Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e5c7090e-ef0a-32e6-bb05-c7d2661877eb.roa
File:                     e5c7090e-ef0a-32e6-bb05-c7d2661877eb.roa (raw, json)
Hash identifier:          2D4caf5F2DCInn5WwUsuuL4gOVG1OgK7XRTl+v0xti4=
Subject key identifier:   66:FF:AE:94:CA:B5:77:1E:4D:FA:2A:60:A2:7A:0E:F5:B5:C1:BC:18
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584EAFE6FAD90495A0A04B1DE2A0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e5c7090e-ef0a-32e6-bb05-c7d2661877eb.roa
Signing time:             Sat 01 Aug 2026 01:00:12 +0000
ROA not before:           Sat 01 Aug 2026 01:00:12 +0000
ROA not after:            Fri 30 Oct 2026 01:00:12 +0000
asID:                     7029
IP address blocks:        75.117.46.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:af:e6:fa:d9:04:95:a0:a0:4b:1d:e2:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Aug  1 01:00:12 2026 GMT
            Not After : Oct 30 01:00:12 2026 GMT
        Subject: CN=7fa5aaab-36ab-4d8a-a266-8250c2c26813
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:8d:c7:98:d1:6e:86:ae:13:b7:26:4f:fd:66:
                    9a:a3:f9:35:d3:c0:62:61:eb:c3:50:df:ea:32:9b:
                    e7:f1:92:85:d2:ba:0b:4b:ae:aa:38:f1:d0:c6:da:
                    6c:24:a2:7e:a5:66:71:8e:52:71:33:ce:80:52:7c:
                    06:39:24:b2:72:60:3e:b1:ce:4a:bc:74:94:c7:59:
                    39:4d:b3:e5:40:f8:c5:70:85:78:17:a3:f5:c7:2f:
                    78:de:d3:1b:ba:aa:df:c9:40:1d:ec:1f:4d:ad:84:
                    1f:05:22:55:58:fb:24:1a:ca:af:ff:20:f4:08:a5:
                    e1:85:b8:d5:d1:22:15:df:21:fb:94:e8:80:66:e5:
                    b1:04:8e:ba:3c:0d:f0:04:ae:91:b2:6d:a3:93:71:
                    a1:3c:28:5c:2a:9f:e6:cc:5c:8f:32:8d:dd:1e:eb:
                    63:fe:99:94:7a:f2:8f:89:55:50:6a:0e:36:50:ca:
                    94:27:b1:5e:59:d9:cf:3f:43:b0:4b:e6:b4:69:b1:
                    18:ae:f6:1e:de:a2:12:dd:12:56:98:c0:af:94:b5:
                    8e:0e:ed:fc:1e:06:64:ca:48:be:30:c1:ee:e8:48:
                    f8:a2:01:c4:3d:24:03:b0:7f:c8:96:f9:f8:ef:60:
                    de:e4:0f:0e:0f:5b:c0:9a:a2:25:4f:0e:70:06:ea:
                    19:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:FF:AE:94:CA:B5:77:1E:4D:FA:2A:60:A2:7A:0E:F5:B5:C1:BC:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e5c7090e-ef0a-32e6-bb05-c7d2661877eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.117.46.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:e7:33:60:ff:df:47:84:1e:70:89:4a:21:2d:a7:90:5b:14:
         f4:89:a2:61:87:4a:06:00:0c:1b:08:d8:20:ea:94:3f:ab:90:
         10:9e:91:16:01:97:8b:f4:b0:aa:22:1e:3d:13:af:b9:09:71:
         88:d1:b5:d0:08:23:34:1c:87:ce:f2:b5:c7:d5:69:90:e0:b9:
         b8:2d:29:65:2f:76:de:ca:ec:d4:2f:94:d4:a6:77:8f:8b:f2:
         8e:8d:86:51:61:0f:43:cb:5a:fa:00:0a:53:85:f2:dd:b2:43:
         7a:38:1f:46:ef:04:6c:9d:db:8b:c7:ab:b2:1f:08:5a:e9:34:
         19:f0:59:47:bf:57:a2:94:5f:5f:e6:42:50:ed:4c:ef:0e:67:
         c3:a0:f1:13:8d:8d:04:8c:8a:46:4f:7a:1e:15:4d:02:71:ab:
         0a:48:5d:d6:c8:b9:d7:65:48:27:03:11:99:40:8c:44:c5:bf:
         8d:f9:1f:3c:bd:95:5a:49:dd:56:4f:23:1b:ec:1f:46:b3:bd:
         74:60:14:ef:21:4f:49:38:c8:3b:e8:96:b0:6e:4a:8c:fc:a2:
         0a:ef:ac:18:ec:42:80:09:29:58:03:6b:f8:6d:c1:b8:8e:00:
         47:c2:32:b7:17:50:8c:ca:2a:34:5c:e6:c1:97:1c:ec:70:49:
         fe:98:f3:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 14:20:37 2026 by rpki-client