Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/de26d87d-84c4-3225-971a-40a9015e52ba.roa
File:                     de26d87d-84c4-3225-971a-40a9015e52ba.roa (raw, json)
Hash identifier:          nOd+ZD2KyTtXxrtWz6QHOhJlXqm+uIOl+hLX41+6gaI=
Subject key identifier:   4F:6E:13:49:2C:91:79:0F:2A:36:8A:A0:24:E4:A5:5E:EA:06:A3:6A
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584EA787A5FE8E9957B336E3D280
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/de26d87d-84c4-3225-971a-40a9015e52ba.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     7029
IP address blocks:        173.187.168.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:a5:fe:8e:99:57:b3:36:e3:d2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=2d5e4dca-6f04-4c8d-bbb6-02c75747ca7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:3e:56:9f:9f:c0:3d:90:62:37:2e:bb:77:d1:
                    74:df:bd:5b:b9:82:e8:78:94:85:16:8e:0d:dd:a1:
                    c9:71:65:f9:62:05:d3:5d:58:15:22:35:d6:19:1f:
                    1a:6b:c3:20:ba:a0:eb:64:2a:9a:15:0d:91:6f:4f:
                    b7:c3:bf:81:5f:38:09:38:0d:ac:7c:d1:10:5f:f2:
                    20:c5:bf:bc:41:6d:0e:3c:ae:c8:b8:3e:b7:b0:88:
                    7c:0b:fd:cc:5b:c0:49:b8:1f:46:7c:6c:90:d5:16:
                    d2:c9:51:b7:20:8b:d2:7d:af:5a:a8:de:c5:e7:50:
                    3c:89:6e:45:5b:bc:da:61:ed:be:35:f9:84:68:1b:
                    9d:18:0c:7b:9a:cc:a6:59:23:0d:e1:5d:bf:2c:76:
                    b1:f6:c9:a7:b2:0a:6b:50:71:73:0d:f6:fd:dc:a4:
                    00:8c:f1:0b:a8:ff:f8:14:49:b5:77:50:15:74:20:
                    48:e9:09:58:bc:b4:13:94:7d:bb:f8:60:bc:d0:43:
                    7a:6e:9d:cf:43:e6:34:6a:bb:18:a2:40:bf:5d:9d:
                    f2:d4:29:27:a2:10:6e:fd:bc:7d:69:7f:f8:aa:7a:
                    23:f9:32:8b:bf:a2:44:02:f6:e1:9f:c0:19:4c:63:
                    6a:78:54:3f:78:0a:51:15:22:cc:e9:25:be:d3:a4:
                    59:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:6E:13:49:2C:91:79:0F:2A:36:8A:A0:24:E4:A5:5E:EA:06:A3:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/de26d87d-84c4-3225-971a-40a9015e52ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.187.168.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:34:b4:35:12:8f:b3:a0:a0:fe:ef:72:ea:3c:19:84:15:1b:
         77:68:18:b1:1c:d9:66:09:8f:60:f4:b4:03:bf:d1:e7:c8:06:
         92:ce:06:e3:aa:70:bb:6d:cd:48:a3:3f:62:4a:c5:8d:2c:7b:
         2b:08:5b:de:c3:7e:6d:8e:03:2a:73:6d:2b:df:2d:e5:67:94:
         8c:e8:4d:24:3a:c9:4e:d2:55:ef:ee:84:3d:df:c2:26:dc:3a:
         c8:94:b4:b7:2e:fa:28:39:f3:0d:7b:4f:2e:fa:e3:2d:51:be:
         e6:77:d3:48:4c:52:21:e6:5b:38:1b:7f:32:bc:d2:65:41:c8:
         d0:7c:e0:5d:a8:be:33:eb:aa:28:4f:33:68:7d:f1:46:9a:47:
         9c:6d:bb:94:c0:34:97:11:ee:38:61:ce:f7:b9:27:16:d2:dc:
         fc:05:12:41:13:c6:5d:dc:70:68:67:a1:c3:1a:e0:51:98:86:
         2a:37:51:a3:18:ef:39:86:d8:e4:2b:8b:b6:4d:35:db:1e:6c:
         f7:e6:66:0c:14:93:05:23:7c:3d:ff:2c:85:42:3d:4b:7f:09:
         54:1c:46:b1:b4:25:14:a2:39:b7:68:ed:e7:e1:1e:dc:22:4a:
         e9:ff:11:96:78:42:9a:0f:9b:05:f5:27:d4:cb:d0:a7:5b:a4:
         ed:84:f3:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 10:32:24 2026 by rpki-client