Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/7f7f7c1a-38a9-310c-b64b-ae67f3689c9c.roa
File:                     7f7f7c1a-38a9-310c-b64b-ae67f3689c9c.roa (raw, json)
Hash identifier:          TkpJb1pB1LiDDVu1O2aZ+dD7pnG1LIfk/OVS2Cmv6lw=
Subject key identifier:   31:72:55:65:77:C2:47:78:AE:43:95:4D:6C:82:40:80:2F:DC:8E:C4
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584E640FC61A48C88CE79DEB3D00
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/7f7f7c1a-38a9-310c-b64b-ae67f3689c9c.roa
Signing time:             Sat 04 Jul 2026 21:00:12 +0000
ROA not before:           Sat 04 Jul 2026 21:00:12 +0000
ROA not after:            Fri 02 Oct 2026 21:00:12 +0000
asID:                     577
IP address blocks:        70.49.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:64:0f:c6:1a:48:c8:8c:e7:9d:eb:3d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jul  4 21:00:12 2026 GMT
            Not After : Oct  2 21:00:12 2026 GMT
        Subject: CN=012fa265-8af6-438d-ad61-95ba98c97c45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e7:41:3e:97:3d:66:e0:7e:b1:64:dd:d0:d6:
                    9e:c9:a6:9a:7b:50:a4:53:cd:ef:02:c3:ad:3b:8c:
                    51:ba:37:13:13:41:02:ad:cd:97:53:d7:c4:fb:7c:
                    08:29:11:fd:39:cf:d0:c9:dd:93:e9:fc:5f:4c:5d:
                    09:27:37:ef:c8:02:fc:50:6a:15:17:29:28:fb:ec:
                    32:72:3b:07:7c:6c:44:a6:d0:31:66:2c:b7:46:6e:
                    e5:4a:ed:c2:62:de:1f:ff:8f:f2:d0:bb:a1:c4:62:
                    25:89:fb:0f:9e:d3:3d:b0:f3:0d:f6:14:1c:9e:d8:
                    f6:69:07:6a:14:1e:8e:64:bc:6d:9a:e0:4d:3b:78:
                    8b:3d:b0:3c:aa:03:db:15:6b:87:57:3f:c3:b9:9d:
                    e1:d5:9c:75:4f:2b:49:f6:9f:cd:e8:bf:d4:ad:12:
                    65:28:d2:29:62:34:ec:e9:e3:0d:12:f5:d1:40:c3:
                    8e:e3:0b:e5:3f:73:62:44:84:16:d5:d8:1f:ea:fd:
                    04:19:fe:e3:6c:65:ed:1b:51:46:2c:6a:a3:67:99:
                    bc:a5:cc:13:84:25:31:fe:94:23:b9:c3:e6:54:5d:
                    83:c4:8f:1c:41:a0:5a:ca:da:f4:39:76:7b:eb:3a:
                    a3:97:0f:c9:b0:40:0c:b4:16:f5:7f:c7:15:20:c9:
                    c0:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:72:55:65:77:C2:47:78:AE:43:95:4D:6C:82:40:80:2F:DC:8E:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/7f7f7c1a-38a9-310c-b64b-ae67f3689c9c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.49.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:2e:4c:6e:71:1d:27:69:0b:e0:34:b1:4d:72:2f:4c:4f:81:
         b1:46:de:21:fc:5c:88:b5:c1:8a:09:40:6e:45:83:b5:9a:d1:
         03:05:66:ad:11:e3:d4:2b:52:ff:95:de:9f:a1:17:4d:a1:4e:
         6a:bf:66:f1:8f:e6:d0:4e:e2:5e:7c:c7:9e:80:e0:cb:89:d1:
         62:2a:54:87:d0:42:07:44:f3:34:19:80:4a:4b:81:08:d6:4e:
         bf:84:08:a2:4a:e6:64:de:20:4f:b4:63:11:f6:0f:7f:91:77:
         0f:04:b0:38:06:d8:d6:04:cc:4e:0c:67:b8:55:eb:fb:a7:0e:
         ef:cf:cf:a9:f2:7e:b3:46:b2:dd:42:7a:ca:e2:22:d9:4f:25:
         97:cc:a4:c9:04:f2:07:02:7f:49:7f:72:8e:92:e8:d2:69:2a:
         d1:b0:93:03:0d:46:35:6f:60:c5:6f:23:3d:c2:90:21:ad:02:
         cd:4b:4e:02:72:9f:8e:d6:1f:09:5f:39:5b:38:f8:33:4a:95:
         81:d5:5b:45:b6:f8:67:4d:b2:83:40:25:f2:27:7b:f6:5f:57:
         9d:b7:6a:89:f9:d4:e7:82:c7:25:f6:6b:2c:2f:fb:e8:5b:1a:
         c0:99:9c:5c:f6:27:a4:9e:fc:d1:1b:3d:1c:28:70:80:42:d2:
         57:38:14:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 09:56:25 2026 by rpki-client