Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a7ba8040-db73-3f65-8c4e-8d1e9728453b.roa
File:                     a7ba8040-db73-3f65-8c4e-8d1e9728453b.roa (raw, json)
Hash identifier:          L7kayjHasMhVV1k05mgV4E4hjKJJ4RXim76ZQgFAGyg=
Subject key identifier:   FB:9C:E6:AE:BB:76:64:A5:25:BC:DC:64:81:A1:49:AB:CF:EA:07:34
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584F549D7C3BFAFD0E8F70C58580
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a7ba8040-db73-3f65-8c4e-8d1e9728453b.roa
Signing time:             Tue 29 Sep 2026 01:00:12 +0000
ROA not before:           Tue 29 Sep 2026 01:00:12 +0000
ROA not after:            Mon 28 Dec 2026 02:00:12 +0000
asID:                     30155
IP address blocks:        162.245.162.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:54:9d:7c:3b:fa:fd:0e:8f:70:c5:85:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Sep 29 01:00:12 2026 GMT
            Not After : Dec 28 02:00:12 2026 GMT
        Subject: CN=f6213ed5-2d01-4d4f-a842-365d30c847ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:c4:b1:7d:7f:0d:d2:18:6a:f6:7e:83:12:2a:
                    09:44:92:15:70:1c:3f:6a:4e:8e:46:96:e2:98:1b:
                    af:99:b6:9a:92:94:d2:5c:81:c5:fb:d8:37:3e:b4:
                    20:77:dd:ba:b3:1f:3c:87:ec:f0:79:9e:93:83:63:
                    9e:cf:f4:73:f0:7a:94:3c:f5:c0:a6:3a:da:ba:82:
                    79:12:56:05:7f:ab:f1:2c:9f:64:8d:c0:44:b9:00:
                    80:35:44:d0:84:55:34:62:76:33:26:36:99:be:a5:
                    99:c4:39:d7:fc:a3:60:a8:a0:32:af:84:32:29:d1:
                    9c:82:4a:52:3d:0a:71:96:f7:e6:a4:89:8a:3d:17:
                    a8:85:92:9a:16:d3:b9:1b:ca:9b:f3:94:0f:31:54:
                    37:69:e1:d6:5a:6b:97:4b:30:30:e4:6c:f4:93:0b:
                    4b:0d:9c:aa:ee:8e:20:f5:16:c2:33:02:08:b7:23:
                    f5:72:f5:2e:06:6f:9d:3e:bd:f3:f2:77:c2:f9:4b:
                    2a:13:fa:c1:98:80:aa:cd:6a:da:b1:35:93:4a:ee:
                    64:ef:87:b0:d1:40:7f:0e:02:47:c0:dd:d5:d0:91:
                    a1:b3:fc:d3:7e:e3:53:a6:4b:44:f5:f5:e2:2a:ec:
                    50:25:c2:28:78:63:ea:40:29:12:b9:36:66:b2:fa:
                    d1:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:9C:E6:AE:BB:76:64:A5:25:BC:DC:64:81:A1:49:AB:CF:EA:07:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a7ba8040-db73-3f65-8c4e-8d1e9728453b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.245.162.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:c5:ee:cf:a8:00:1a:28:51:b2:93:1f:e8:85:4a:63:f3:c6:
         3a:b1:22:70:2d:fd:40:49:0e:db:0b:d7:ec:8b:a9:77:5c:dc:
         92:ff:87:57:27:a1:45:10:0c:31:81:83:8e:58:9d:d7:41:0e:
         d5:fd:84:eb:1b:98:ad:9d:c4:99:d8:37:a7:af:b8:93:58:18:
         b8:6c:8b:9b:5b:48:76:c8:2d:08:87:b1:97:49:47:7d:f1:84:
         a2:b3:2f:87:67:cf:39:74:ce:51:ce:cd:22:c4:9b:4a:65:e8:
         ac:db:50:16:70:60:b9:9f:03:7b:4b:03:2d:a6:ab:c9:ee:a6:
         f6:1e:e7:77:85:a7:6a:5f:8b:5a:0e:ee:47:e1:1e:9b:c6:82:
         ad:44:f8:68:73:0c:17:69:36:8e:b6:3e:91:87:66:39:b8:29:
         64:1d:16:84:bb:6c:a1:65:aa:72:9b:72:f4:5d:69:fa:19:5b:
         8a:00:61:fe:e2:c0:b3:a6:5b:aa:9f:35:18:bb:3d:31:a3:4e:
         60:24:3d:f0:b5:b8:cc:05:10:6e:1b:fe:59:27:de:5e:2c:13:
         bb:2d:14:ec:82:d5:1f:85:67:8e:55:05:94:76:76:92:5d:3e:
         08:95:18:54:51:88:72:f0:5f:63:37:ca:61:c1:fa:00:c0:9d:
         48:10:e9:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 13:06:27 2026 by rpki-client