Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7017fb9b-0a3c-3656-81a2-a353624677b6.roa
File:                     7017fb9b-0a3c-3656-81a2-a353624677b6.roa (raw, json)
Hash identifier:          /ZEu0VLCJmjcJOWh+MPqCPYexfCRxFtmufkmJ+3fc7E=
Subject key identifier:   F7:6C:B6:9B:75:C0:9E:F3:13:9F:D3:89:B9:38:F0:72:6F:CA:54:30
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584EAA5196D9B8428E59EFE1B640
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7017fb9b-0a3c-3656-81a2-a353624677b6.roa
Signing time:             Thu 30 Jul 2026 01:00:12 +0000
ROA not before:           Thu 30 Jul 2026 01:00:12 +0000
ROA not after:            Wed 28 Oct 2026 01:00:12 +0000
asID:                     7029
IP address blocks:        173.189.52.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:aa:51:96:d9:b8:42:8e:59:ef:e1:b6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Jul 30 01:00:12 2026 GMT
            Not After : Oct 28 01:00:12 2026 GMT
        Subject: CN=c86998ba-efe9-4511-ba36-bf66d0f28760
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d9:69:f0:79:0c:e7:67:8f:b4:fb:e0:5b:d0:
                    03:da:fb:f0:e9:33:37:21:73:43:3c:24:a8:2d:70:
                    20:08:5b:ca:2f:83:a5:35:dd:42:7d:06:c4:e2:17:
                    8f:5e:f1:ab:67:61:63:27:bb:0b:3d:32:87:5d:e6:
                    66:c5:6e:1c:b6:dd:97:33:e4:0a:fc:12:cc:b4:0b:
                    b2:fb:f6:c7:dd:b3:0a:26:4b:fa:7e:b0:e4:60:6c:
                    b4:28:da:8d:21:e2:4a:5a:c8:d9:70:f9:b9:15:eb:
                    50:e8:4b:41:48:6b:3a:c1:80:f1:09:c3:41:52:63:
                    51:15:24:fd:c1:2d:d3:ed:cb:38:8b:e8:41:ab:fa:
                    65:c8:9e:b3:88:26:4f:e3:58:fb:87:0e:bc:d7:95:
                    cd:b2:a6:a2:b3:3b:f0:ee:f9:8a:2f:7b:c8:b2:bf:
                    40:e9:59:5f:6a:9f:c9:43:1a:aa:9e:66:01:a2:41:
                    f6:4c:59:96:02:4f:fe:a2:d5:20:8d:97:63:b5:7e:
                    20:59:86:85:89:d4:f6:3a:b0:70:d4:40:64:6a:f9:
                    37:e8:cf:cb:a6:6f:5a:5b:85:49:28:20:f0:89:02:
                    fa:d3:32:36:e8:e2:55:f4:4e:49:5e:95:14:9b:d3:
                    7f:28:cf:4f:fc:dc:09:01:7a:5c:e2:87:4c:ff:8c:
                    a0:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:6C:B6:9B:75:C0:9E:F3:13:9F:D3:89:B9:38:F0:72:6F:CA:54:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7017fb9b-0a3c-3656-81a2-a353624677b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.189.52.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:12:28:99:9b:c0:43:46:60:fc:dc:4c:21:04:cc:9c:77:e0:
         79:0a:9b:f2:ad:b4:a4:b1:d4:0c:6c:ea:0e:56:0a:ed:17:ba:
         20:94:94:31:ab:e5:b2:62:38:42:55:c4:dd:d7:97:df:1f:31:
         e1:6a:de:73:a5:03:ee:5d:29:c7:87:e2:86:ac:43:ae:97:c3:
         e6:b9:61:2d:32:c7:2a:3c:c6:fd:a3:60:5d:79:c6:4b:9c:88:
         39:42:b9:c4:6f:f3:e3:d8:cc:e3:ac:4f:21:71:d2:ce:a3:45:
         fa:23:b2:a2:e8:71:2c:84:6d:33:d9:f4:c6:cd:8a:e0:8e:c9:
         95:b3:16:09:77:38:9a:d6:a8:13:f0:c7:96:db:2e:47:39:76:
         af:a5:21:cb:6d:9c:38:aa:70:57:3d:d3:3a:08:ad:71:0d:15:
         06:8f:e4:ad:e4:27:b0:af:1b:fa:22:3b:e5:c8:ce:50:e6:5c:
         29:d9:1e:35:83:56:9e:56:8a:a1:29:fd:bf:b3:19:91:46:9d:
         0b:1a:10:7c:31:61:b6:02:41:00:c5:6d:ee:f4:3d:fd:de:04:
         d1:67:96:fa:9f:c4:1a:e3:61:fa:0c:a0:45:d7:65:23:d4:57:
         a5:df:fd:f1:1f:d0:4e:ae:b6:bc:a6:f4:d9:d3:16:85:82:47:
         a6:4e:c8:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 12:32:34 2026 by rpki-client