Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5453459a-6eb2-3994-9041-412771cabb7c.roa
File:                     5453459a-6eb2-3994-9041-412771cabb7c.roa (raw, json)
Hash identifier:          zRfdXes80Xm/cUCnatksTquSK25AmLY/yI4lryt0fBc=
Subject key identifier:   E9:D8:5C:65:DD:4B:B1:FD:0B:F5:2D:DD:A0:17:CB:F2:0E:6D:18:09
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584EB2B1C628F3FF6D3C3D05F880
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5453459a-6eb2-3994-9041-412771cabb7c.roa
Signing time:             Sun 02 Aug 2026 01:00:11 +0000
ROA not before:           Sun 02 Aug 2026 01:00:11 +0000
ROA not after:            Sat 31 Oct 2026 01:00:11 +0000
asID:                     7029
IP address blocks:        64.80.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b2:b1:c6:28:f3:ff:6d:3c:3d:05:f8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Aug  2 01:00:11 2026 GMT
            Not After : Oct 31 01:00:11 2026 GMT
        Subject: CN=0f43433b-dce8-4cf7-a077-d2a71efa36d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:53:c5:4b:7d:df:d8:bb:93:49:15:f9:6f:ae:
                    0c:71:1d:83:ff:85:a3:41:34:9f:eb:9a:f4:e5:3f:
                    b9:98:46:1c:79:42:66:c4:b5:29:2e:a8:d0:56:5f:
                    5a:9a:d7:6c:26:23:1a:6a:30:bf:58:64:74:81:90:
                    a5:23:ee:63:8b:9b:89:f6:13:9e:1a:00:6c:ad:d8:
                    57:9b:10:73:f0:e0:63:65:9b:9d:3f:ed:27:7b:b7:
                    00:6b:e1:58:6a:4c:d6:dd:a8:de:cc:7d:cb:1c:6f:
                    cf:fa:e9:a9:dc:e1:e8:28:a2:fe:8a:2a:a7:da:d7:
                    75:a0:da:93:c5:d0:69:6f:38:91:8b:f1:09:97:e6:
                    1c:75:b9:aa:43:71:ff:00:b5:4f:5b:a2:ef:65:91:
                    18:be:3c:ef:76:09:26:99:ae:43:88:b4:64:4d:d3:
                    3c:03:b4:9c:58:c6:33:89:1c:e4:c8:b1:f8:25:70:
                    d1:d2:79:c4:1f:8b:1d:95:97:dd:d0:d0:4d:85:5a:
                    b0:7a:86:cc:a9:7c:2d:23:b2:05:85:ca:03:52:81:
                    b8:f4:0c:fc:29:7c:10:bf:43:df:ea:86:1d:d7:9c:
                    1d:d7:ae:15:78:85:6b:f3:db:97:d4:bd:5f:0b:4c:
                    25:fa:f6:56:23:ca:04:81:c5:63:fc:a2:b2:8b:a9:
                    4e:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:D8:5C:65:DD:4B:B1:FD:0B:F5:2D:DD:A0:17:CB:F2:0E:6D:18:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5453459a-6eb2-3994-9041-412771cabb7c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.80.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:a5:45:d0:cd:a8:c7:1b:52:cc:97:54:9e:aa:57:36:e4:cb:
         63:d2:76:f6:a1:c3:87:28:43:3b:7c:20:ad:a4:5c:b0:bf:40:
         5c:b1:98:3c:30:51:e9:4e:d5:b6:e7:73:df:f7:a3:4d:d7:31:
         ed:0c:f8:5e:b7:ee:8a:d3:be:3b:18:37:54:f6:e0:8d:41:f1:
         1a:1d:68:1c:fe:12:41:54:2a:59:2b:47:84:24:fa:a1:1f:b9:
         05:9d:91:f5:44:51:f8:4e:a4:d5:e1:7a:53:55:f5:99:1e:42:
         99:da:cc:97:6c:29:8a:65:e9:17:b1:b1:b7:6a:66:c1:6d:f3:
         e2:55:5e:a6:de:c6:3c:4c:aa:50:ca:77:6d:18:e7:04:7e:f4:
         4c:22:ab:fe:54:6f:d4:f9:17:4e:22:92:1c:3f:a3:4f:6a:94:
         82:67:d6:af:be:5a:b2:38:f4:29:6e:4f:3c:f4:dd:6c:6b:b3:
         74:5d:c5:70:7f:a8:8c:fd:15:41:e9:f8:99:b5:35:63:21:14:
         c0:8f:32:d9:f9:1f:a4:38:6b:ba:0d:12:56:68:0d:b7:42:1c:
         bf:b6:9c:72:b0:f9:50:90:c7:26:1d:6c:fd:24:49:9a:22:85:
         4a:73:7b:da:41:67:f9:4e:dc:1a:55:86:09:4b:82:22:e6:33:
         ac:78:36:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 11:39:18 2026 by rpki-client