Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e8585300-5ca2-37eb-a643-7e794eec82bc.roa
File:                     e8585300-5ca2-37eb-a643-7e794eec82bc.roa (raw, json)
Hash identifier:          R8sLfUA59UiBiPnb2S30kfeYpH5glrCXTkN+KQwy3OY=
Subject key identifier:   8A:5E:EF:EB:10:43:CC:16:5F:36:E6:0D:3B:DF:D6:6F:8B:FA:D9:73
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584CE1FCC5FC02A8CA118BDC0D80
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e8585300-5ca2-37eb-a643-7e794eec82bc.roa
Signing time:             Mon 16 Feb 2026 14:00:40 +0000
ROA not before:           Mon 16 Feb 2026 14:00:40 +0000
ROA not after:            Sun 17 May 2026 13:00:40 +0000
asID:                     7029
IP address blocks:        71.29.122.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Feb 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e1:fc:c5:fc:02:a8:ca:11:8b:dc:0d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Feb 16 14:00:40 2026 GMT
            Not After : May 17 13:00:40 2026 GMT
        Subject: CN=af29d10d-9680-4a93-b6ad-c508dfd40427
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:5e:fa:de:68:b3:94:aa:bb:f1:70:52:ef:83:
                    88:aa:61:ae:d5:13:8b:fd:c1:e2:58:63:5e:2a:bb:
                    30:a4:ef:d5:9a:61:92:f7:87:9d:15:1e:a7:86:28:
                    fd:ef:aa:d1:57:50:d9:38:4f:92:2f:48:07:c7:1e:
                    88:c4:db:4f:e2:27:ad:f7:ff:df:72:6c:bd:90:63:
                    8f:36:61:b2:e2:6b:68:3c:65:cf:df:45:d3:74:dc:
                    96:0a:67:2d:87:49:ec:83:38:fd:bc:94:19:72:82:
                    7f:50:cc:60:9b:28:c5:a2:6c:71:2f:80:5b:d7:99:
                    29:98:ec:f7:be:f5:33:29:c1:c8:84:88:cb:f4:ff:
                    e4:3a:4b:64:fe:cf:fc:db:03:83:b6:9e:c7:c4:75:
                    b0:6a:ea:76:97:64:16:7c:fe:d8:f8:40:13:17:83:
                    95:45:8d:40:3c:04:95:83:9a:43:7c:32:3b:c5:81:
                    b1:63:cc:c2:6d:d6:99:27:b7:0d:23:0a:68:c9:3f:
                    8f:78:15:1a:62:67:95:8b:71:d4:30:73:ad:96:b3:
                    c5:e8:38:36:ff:56:06:26:05:c5:4b:0b:45:e1:ba:
                    72:4e:53:92:e8:af:15:a5:2b:81:e3:87:83:65:6d:
                    27:03:42:fd:86:bb:d1:b7:b4:c9:28:07:f0:4c:7f:
                    1d:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:5E:EF:EB:10:43:CC:16:5F:36:E6:0D:3B:DF:D6:6F:8B:FA:D9:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e8585300-5ca2-37eb-a643-7e794eec82bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.29.122.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:8e:ec:79:b5:54:a1:ce:ab:77:e8:8f:68:04:45:62:99:4f:
         7b:24:3e:ad:82:f2:1c:85:48:9a:28:d1:8b:b4:02:6d:bb:4b:
         66:91:04:94:a0:6e:da:3b:98:aa:b4:60:63:4a:d1:c4:bd:f2:
         d0:05:dd:06:39:b9:c9:76:f2:f2:b3:42:01:20:5f:cf:1f:f8:
         5e:9f:60:98:26:43:7a:08:8a:ec:cf:5c:ef:b9:36:aa:6e:31:
         7e:08:27:80:7b:9b:07:5e:cf:e8:02:e9:ee:95:5d:d5:65:79:
         e9:eb:0b:60:55:ed:f5:f5:3b:82:b3:2e:e9:0b:79:82:b4:f1:
         46:be:0d:bb:5a:35:c5:b4:61:a9:ae:2e:a4:72:dd:71:83:bc:
         2c:d5:e9:bd:d3:ce:53:b1:10:c4:c9:95:40:67:b0:b6:24:f8:
         4a:df:b3:2a:c9:12:1e:92:64:dd:f4:9e:0f:ea:5a:e6:f4:75:
         3c:5c:00:6f:5e:e8:b6:ea:09:fe:d8:41:da:05:86:6c:e4:c1:
         68:b2:31:e1:07:fc:a4:fd:1d:a1:be:3e:00:64:47:fa:fe:30:
         84:5f:4a:2a:08:57:8a:be:a7:88:43:5d:3e:c3:0c:61:8e:2e:
         9e:c3:dd:52:25:75:5b:32:50:46:b9:0f:b8:98:6f:4e:e5:2a:
         7f:5e:9f:29
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzh/MX8AqjKEYvcDYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTI2MDIxNjE0MDA0MFoXDTI2MDUxNzEzMDA0MFowLzEtMCsGA1UEAxMk
YWYyOWQxMGQtOTY4MC00YTkzLWI2YWQtYzUwOGRmZDQwNDI3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArF763mizlKq78XBS74OIqmGu1ROL/cHiWGNe
KrswpO/VmmGS94edFR6nhij976rRV1DZOE+SL0gHxx6IxNtP4iet9//fcmy9kGOP
NmGy4mtoPGXP30XTdNyWCmcth0nsgzj9vJQZcoJ/UMxgmyjFomxxL4Bb15kpmOz3
vvUzKcHIhIjL9P/kOktk/s/82wODtp7HxHWwaup2l2QWfP7Y+EATF4OVRY1APASV
g5pDfDI7xYGxY8zCbdaZJ7cNIwpoyT+PeBUaYmeVi3HUMHOtlrPF6Dg2/1YGJgXF
SwtF4bpyTlOS6K8VpSuB44eDZW0nA0L9hrvRt7TJKAfwTH8dWwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIpe7+sQQ8wWXzbmDTvf1m+L+tlzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZTg1ODUzMDAtNWNhMi0z
N2ViLWE2NDMtN2U3OTRlZWM4MmJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRx16MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEOO7Hm1VKHOq3foj2gERWKZT3skPq2C8hyFSJoo0Yu0Am27S2aRBJSg
bto7mKq0YGNK0cS98tAF3QY5ucl28vKzQgEgX88f+F6fYJgmQ3oIiuzPXO+5Nqpu
MX4IJ4B7mwdez+gC6e6VXdVleenrC2BV7fX1O4KzLukLeYK08Ua+DbtaNcW0Yamu
LqRy3XGDvCzV6b3TzlOxEMTJlUBnsLYk+ErfsyrJEh6SZN30ng/qWub0dTxcAG9e
6LbqCf7YQdoFhmzkwWiyMeEH/KT9HaG+PgBkR/r+MIRfSioIV4q+p4hDXT7DDGGO
Lp7D3VIldVsyUEa5D7iYb07lKn9enyk=
-----END CERTIFICATE-----
Generated at Thu Feb 26 06:28:55 2026 by rpki-client