Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/789d1381-8868-33ae-99e1-73f7c1f74dd0.roa
File:                     789d1381-8868-33ae-99e1-73f7c1f74dd0.roa (raw, json)
Hash identifier:          J4Ps6TdrF/sETtt/9B0i/qz/Qs5Ms4OhcapYSkh0sc0=
Subject key identifier:   C4:0F:40:01:94:3A:BB:54:8F:8A:23:BC:D7:ED:B8:3A:32:01:2E:8B
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584EB2B1EA6FB2B4AE46DDD31280
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/789d1381-8868-33ae-99e1-73f7c1f74dd0.roa
Signing time:             Sun 02 Aug 2026 01:00:11 +0000
ROA not before:           Sun 02 Aug 2026 01:00:11 +0000
ROA not after:            Sat 31 Oct 2026 01:00:11 +0000
asID:                     16402
IP address blocks:        63.252.93.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b2:b1:ea:6f:b2:b4:ae:46:dd:d3:12:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Aug  2 01:00:11 2026 GMT
            Not After : Oct 31 01:00:11 2026 GMT
        Subject: CN=382a56c2-6ab4-48f2-8a7d-e21267143590
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:0e:7e:1b:a5:75:97:ae:ca:60:56:f9:98:32:
                    dd:97:51:c1:7e:8a:9a:0a:7d:1a:8b:ca:c0:fa:52:
                    e7:be:2c:26:98:61:3e:2a:c6:bd:2d:c1:44:97:ff:
                    cf:48:c9:a3:37:87:5f:c6:87:d4:fd:5a:cf:d2:1f:
                    e7:4e:2f:8e:8a:63:18:de:7e:27:b1:96:16:fb:7d:
                    70:36:90:89:c2:95:75:7b:39:76:4b:78:7e:fa:ea:
                    ed:47:d5:8a:6e:bf:c4:f3:4d:e3:4f:99:9a:3b:20:
                    88:78:e1:ee:3d:ba:92:59:39:74:06:69:f1:6d:7f:
                    8c:16:b6:69:ec:2f:3b:48:18:7e:e9:91:86:a3:2e:
                    d7:40:2a:35:3d:9c:4f:3c:30:7f:7c:f2:7b:af:8f:
                    77:8f:75:00:66:b4:53:3b:e9:bd:44:01:f0:a9:94:
                    c5:5d:cb:d9:29:71:19:c7:75:11:9f:fa:db:82:3f:
                    83:da:b2:d3:e0:cb:2e:61:2b:de:80:3f:31:9d:bd:
                    3e:d4:2c:08:bc:22:f9:1b:6a:0b:f5:99:a4:f0:2b:
                    8a:af:b1:35:22:16:62:87:24:5f:fa:7a:06:c1:b0:
                    9e:a8:c7:fd:78:ee:f2:f7:68:a3:b1:b6:6c:bc:79:
                    d9:6f:df:8e:b4:c8:4c:fd:b3:24:3f:d8:20:a4:63:
                    47:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:0F:40:01:94:3A:BB:54:8F:8A:23:BC:D7:ED:B8:3A:32:01:2E:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/789d1381-8868-33ae-99e1-73f7c1f74dd0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.252.93.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:19:5f:c5:41:bc:14:1d:ec:14:61:9c:df:7d:82:5f:56:b7:
         68:46:a1:2a:42:51:2c:5d:5e:ee:e7:70:63:68:9d:b9:4b:61:
         a0:ae:f3:d5:0f:f0:8b:30:c6:4e:63:7d:3a:0f:20:79:70:3b:
         a2:02:35:ba:e6:dc:0d:9e:c0:b2:a0:47:ac:11:bf:39:d6:b6:
         11:cf:79:11:96:85:5d:e4:b2:88:67:c0:d8:60:03:53:52:7f:
         1e:54:3f:65:1a:1e:9f:00:2f:04:90:9a:9b:07:41:e6:b0:1b:
         a7:05:ca:6f:65:0f:07:e2:ff:93:39:f2:33:87:9c:f5:6d:c0:
         fb:81:ab:80:06:70:04:25:a6:87:99:ae:ea:cd:ac:f6:ec:7f:
         0b:f8:27:bc:9f:a1:1a:d4:e3:b1:af:b5:a0:fd:7e:07:0c:ad:
         61:67:8f:56:77:99:4a:c3:c1:28:d8:2b:2d:56:ff:e0:04:6f:
         4e:75:1c:43:03:3d:86:b6:62:f8:f0:30:ed:06:1d:2c:6b:23:
         01:c5:5f:45:65:93:1f:b3:22:ca:3d:23:49:2d:2a:6e:85:6b:
         2e:ce:53:65:a0:bd:c5:44:1f:6f:b8:73:06:de:a8:5f:32:96:
         4f:76:c5:a5:fc:ba:6d:6c:c1:5f:a8:19:95:34:90:9a:47:c7:
         34:8d:59:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 12:33:40 2026 by rpki-client