Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6f512bc2-4da1-324a-8bfb-07cc64161e09.roa
File:                     6f512bc2-4da1-324a-8bfb-07cc64161e09.roa (raw, json)
Hash identifier:          WIr9AHZX6awDfBLQPcDZh8swTIzR28wF0sskWXJief4=
Subject key identifier:   84:A4:24:19:02:95:35:B2:EF:3B:86:10:A3:DA:D9:F4:C3:60:3F:2F
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584F49745C854823629800444680
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6f512bc2-4da1-324a-8bfb-07cc64161e09.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     7029
IP address blocks:        98.22.126.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 15 Oct 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:5c:85:48:23:62:98:00:44:46:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=c2c29af1-22d1-4978-b566-eb7757cd926e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ed:0c:28:90:a0:96:09:ca:47:94:8f:05:75:
                    49:9b:62:de:c8:ff:88:05:46:ca:21:51:54:26:32:
                    ce:28:e3:2e:d8:bb:5c:d8:c3:bb:4a:20:9d:3d:33:
                    7a:2c:f2:86:b8:3e:8e:77:b8:32:cf:dd:43:ac:1a:
                    0d:e6:db:3c:8a:22:c7:04:0a:d7:c3:67:ce:c2:bc:
                    12:e1:a7:e7:42:b4:f8:87:f3:de:9d:e2:3a:ea:d7:
                    4d:b3:4a:77:69:ed:88:ba:ad:a5:35:86:8b:f2:17:
                    89:27:b5:a4:53:ba:fd:b3:88:eb:7a:0b:1c:ba:c1:
                    61:bd:20:0c:6f:c0:30:d1:db:eb:7f:55:e8:af:6e:
                    98:66:0b:12:44:43:11:5c:6d:32:af:f6:b6:c9:83:
                    78:13:13:17:5d:be:d3:ce:35:62:47:87:a6:db:56:
                    3c:dd:17:e8:ee:f0:78:22:79:7b:c1:41:7a:0a:70:
                    d9:c5:ac:a8:ab:37:04:01:ec:1b:b9:91:8d:27:87:
                    f0:df:03:b9:e3:d4:90:ea:46:b8:aa:22:34:ee:c8:
                    50:dc:c6:8b:34:39:fe:96:6f:3c:e6:84:9c:59:dc:
                    08:4b:93:67:b9:df:23:46:c6:67:3c:4c:74:4c:c0:
                    2a:99:f2:2b:c7:12:0b:31:a5:54:fe:be:4e:21:c6:
                    22:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:A4:24:19:02:95:35:B2:EF:3B:86:10:A3:DA:D9:F4:C3:60:3F:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6f512bc2-4da1-324a-8bfb-07cc64161e09.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.22.126.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:68:e7:f0:53:78:1b:c5:92:4f:2f:c1:aa:00:c2:09:d6:78:
         4a:4e:21:93:6d:e0:eb:19:0f:a8:3f:e2:e9:5c:81:43:43:c4:
         b5:7f:5d:64:9d:45:fa:0d:fb:39:32:9e:94:50:66:62:88:01:
         a6:9b:4f:76:1d:9e:d3:37:fd:24:98:db:3c:98:0d:56:18:b2:
         6b:fc:3d:74:1b:21:be:81:63:f3:43:e2:2b:c5:fd:4d:ce:b0:
         9c:63:ad:66:d5:24:75:42:dc:3e:1e:e8:6d:61:69:bf:fa:d5:
         01:ec:42:7b:1f:b0:20:c6:19:51:a2:e6:32:db:28:43:b1:7e:
         a6:11:51:fe:3e:7f:29:d3:49:ed:42:0c:f9:0a:ce:4e:51:f0:
         62:c3:b9:a4:a5:2e:18:9d:d8:b9:9c:37:64:42:d3:5d:38:7d:
         62:48:e7:da:b5:97:6f:eb:e7:56:eb:22:0a:91:06:c2:40:66:
         de:d5:28:47:68:4b:a1:a3:31:71:3c:53:b1:6e:a8:29:8e:ea:
         7b:79:73:ff:88:a9:82:dd:e4:d9:68:76:66:89:bf:3b:04:5d:
         01:19:b6:0a:bf:f7:b4:39:ec:37:b3:14:9e:85:72:69:04:a8:
         d5:b3:91:0a:67:7e:0d:8f:95:33:95:6b:b8:7d:d8:d4:69:13:
         9f:f1:79:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 21:32:48 2026 by rpki-client