Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/78cbdf33-6aca-3a10-8d34-6f4f5d2c250d.roa
File:                     78cbdf33-6aca-3a10-8d34-6f4f5d2c250d.roa (raw, json)
Hash identifier:          rpxhofHgPfPORnGAT+wJ0SA7d5qY8haOeLo2PPIBOIE=
Subject key identifier:   A0:30:05:05:40:30:75:13:56:2C:6D:29:3F:46:A0:1D:83:27:BB:E2
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584CEA5CFAA85A68F71195101D80
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/78cbdf33-6aca-3a10-8d34-6f4f5d2c250d.roa
Signing time:             Thu 19 Feb 2026 14:00:40 +0000
ROA not before:           Thu 19 Feb 2026 14:00:40 +0000
ROA not after:            Wed 20 May 2026 13:00:40 +0000
asID:                     7029
IP address blocks:        98.21.200.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Feb 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ea:5c:fa:a8:5a:68:f7:11:95:10:1d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Feb 19 14:00:40 2026 GMT
            Not After : May 20 13:00:40 2026 GMT
        Subject: CN=be254dda-715e-43ff-bb46-f0a03784c7d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:40:33:93:81:16:8c:4b:19:ce:4f:11:af:05:
                    dd:3c:90:72:1c:22:31:e2:64:c6:b8:e0:5e:04:1a:
                    2a:2b:0f:84:84:80:b9:1e:cc:2c:79:23:37:20:96:
                    d7:61:94:ce:93:84:64:eb:0d:ab:85:d2:20:f6:1e:
                    21:f1:70:e4:71:f7:99:1a:a1:b5:cf:61:11:5a:f4:
                    00:af:3e:28:78:07:48:18:23:47:93:eb:28:ae:e5:
                    b4:23:7d:bd:14:cb:a3:26:96:81:b1:b8:90:6b:53:
                    2b:27:dd:89:0a:cb:ca:3d:8f:05:92:c0:13:49:f3:
                    30:e7:db:b0:68:2f:9b:d4:bf:0f:27:9f:0f:bf:98:
                    96:1b:93:96:9c:24:fb:cf:98:00:9e:e8:4b:c0:57:
                    32:4c:77:60:bb:77:36:46:34:d1:67:29:e8:eb:49:
                    90:c4:81:fb:1c:16:9c:4a:40:13:44:b0:ec:b5:74:
                    76:94:fa:60:11:0b:6b:73:ce:d8:85:bd:bc:bc:92:
                    0a:54:fd:f4:02:4a:55:98:22:90:33:58:22:03:63:
                    a7:0c:80:2b:62:8f:90:72:a8:bf:78:5e:14:17:a0:
                    54:ea:1b:e2:cc:e4:e4:e6:3b:c5:98:fd:b3:66:7c:
                    9d:13:64:87:6b:21:f9:e2:c7:91:37:80:ca:cb:0f:
                    dd:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:30:05:05:40:30:75:13:56:2C:6D:29:3F:46:A0:1D:83:27:BB:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/78cbdf33-6aca-3a10-8d34-6f4f5d2c250d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.21.200.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:d6:99:7b:e6:99:6b:04:d3:e0:84:47:68:63:05:62:9e:c1:
         32:82:62:ef:1e:af:fc:5f:5f:1b:4b:68:c0:8b:24:ac:b2:34:
         be:db:6b:cf:09:a6:8e:d3:d3:d5:1b:3f:72:9b:a9:11:dd:41:
         e1:78:dc:a8:51:9c:4f:45:e7:83:3c:58:84:62:24:9d:89:e3:
         11:b4:a6:2e:e3:d1:a3:79:18:fd:fd:f6:57:4e:fc:f4:e0:ff:
         75:34:48:bb:82:8c:e2:d6:3d:59:68:fe:45:2c:ce:45:bd:c0:
         fe:21:43:01:2a:71:08:50:d4:ed:f2:6f:84:e6:20:a2:ce:e4:
         f1:00:43:83:fc:fb:85:8d:b1:f2:f9:60:70:8e:ac:08:d2:54:
         b2:26:1e:3b:24:d1:c6:4d:27:26:26:18:33:a0:fe:14:36:65:
         d0:f4:09:bf:ba:b3:f4:28:05:58:93:a5:54:1d:b1:7e:bd:37:
         f2:de:3e:8e:cd:88:12:0b:ce:82:fb:79:28:86:b6:94:a9:57:
         4a:19:30:d1:3a:fe:0d:98:0a:8b:5e:33:da:f9:be:d5:1b:62:
         47:a9:17:96:12:46:47:d7:b4:ee:60:c6:43:9c:2f:04:78:2e:
         d9:94:c2:79:7a:d3:d1:c2:94:54:50:08:40:a4:58:2f:69:5f:
         c4:37:75:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 07:57:06 2026 by rpki-client