Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1f2eaa0e-4956-3e31-9b09-30d6c4c7d0a2.roa
File:                     1f2eaa0e-4956-3e31-9b09-30d6c4c7d0a2.roa (raw, json)
Hash identifier:          KXe50DBpHBxPUw2mdLy/HA4H26biB677SUUmxkRNFwQ=
Subject key identifier:   0B:50:4E:D6:1E:38:60:BF:09:9E:2F:B6:03:D5:17:AE:5C:4D:17:03
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584E5084B5BF5F9EA862553C1040
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1f2eaa0e-4956-3e31-9b09-30d6c4c7d0a2.roa
Signing time:             Sat 27 Jun 2026 21:00:12 +0000
ROA not before:           Sat 27 Jun 2026 21:00:12 +0000
ROA not after:            Fri 25 Sep 2026 21:00:12 +0000
asID:                     7029
IP address blocks:        173.191.238.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:50:84:b5:bf:5f:9e:a8:62:55:3c:10:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Jun 27 21:00:12 2026 GMT
            Not After : Sep 25 21:00:12 2026 GMT
        Subject: CN=8d62d06a-7ecd-4b20-be1e-b1f1ca01b8f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:a1:30:27:ef:6d:f0:47:29:93:71:a0:0f:6a:
                    a2:d8:96:c9:49:ee:48:89:28:42:d4:c9:cc:5e:74:
                    5e:90:df:e0:5b:fc:f0:68:1b:c7:86:6a:89:91:a3:
                    2e:7d:62:42:98:31:b0:af:75:3f:53:62:6a:84:1d:
                    7d:f7:30:f5:88:63:6d:51:f4:e2:c5:ae:49:55:fa:
                    32:fa:31:2b:61:8b:4a:62:40:fd:96:88:e3:a7:c4:
                    5b:2c:37:02:91:ff:83:0b:ff:4a:b5:10:6f:99:8d:
                    1d:51:b5:14:58:95:71:20:fb:18:e9:a5:ad:75:6b:
                    dd:07:45:7e:a9:f5:a0:93:28:3c:b6:7c:22:2d:03:
                    01:68:ca:e9:71:9d:b9:d1:0e:8a:bc:7c:fb:4a:e0:
                    d5:92:34:13:b1:b0:a8:e7:2e:9f:6b:c5:d9:f7:12:
                    c4:64:13:c7:d4:ad:ab:84:30:ce:a9:00:de:da:0b:
                    80:68:7d:52:5b:c4:cf:29:2c:31:18:2c:23:25:7e:
                    42:f3:e4:55:b8:95:6e:81:ec:76:f3:c7:a8:e7:34:
                    e8:57:f1:83:f5:4e:ef:84:46:26:57:bf:2b:85:c6:
                    37:79:6a:aa:e3:f8:0a:82:a9:8f:81:90:7b:73:5d:
                    6a:af:db:00:20:a9:63:a9:f6:25:01:30:16:eb:ea:
                    bc:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:50:4E:D6:1E:38:60:BF:09:9E:2F:B6:03:D5:17:AE:5C:4D:17:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1f2eaa0e-4956-3e31-9b09-30d6c4c7d0a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.191.238.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:a8:cd:c8:78:bb:0a:c0:d4:66:b2:f0:32:70:3f:33:90:11:
         88:8c:da:d8:2f:c6:97:5a:db:39:0b:07:1f:65:79:9c:c9:de:
         f7:ae:a1:81:24:35:76:d2:17:01:6c:47:25:04:0f:e6:72:10:
         54:b9:f7:c2:d2:b6:75:d2:4d:f9:ea:e3:0f:84:82:ed:72:24:
         d9:e6:5c:61:68:e2:b5:cc:9a:67:02:f8:aa:93:88:61:a5:44:
         dc:37:64:bc:4a:f4:3c:88:4b:cf:2a:8e:0a:e1:54:24:5d:26:
         fd:e4:cb:85:f9:61:17:57:70:56:b1:52:08:6f:b3:ff:db:05:
         8a:05:b2:3e:87:e4:da:c0:4f:64:23:87:b6:2b:b7:34:41:42:
         5c:4f:80:8c:b8:bd:d5:9b:03:b8:f9:82:1b:38:34:35:ab:0b:
         e6:63:19:b1:d6:dc:ff:fc:08:35:4d:10:f3:dc:b7:ab:4b:3c:
         e1:47:10:22:f8:7e:db:f8:1d:f8:df:48:52:7e:18:87:56:db:
         e6:ff:f7:3c:dc:9c:15:53:c4:cc:0c:23:4a:29:38:4e:47:e6:
         00:07:dd:8e:c9:8d:5e:88:2f:14:de:60:77:38:3b:10:1a:cf:
         ad:ce:96:c8:b5:5d:f0:27:26:4c:be:1e:ba:7a:98:46:ec:cc:
         98:2f:09:28
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5QhLW/X56oYlU8EEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTI2MDYyNzIxMDAxMloXDTI2MDkyNTIxMDAxMlowLzEtMCsGA1UEAxMk
OGQ2MmQwNmEtN2VjZC00YjIwLWJlMWUtYjFmMWNhMDFiOGY3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlaEwJ+9t8Ecpk3GgD2qi2JbJSe5IiShC1MnM
XnRekN/gW/zwaBvHhmqJkaMufWJCmDGwr3U/U2JqhB199zD1iGNtUfTixa5JVfoy
+jErYYtKYkD9lojjp8RbLDcCkf+DC/9KtRBvmY0dUbUUWJVxIPsY6aWtdWvdB0V+
qfWgkyg8tnwiLQMBaMrpcZ250Q6KvHz7SuDVkjQTsbCo5y6fa8XZ9xLEZBPH1K2r
hDDOqQDe2guAaH1SW8TPKSwxGCwjJX5C8+RVuJVugex288eo5zToV/GD9U7vhEYm
V78rhcY3eWqq4/gKgqmPgZB7c11qr9sAIKljqfYlATAW6+q8+QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAtQTtYeOGC/CZ4vtgPVF65cTRcDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMWYyZWFhMGUtNDk1Ni0z
ZTMxLTliMDktMzBkNmM0YzdkMGEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrb/uMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH2ozch4uwrA1Gay8DJwPzOQEYiM2tgvxpda2zkLBx9leZzJ3veuoYEk
NXbSFwFsRyUED+ZyEFS598LStnXSTfnq4w+Egu1yJNnmXGFo4rXMmmcC+KqTiGGl
RNw3ZLxK9DyIS88qjgrhVCRdJv3ky4X5YRdXcFaxUghvs//bBYoFsj6H5NrAT2Qj
h7YrtzRBQlxPgIy4vdWbA7j5ghs4NDWrC+ZjGbHW3P/8CDVNEPPct6tLPOFHECL4
ftv4HfjfSFJ+GIdW2+b/9zzcnBVTxMwMI0opOE5H5gAH3Y7JjV6ILxTeYHc4OxAa
z63Olsi1XfAnJky+Hrp6mEbszJgvCSg=
-----END CERTIFICATE-----
Generated at Mon Jul 13 05:50:48 2026 by rpki-client