Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/530f27f8-d2f1-361a-94d6-4e1543d243bb.roa
File:                     530f27f8-d2f1-361a-94d6-4e1543d243bb.roa (raw, json)
Hash identifier:          CEhbqfd22EsBcGwtxiQvzGL6v37kKPvO3gngk7iO940=
Subject key identifier:   1B:EA:CE:36:44:6E:CA:54:8D:85:FA:21:A0:9C:4D:06:D2:16:01:49
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584B715CF3AE45A543E82493CAC0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/530f27f8-d2f1-361a-94d6-4e1543d243bb.roa
Signing time:             Tue 07 Oct 2025 13:00:37 +0000
ROA not before:           Tue 07 Oct 2025 13:00:37 +0000
ROA not after:            Mon 05 Jan 2026 14:00:37 +0000
asID:                     7029
IP address blocks:        66.152.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:71:5c:f3:ae:45:a5:43:e8:24:93:ca:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Oct  7 13:00:37 2025 GMT
            Not After : Jan  5 14:00:37 2026 GMT
        Subject: CN=9a3302d4-6961-400f-99ba-b252ed5e15fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:42:77:bb:35:40:8b:18:44:e7:b3:8d:22:29:
                    0f:d1:49:74:33:8e:c2:a1:9c:b1:c6:78:3c:6e:5e:
                    41:e1:33:d4:1b:74:8f:0c:9b:54:bc:37:5c:ce:11:
                    ad:01:f0:19:8b:d6:69:c1:57:c9:bb:62:3d:98:81:
                    e3:1f:23:b5:10:88:11:2b:64:96:74:b7:3c:f3:99:
                    95:a4:61:a9:94:9c:44:d8:62:36:27:64:f7:58:80:
                    89:68:2f:c5:af:09:3d:8c:6d:98:66:5b:6e:da:d0:
                    73:d1:ce:44:a5:42:de:93:fa:1a:1f:20:fe:83:d8:
                    23:21:62:d3:6c:86:b3:b0:f7:d4:b3:13:22:b0:1d:
                    a3:85:92:86:2d:53:f7:e6:d2:87:3c:ee:96:c4:a5:
                    47:fa:d8:03:c0:18:08:be:be:92:dc:98:5f:33:3e:
                    34:91:81:3a:37:bd:ca:f3:97:61:51:c7:26:2c:85:
                    f6:d9:d4:fd:b2:a9:81:41:1f:51:ee:08:99:ad:07:
                    66:63:ce:23:60:aa:aa:1f:5b:45:ab:25:f8:73:1f:
                    55:34:46:da:5f:94:11:a0:df:07:5a:9f:9e:53:96:
                    61:23:ad:2a:6d:75:2f:4e:70:1b:f5:47:20:27:a7:
                    45:0e:91:41:6e:0b:31:f8:60:3d:cf:b1:26:ab:40:
                    10:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:EA:CE:36:44:6E:CA:54:8D:85:FA:21:A0:9C:4D:06:D2:16:01:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/530f27f8-d2f1-361a-94d6-4e1543d243bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.152.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:93:a6:26:de:b3:0f:02:7f:c0:90:c4:e0:56:f4:1a:ee:4a:
         06:22:7d:a7:b9:10:1f:05:e2:8c:d2:6d:49:a8:d3:6a:ec:b8:
         a6:29:e1:0e:19:5b:ae:df:95:f1:93:44:f4:55:09:d3:a0:d9:
         b2:49:2b:bf:31:ef:fe:f7:27:96:77:ed:a5:21:39:3b:f3:5a:
         cf:c4:32:d0:3a:6f:65:ab:39:e0:dd:7c:62:7b:85:e6:b1:f8:
         04:e2:29:a2:2a:9a:10:76:7b:1b:f5:96:d3:d6:19:27:20:ec:
         27:a3:dc:e0:07:cf:4a:68:cd:54:c6:8b:56:98:2f:7f:2d:b2:
         28:14:54:f2:4c:c2:47:94:43:f1:ea:e5:8e:b3:cc:25:dc:6a:
         7f:01:ef:10:53:d8:6c:22:d6:b4:b5:af:c7:9b:0a:d9:af:f6:
         a5:02:02:31:20:ac:51:85:94:f3:5b:cf:ef:97:5c:60:1d:b4:
         a1:39:60:d7:cf:03:74:20:34:92:d5:d7:53:16:bc:1f:26:d0:
         46:6d:98:ff:e6:ab:d6:c3:09:89:5c:cd:e5:48:23:ae:b5:df:
         c9:1b:e9:ca:43:7f:9c:8f:66:bc:4b:79:33:c0:4d:75:d8:e2:
         70:a8:c0:00:59:16:8a:d0:56:fb:38:cb:bf:ea:22:7d:d5:97:
         a6:6a:68:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:03:26 2025 by rpki-client