Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS49981.roa
File:                     AS49981.roa (raw, json)
Hash identifier:          Jt7yoFw9myoS6LUeESYyBXeOkuMzI3xzpg9ynVEfEZA=
Subject key identifier:   F5:09:01:55:02:73:73:22:9F:2F:FA:1C:F6:A9:CD:C6:E9:F6:DF:5D
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       14D3A508106129CC318AD30A3C9B815ADD7676CD
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS49981.roa
Signing time:             Wed 17 Jun 2026 11:23:46 +0000
ROA not before:           Wed 17 Jun 2026 11:18:46 +0000
ROA not after:            Wed 16 Jun 2027 11:23:46 +0000
asID:                     49981
IP address blocks:        104.234.138.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Jul 2026 20:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:d3:a5:08:10:61:29:cc:31:8a:d3:0a:3c:9b:81:5a:dd:76:76:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Jun 17 11:18:46 2026 GMT
            Not After : Jun 16 11:23:46 2027 GMT
        Subject: CN=F5090155027373229F2FFA1CF6A9CDC6E9F6DF5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:97:63:c7:73:a2:5b:df:ad:a9:35:9a:38:f6:
                    5d:08:da:ee:0d:79:97:8d:30:3c:59:42:5c:aa:f7:
                    6e:0b:01:8a:cf:b6:be:57:34:74:16:73:d8:96:e2:
                    c3:30:fa:54:c4:8d:87:db:99:ae:41:98:b8:d1:f5:
                    e0:3c:d3:a9:24:d1:00:84:3e:0d:bc:b6:73:25:a4:
                    fa:7b:71:c3:a9:91:f3:8e:c0:9a:9f:b8:e6:d9:78:
                    45:5a:45:68:15:e4:62:27:56:a5:e3:17:fe:81:ae:
                    1a:f4:8f:42:76:5f:1e:1a:b6:5e:da:d3:16:f2:33:
                    0d:0d:28:27:46:33:ce:64:96:24:cf:7b:cf:b9:9c:
                    41:0b:b1:95:00:18:9e:23:71:e1:5e:2a:bb:54:5d:
                    92:10:49:80:5a:c0:f4:cb:f6:22:0e:b5:7c:41:00:
                    f2:77:f9:b8:ea:b1:ae:74:d2:d5:3d:97:68:23:9a:
                    1a:9d:87:7e:94:3c:6c:72:e2:ad:b2:ee:6c:cb:c9:
                    a2:25:7c:8b:d9:7b:b2:27:6b:d1:65:4a:b1:ea:17:
                    22:9f:5e:fe:2b:dd:b2:e7:6f:b9:e4:7b:a6:80:41:
                    bd:05:4a:04:e5:64:32:6b:b1:95:9e:d5:e8:54:a4:
                    b1:8c:ae:e3:08:92:cf:ac:04:dd:71:ab:74:ed:68:
                    c5:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:09:01:55:02:73:73:22:9F:2F:FA:1C:F6:A9:CD:C6:E9:F6:DF:5D
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS49981.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.138.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:6a:43:76:ac:48:be:1c:52:a1:88:56:a4:ce:87:76:94:99:
         47:74:d4:51:90:e7:0f:48:9c:5b:23:a9:a7:0d:82:8e:c2:3e:
         b3:bf:a2:3a:95:69:d5:87:15:59:6d:8a:91:a9:1f:ed:72:af:
         6e:66:ec:ec:11:a6:4a:aa:6a:0b:c8:74:dd:d7:bd:ba:b6:a9:
         0c:24:66:2c:14:85:89:4a:d7:35:84:40:40:71:e9:07:1b:00:
         5d:a8:90:cb:35:b8:d3:fd:0e:39:4c:3c:bb:01:0a:50:b0:6e:
         a1:96:d8:68:62:42:75:0c:74:64:75:83:41:c4:52:03:96:f3:
         bb:44:f5:6b:b9:e4:78:d8:2b:b2:7e:9b:c6:5c:f8:03:a2:cb:
         eb:b8:9e:46:fb:5a:1a:e1:e5:b6:c1:f7:4a:8b:23:4c:04:b6:
         dc:1f:1f:3b:05:5a:8a:4c:e8:fa:cd:08:c5:24:cf:5f:5b:05:
         d2:f5:82:71:4a:93:96:18:5a:71:4e:43:7b:80:8f:48:4a:84:
         0a:34:c0:05:76:74:6e:f4:1c:b5:9e:90:af:c3:03:cc:4b:f7:
         a5:91:84:33:2b:b2:5a:14:31:80:08:7c:71:7d:67:12:d7:e0:
         7d:a5:da:a2:93:61:d5:b7:d3:2c:45:3c:7d:93:f2:6f:a6:81:
         d8:dd:82:f8
-----BEGIN CERTIFICATE-----
MIIFfjCCBGagAwIBAgIUFNOlCBBhKcwxitMKPJuBWt12ds0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw
Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjYwNjE3MTExODQ2WhcNMjcwNjE2MTEyMzQ2
WjAzMTEwLwYDVQQDEyhGNTA5MDE1NTAyNzM3MzIyOUYyRkZBMUNGNkE5Q0RDNkU5
RjZERjVEMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxpdjx3OiW9+t
qTWaOPZdCNruDXmXjTA8WUJcqvduCwGKz7a+VzR0FnPYluLDMPpUxI2H25muQZi4
0fXgPNOpJNEAhD4NvLZzJaT6e3HDqZHzjsCan7jm2XhFWkVoFeRiJ1al4xf+ga4a
9I9Cdl8eGrZe2tMW8jMNDSgnRjPOZJYkz3vPuZxBC7GVABieI3HhXiq7VF2SEEmA
WsD0y/YiDrV8QQDyd/m46rGudNLVPZdoI5oanYd+lDxscuKtsu5sy8miJXyL2Xuy
J2vRZUqx6hcin17+K92y52+55HumgEG9BUoE5WQya7GVntXoVKSxjK7jCJLPrATd
cat07WjFFQIDAQABo4ICfjCCAnowHQYDVR0OBBYEFPUJAVUCc3Miny/6HPapzcbp
9t9dMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv
QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj
MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j
ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj
YjJiYWMvMC9BUzQ5OTgxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaOqKMA0GCSqGSIb3DQEBCwUAA4IB
AQCGakN2rEi+HFKhiFakzod2lJlHdNRRkOcPSJxbI6mnDYKOwj6zv6I6lWnVhxVZ
bYqRqR/tcq9uZuzsEaZKqmoLyHTd1726tqkMJGYsFIWJStc1hEBAcekHGwBdqJDL
NbjT/Q45TDy7AQpQsG6hlthoYkJ1DHRkdYNBxFIDlvO7RPVrueR42CuyfpvGXPgD
osvruJ5G+1oa4eW2wfdKiyNMBLbcHx87BVqKTOj6zQjFJM9fWwXS9YJxSpOWGFpx
TkN7gI9ISoQKNMAFdnRu9By1npCvwwPMS/elkYQzK7JaFDGACHxxfWcS1+B9pdqi
k2HVt9MsRTx9k/JvpoHY3YL4
-----END CERTIFICATE-----
Generated at Tue Jul 21 01:35:10 2026 by rpki-client