Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f87b8ecd-6f2c-3920-99a7-47ba28a76ba5.roa
File:                     f87b8ecd-6f2c-3920-99a7-47ba28a76ba5.roa (raw, json)
Hash identifier:          HIpxVijHjJIdp3qGQdewckPBU5Z4hBWc4MNoaNTQuaE=
Subject key identifier:   92:E6:5E:05:BA:77:DC:5F:7E:B6:13:1B:A8:7A:26:66:40:12:28:D4
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584F51D2B4A5910309C51662DEF8
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f87b8ecd-6f2c-3920-99a7-47ba28a76ba5.roa
Signing time:             Mon 28 Sep 2026 01:00:12 +0000
ROA not before:           Mon 28 Sep 2026 01:00:12 +0000
ROA not after:            Sun 27 Dec 2026 02:00:12 +0000
asID:                     7029
IP address blocks:        71.7.116.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 15 Oct 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:51:d2:b4:a5:91:03:09:c5:16:62:de:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Sep 28 01:00:12 2026 GMT
            Not After : Dec 27 02:00:12 2026 GMT
        Subject: CN=445e3cfe-b00a-4946-acc2-cb8b8936ea43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:51:ba:cc:e4:6f:29:89:4e:af:03:b6:ac:cb:
                    9c:b8:c1:81:a5:bd:c8:58:05:ab:5d:cc:e7:bf:df:
                    6a:08:50:63:65:16:47:33:31:0a:81:9c:8e:59:3f:
                    9c:b0:c0:db:20:05:0f:54:21:b5:13:ab:27:ef:24:
                    67:00:db:f2:c1:5e:3e:b0:bd:41:3b:45:66:75:6c:
                    d9:08:a6:07:83:c3:6e:b7:9e:83:dc:da:74:6b:85:
                    52:3a:49:b8:a8:f1:c2:e1:93:6b:7f:b1:f9:6a:33:
                    d3:d4:55:3f:68:12:0b:2f:5a:da:e6:c9:37:9b:62:
                    ae:19:a6:07:ad:a9:d6:2d:da:84:d2:e9:f8:41:73:
                    13:eb:65:60:dd:96:48:8f:2c:de:a1:3d:82:d8:2d:
                    ae:27:fe:cf:2d:84:90:c2:26:08:e4:f8:34:e1:c1:
                    c3:e1:4d:a4:e3:fd:f6:ab:a6:c5:0d:8e:01:2f:f4:
                    a6:d7:57:65:71:f4:a5:80:a9:59:7f:e5:76:79:ee:
                    42:a1:d3:a3:97:66:ca:96:83:de:b0:b2:52:f6:d9:
                    9e:9d:94:c0:c2:60:36:6b:f7:e0:21:01:54:42:99:
                    0b:1d:bb:45:df:0e:4e:98:93:96:7b:65:d4:dc:fd:
                    39:79:a6:fc:81:b0:80:4a:88:43:17:be:9a:72:a2:
                    eb:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:E6:5E:05:BA:77:DC:5F:7E:B6:13:1B:A8:7A:26:66:40:12:28:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f87b8ecd-6f2c-3920-99a7-47ba28a76ba5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.7.116.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:e2:1b:1d:68:f5:bb:67:1d:16:be:45:39:f4:57:73:3c:e0:
         0c:d2:65:05:b7:38:26:35:f7:21:dc:6d:f7:d9:d9:19:1c:88:
         0f:23:7f:9b:1b:c4:e8:7e:34:03:da:fd:c0:fe:45:6c:98:5f:
         a7:00:dc:2f:1d:87:a8:3b:65:37:d8:c2:f2:6f:a3:0e:99:63:
         05:aa:f5:d1:e3:1f:04:36:fb:9c:57:4f:1e:72:22:19:e5:4b:
         96:b1:fb:d3:01:80:b7:f3:c2:b4:32:c1:f4:e3:19:67:ec:2a:
         f7:98:5a:fe:6d:95:13:5c:3e:c7:39:a4:05:1d:97:ed:1c:49:
         8d:8e:45:32:3f:5e:d7:45:58:4c:96:bb:05:1a:1b:f6:6f:24:
         84:48:df:5b:a4:e4:89:69:1a:57:d7:56:31:11:98:4d:37:53:
         6c:3b:51:32:1f:d9:50:32:91:c0:26:d7:8a:3f:cf:5f:73:c4:
         21:fe:3e:e8:a1:f8:ab:50:2a:f3:aa:2d:21:fd:48:6c:b6:f6:
         b3:5c:c6:75:e5:b6:07:0c:56:d2:03:c7:01:e6:4a:a0:5c:02:
         a7:f0:45:5e:0c:3a:7d:fa:95:2a:bc:89:eb:57:1c:2f:b7:4f:
         f9:93:ac:a4:7e:b0:d7:29:76:36:8d:5f:88:3d:a8:de:72:69:
         d1:46:3d:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 18:38:53 2026 by rpki-client