Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a79bad07-00e0-372e-92b3-9084ab0979d5.roa
File:                     a79bad07-00e0-372e-92b3-9084ab0979d5.roa (raw, json)
Hash identifier:          5lC2YrQzUcqwANUxJnkN+jTxbe5FHKLprxBerb/+aT4=
Subject key identifier:   0C:9A:EB:C7:81:2C:60:C4:46:9F:41:BE:EA:1F:78:D0:63:D1:15:EA
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584EB2B1D10AD6748A677944A700
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a79bad07-00e0-372e-92b3-9084ab0979d5.roa
Signing time:             Sun 02 Aug 2026 01:00:11 +0000
ROA not before:           Sun 02 Aug 2026 01:00:11 +0000
ROA not after:            Sat 31 Oct 2026 01:00:11 +0000
asID:                     54704
IP address blocks:        207.170.18.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b2:b1:d1:0a:d6:74:8a:67:79:44:a7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Aug  2 01:00:11 2026 GMT
            Not After : Oct 31 01:00:11 2026 GMT
        Subject: CN=56fc76aa-0d45-424d-9e2b-31d860766fa8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:50:3d:be:98:91:a6:96:c2:47:cf:70:ac:82:
                    63:08:62:fd:53:43:e1:42:63:f9:db:a3:ae:4c:fa:
                    1b:9f:6e:94:12:0c:d4:7c:e5:62:b1:af:69:02:92:
                    1a:e2:f8:d8:7f:01:24:e9:20:3a:6c:67:33:50:89:
                    81:1e:f5:94:5a:91:5d:c9:a2:3d:67:9c:a6:00:b1:
                    04:d1:66:d5:38:b7:c3:c9:a3:6d:55:2f:8d:7e:d8:
                    b1:d8:b0:50:00:39:ca:9c:84:75:ed:9d:a6:01:b6:
                    3b:87:0c:c6:5c:d0:43:ba:8a:14:d9:3d:10:5c:4f:
                    36:94:81:bb:3a:c5:fb:2d:6e:4e:48:f4:4c:b9:e1:
                    46:22:c2:e7:ea:7d:32:26:40:0d:76:93:4e:6f:09:
                    b0:11:5a:c7:8b:cb:a8:f2:c4:24:49:d1:78:ae:63:
                    7d:1f:15:24:1a:fc:da:dd:75:ab:7d:b9:a0:40:19:
                    c1:1e:e2:9d:6a:56:1d:ab:a6:6f:e5:27:57:52:76:
                    4d:7f:78:04:c9:b6:cd:45:8b:94:44:4b:b7:0a:2d:
                    94:20:5f:d6:fa:10:c5:4c:db:31:9d:7b:82:1d:77:
                    7e:53:ba:b0:46:42:fc:ec:bb:1c:78:72:85:9a:25:
                    5d:27:4d:54:81:c8:d5:87:c4:cc:e4:77:6b:ee:ad:
                    1c:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:9A:EB:C7:81:2C:60:C4:46:9F:41:BE:EA:1F:78:D0:63:D1:15:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a79bad07-00e0-372e-92b3-9084ab0979d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.170.18.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:c4:8a:46:5c:8b:14:4d:2e:fe:8e:57:d8:b6:de:55:75:ad:
         98:ac:a9:c2:81:55:b6:3c:2f:ba:34:aa:ee:8d:7e:e1:ce:6e:
         c5:4f:77:ea:ed:8e:a7:7c:21:c4:5e:64:3d:dd:fc:e2:24:3f:
         6a:4b:7e:72:fe:54:25:db:63:47:7f:73:5d:9c:8b:2a:92:c7:
         c0:d6:65:1b:66:b2:d0:ea:7a:ba:35:a7:66:b8:4a:88:10:7f:
         ea:c2:4a:7a:cb:4e:7e:1b:97:a0:80:7c:43:e6:9f:fa:ae:0f:
         86:b9:b5:51:55:a8:46:99:3a:3c:62:3e:bc:20:62:b7:e2:d4:
         6d:31:a8:49:79:b7:8a:59:a3:50:55:93:42:41:eb:42:85:09:
         db:cb:02:fd:a4:b5:ef:c3:f1:90:6b:fa:0e:fb:30:b7:8b:b9:
         0d:bd:0c:42:7d:81:bf:ee:1a:48:9c:e2:5f:5f:7f:d9:ef:69:
         04:a7:98:55:2c:a6:2d:ac:fb:5a:f4:c7:44:90:5d:36:df:f1:
         61:79:e9:7b:bb:99:69:eb:a1:12:61:e2:f7:41:b5:ba:65:0e:
         07:55:9a:ec:f2:6f:83:df:67:d0:5b:5e:88:f9:34:a8:21:85:
         b0:f2:ad:b5:d5:2c:94:47:d5:37:7c:b9:dd:1c:76:3e:6d:d9:
         6c:87:26:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 11:35:01 2026 by rpki-client