Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cd443bf6-48e5-3b1d-92bd-201edb6bee63.roa
File:                     cd443bf6-48e5-3b1d-92bd-201edb6bee63.roa (raw, json)
Hash identifier:          7L7LRuz7Wq/UMojtnMhyr417u1RCvLbhL/Zwwghhij0=
Subject key identifier:   1E:6E:48:04:9F:A2:E2:53:4A:D3:E6:7C:AD:07:C0:76:32:15:22:49
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584F7A502121F4BF8C1135F663C0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cd443bf6-48e5-3b1d-92bd-201edb6bee63.roa
Signing time:             Mon 12 Oct 2026 13:00:12 +0000
ROA not before:           Mon 12 Oct 2026 13:00:12 +0000
ROA not after:            Sun 10 Jan 2027 14:00:12 +0000
asID:                     7029
IP address blocks:        75.88.200.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7a:50:21:21:f4:bf:8c:11:35:f6:63:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Oct 12 13:00:12 2026 GMT
            Not After : Jan 10 14:00:12 2027 GMT
        Subject: CN=224834fc-43c4-40f8-9d8c-8083c7740da0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:90:45:88:4f:55:64:73:2e:33:2d:04:6e:b4:
                    a5:b9:7e:57:7a:e4:81:e1:b6:94:a1:6d:90:09:f8:
                    5c:74:25:6c:ba:94:6e:93:ee:b3:39:76:3a:16:41:
                    b9:26:3e:cf:65:d5:61:e1:1f:0c:41:17:22:63:21:
                    2b:e4:09:2c:3b:af:6e:7b:64:a6:5f:d9:66:2a:11:
                    a9:63:7b:71:da:d3:ea:b3:91:c6:6b:1c:ee:e9:62:
                    5f:7f:1e:42:7a:cc:4b:60:03:41:1d:bb:73:18:14:
                    34:f3:0b:b5:8b:44:59:d2:48:c5:84:e2:11:fa:e5:
                    bb:62:8d:fe:1e:5d:a6:a7:37:85:c1:73:1d:9e:74:
                    e4:56:f2:dd:fa:37:0b:d6:ef:e4:d3:59:e1:f1:56:
                    5d:e1:89:8b:d8:fe:98:db:fc:30:de:75:03:c9:23:
                    d0:31:b3:6a:aa:46:10:1a:44:d0:97:cc:53:56:e6:
                    0b:01:6c:2a:be:c8:32:e5:79:64:fe:6f:ab:cb:73:
                    97:36:15:16:27:1d:42:48:3a:2c:04:50:31:2f:14:
                    f9:48:b7:be:89:97:db:15:fa:37:09:b5:bb:3c:a9:
                    a3:14:68:18:7b:9b:fc:9a:58:25:78:95:db:99:7d:
                    11:28:dd:85:0e:15:e6:0b:cc:b6:72:11:04:9b:d9:
                    5b:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:6E:48:04:9F:A2:E2:53:4A:D3:E6:7C:AD:07:C0:76:32:15:22:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cd443bf6-48e5-3b1d-92bd-201edb6bee63.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.88.200.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:cd:3e:7c:a1:b1:3d:f2:dd:47:b8:a6:01:89:f7:e6:6a:cd:
         d3:79:5e:f8:01:a0:8f:f9:15:61:c1:2d:04:d7:b4:44:99:e9:
         98:86:03:11:5a:92:b0:7d:64:ed:95:5c:87:37:15:18:67:62:
         24:8d:45:63:38:6a:7a:7a:df:21:92:70:4c:8d:52:ee:fe:0e:
         a2:3a:b1:48:99:88:75:bf:9c:de:77:eb:14:00:d0:ea:d2:f1:
         1e:a3:da:37:4f:85:6a:6e:eb:3b:88:c0:21:33:8c:60:50:ee:
         bb:56:3c:76:73:86:84:30:ac:68:d8:bd:95:5a:8f:4e:f3:59:
         59:d1:a9:b2:ed:90:5a:36:09:34:89:5e:77:73:5b:80:d7:2f:
         c7:22:5c:38:94:4b:47:0f:6c:2c:33:f9:65:68:97:39:1f:2c:
         ec:bb:1d:68:19:63:54:b5:f0:77:24:61:1a:95:c8:b1:d1:68:
         75:f6:b8:2c:db:58:6d:5a:c6:cd:88:46:4f:cf:cc:cc:02:24:
         d1:74:07:28:56:e1:a0:82:60:be:1d:d3:75:4a:0b:e1:50:21:
         f4:23:8d:44:d0:95:0f:27:ba:7b:7e:b3:64:67:5b:bd:a3:84:
         ca:b8:79:17:ff:cf:52:35:77:22:ec:ad:26:eb:8f:6b:77:36:
         d3:41:28:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 12:52:25 2026 by rpki-client