Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/aec7c878-fcf6-3f4b-9a40-6d20585d55eb.roa
File:                     aec7c878-fcf6-3f4b-9a40-6d20585d55eb.roa (raw, json)
Hash identifier:          lNMU/ImBo3DJ83cRH8qs3c7AznXO8Y+S0fKJ2h0BFd4=
Subject key identifier:   87:68:94:55:B1:13:F9:D1:2B:D1:08:B4:D6:66:C0:F4:EE:24:FA:18
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584ED4325549A18A2D70795C1A80
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/aec7c878-fcf6-3f4b-9a40-6d20585d55eb.roa
Signing time:             Fri 14 Aug 2026 01:00:13 +0000
ROA not before:           Fri 14 Aug 2026 01:00:13 +0000
ROA not after:            Thu 12 Nov 2026 02:00:13 +0000
asID:                     7029
IP address blocks:        75.91.48.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d4:32:55:49:a1:8a:2d:70:79:5c:1a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Aug 14 01:00:13 2026 GMT
            Not After : Nov 12 02:00:13 2026 GMT
        Subject: CN=2c7cdb10-ab69-4732-afdb-145b18eaba45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:af:34:47:ea:c2:c9:f0:c2:71:02:77:e2:e2:
                    fb:0e:77:86:8b:ae:85:e8:00:5b:26:31:99:ad:ba:
                    29:03:d9:9c:56:ae:d9:17:fe:f4:c2:61:c7:bb:a6:
                    36:fd:ed:22:63:1d:8d:44:95:e7:c1:5b:7f:65:eb:
                    90:c5:52:4e:f5:6c:e9:85:f3:db:19:16:33:9c:c3:
                    c7:de:ee:b6:c1:9e:0b:73:36:86:83:bd:b7:c9:bb:
                    d4:23:e5:cd:cd:f5:f7:eb:6c:ec:f1:33:5b:91:fa:
                    2d:1a:ee:50:ab:49:93:4b:dc:36:09:63:68:24:9b:
                    49:9c:00:7f:50:c0:66:f4:70:3b:ff:58:a3:c8:ef:
                    3c:39:ed:e8:6c:1d:92:69:a5:cb:ac:97:a3:46:fc:
                    61:8d:68:17:13:ea:aa:10:69:35:f4:6a:c6:ed:e1:
                    79:8d:c7:94:e3:39:3c:c3:f6:e9:07:9c:13:9a:56:
                    d9:fd:40:15:6b:a6:2f:05:6e:fc:61:98:99:30:38:
                    c2:a2:ea:0f:42:c1:6a:a0:88:90:e9:20:63:f6:1c:
                    d1:19:37:ef:da:a9:f2:b9:26:78:7a:f3:b2:ba:65:
                    70:d8:40:46:92:20:8f:53:6f:b4:46:c3:94:f8:d7:
                    58:5f:b0:49:c4:77:25:d9:63:97:ad:a2:ff:14:3a:
                    37:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:68:94:55:B1:13:F9:D1:2B:D1:08:B4:D6:66:C0:F4:EE:24:FA:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/aec7c878-fcf6-3f4b-9a40-6d20585d55eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.91.48.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:a6:ab:87:96:0f:3a:94:97:50:22:f9:1f:f1:29:ea:ac:a9:
         df:46:5c:d0:4b:2d:0c:c1:f9:ca:64:7f:c2:20:a0:55:67:41:
         5b:fa:d5:c7:93:a0:68:85:87:4c:d3:32:4b:55:39:07:1b:57:
         d0:4b:23:7e:84:98:27:20:6a:cb:d7:bb:be:64:67:9e:0b:0e:
         69:fb:d7:b1:6f:fd:a3:91:84:16:e5:55:46:46:6c:c0:65:d2:
         1e:d5:a9:cc:15:b1:d3:ba:d6:ae:14:c0:6b:e7:7e:56:e9:e1:
         a4:dd:a4:31:ed:29:ba:db:b3:ba:95:b6:eb:3f:52:3a:b4:8d:
         bb:ba:86:b0:81:6f:60:a9:30:d9:22:5f:98:f0:4e:f8:c2:83:
         bc:9b:25:b7:c1:96:be:86:c7:86:ef:f4:9b:5d:0d:b6:df:e4:
         c2:7b:30:bd:be:ed:c8:a0:ce:0c:98:c5:4f:29:bc:31:75:fe:
         cf:f9:93:ad:70:72:43:9b:ab:8c:a1:f6:50:bd:e7:ee:47:82:
         3a:aa:b4:28:9e:35:1f:55:99:6e:db:f2:7e:43:6f:ee:b0:d9:
         be:6e:fd:c8:69:2c:f4:bc:7f:3b:b8:8c:cb:ec:36:c9:b7:67:
         1f:f3:7d:7c:16:90:75:c0:90:c0:86:2c:56:31:27:6b:8b:c5:
         2a:b1:52:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 16:09:16 2026 by rpki-client