66:86:11:d2:0a:28:
                    11:aa:45:f7:fd:7f:15:37:8c:7c:8e:15:fa:4d:a7:
                    b8:43:80:60:70:9b:d7:f3:7b:01:1a:de:ba:9d:15:
                    65:b0:2e:11:5a:3a:a9:f3:64:bb:7e:08:2c:9b:5e:
                    e7:aa:13:4c:b1:e8:6a:e8:f5:e7:89:e9:a3:4f:11:
                    61:3c:34:7d:f0:fe:8d:af:a0:5c:84:85:e0:a7:be:
                    cb:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:4E:E1:66:9B:37:C4:FF:47:D1:A1:A0:29:3C:5F:72:CE:D8:D1:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7bdd3c11-6583-4dc4-a05b-bbdcdfdcd272/b49d1b93-c2b5-3691-86ae-33c7b9f6e6bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7bdd3c11-6583-4dc4-a05b-bbdcdfdcd272/7bdd3c11-6583-4dc4-a05b-bbdcdfdcd272.crl

            X509v3 Authority Key Identifier:
                keyid:2A:03:B4:01:A5:51:2C:BF:C3:1B:2E:80:CF:84:43:5F:4A:80:3B:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7bdd3c11-6583-4dc4-a05b-bbdcdfdcd272.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.71.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:67:50:09:93:45:74:d8:ca:b1:85:f9:4a:62:55:c6:58:29:
         ed:33:5c:6e:59:ef:9f:4f:e3:d7:5f:a4:74:e7:d8:3a:b5:40:
         67:de:7c:13:29:46:b8:3b:9d:07:e6:f3:c8:66:15:92:18:c8:
         69:9e:4a:ad:fa:dc:ff:fc:16:35:8a:2a:cb:e9:79:70:be:12:
         72:65:a8:d5:05:58:35:de:76:c3:32:b1:46:7f:ab:d6:16:7e:
         6e:e4:b0:a5:c3:80:60:51:6b:91:18:17:96:bb:76:8a:30:59:
         00:d7:cc:dc:f8:e5:90:71:a2:bd:33:a8:eb:71:7f:c8:ce:3b:
         cd:53:ba:92:00:2d:84:6a:4c:9f:22:20:2e:1d:70:99:88:fa:
         62:28:3d:a8:3d:87:f1:81:5b:6a:6e:b7:75:5e:e8:de:2b:0b:
         0e:0a:88:81:df:e9:3c:01:da:fa:44:4f:29:4e:28:b4:5d:9e:
         e3:3c:46:0e:cd:7e:dc:34:2b:b0:60:37:44:a8:15:9e:69:0d:
         1c:51:5b:22:04:7e:d6:e1:2d:b5:07:17:a9:2c:c6:ff:e8:95:
         03:ed:50:0c:7d:bf:19:82:11:bd:87:f0:31:0e:e8:d8:d4:27:
         14:a9:8b:a8:4e:c8:5b:7e:8d:b0:26:42:44:65:ce:ba:f8:f0:
         e4:40:8b:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:54:03 2026 by rpki-client