Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/49c7194d-f25f-3336-9fc3-6aecc66d3ae6.roa
File:                     49c7194d-f25f-3336-9fc3-6aecc66d3ae6.roa (raw, json)
Hash identifier:          vTe0pQpDGUdjsJLmzr1Pgrcymcwo3cxqDwWzguWfG/4=
Subject key identifier:   15:CB:0C:1D:75:22:D3:11:79:2D:2C:9F:85:B7:B4:6F:95:02:90:17
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584F549D61D5089267D854465DA0
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/49c7194d-f25f-3336-9fc3-6aecc66d3ae6.roa
Signing time:             Tue 29 Sep 2026 01:00:12 +0000
ROA not before:           Tue 29 Sep 2026 01:00:12 +0000
ROA not after:            Mon 28 Dec 2026 02:00:12 +0000
asID:                     7922
IP address blocks:        209.101.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:54:9d:61:d5:08:92:67:d8:54:46:5d:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Sep 29 01:00:12 2026 GMT
            Not After : Dec 28 02:00:12 2026 GMT
        Subject: CN=7477f3b6-d5ef-4aae-8174-cc59deb44870
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:34:c1:3e:37:fd:7a:c2:a3:c9:49:bf:32:ab:
                    fd:93:f0:7b:12:0d:12:7a:f5:15:6c:8b:f6:2d:56:
                    15:f8:cb:9f:51:44:43:d9:c6:ba:44:04:40:de:07:
                    4c:44:2c:ed:91:e3:b1:cc:c4:73:71:72:b2:7a:58:
                    ba:0b:8e:4b:94:f5:73:c2:2d:a2:55:8c:6a:ef:1f:
                    b5:26:e2:e5:e5:38:64:4c:25:04:de:08:dc:ea:a3:
                    ce:48:5a:c8:f8:67:36:a0:be:a8:c4:2a:5f:cc:73:
                    a8:b1:cb:65:df:9c:91:53:c2:b2:ac:8c:c9:4d:8a:
                    11:8c:78:97:a9:aa:ba:3b:9b:5b:7c:b3:b1:a7:4b:
                    fa:a9:0f:92:1a:87:f1:be:9e:d8:d6:ba:4c:cd:ca:
                    ee:9c:8c:1f:a5:8e:a1:b2:a9:9f:74:7e:27:4a:65:
                    3d:b4:a2:cb:ff:63:7c:67:d0:e1:79:36:60:6f:fd:
                    1c:91:7a:d3:d6:6e:e5:57:96:a0:99:27:8e:69:d4:
                    11:d3:c2:b7:93:68:db:a3:49:15:91:73:b8:ac:6e:
                    02:84:4b:cd:61:af:0e:bb:b3:02:21:b6:b0:47:e8:
                    df:e0:ac:57:b6:02:d0:2c:6c:b5:3e:03:d3:69:5a:
                    f1:c9:77:a7:96:db:c3:9f:20:87:2f:ef:48:8c:dc:
                    ac:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:CB:0C:1D:75:22:D3:11:79:2D:2C:9F:85:B7:B4:6F:95:02:90:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/49c7194d-f25f-3336-9fc3-6aecc66d3ae6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.101.250.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:7d:eb:e6:a6:42:82:ce:fd:e1:6b:1f:23:70:71:70:52:89:
         17:fe:bf:32:4c:50:5f:4a:6e:a6:78:b0:5a:b7:16:d4:f7:3c:
         b3:72:5e:32:31:f5:be:b8:ae:61:48:57:6a:42:cb:85:da:06:
         2d:68:4f:a7:48:25:81:2f:98:47:71:e8:92:17:3d:f9:f5:6a:
         06:70:f4:4f:3e:fd:03:db:7a:cf:7e:60:a5:f6:18:30:58:af:
         43:68:a8:4c:06:00:e6:69:62:46:16:2d:48:6e:6c:fe:3d:a4:
         94:cb:1c:54:79:a8:b2:a1:cd:5f:0a:22:62:7b:73:1a:8e:eb:
         cd:b9:6a:f7:d7:55:71:f7:96:57:b4:32:17:f4:ae:f8:7a:29:
         dc:75:8b:38:31:a3:76:94:e0:ba:97:75:65:0d:8c:72:45:09:
         28:09:2b:be:0b:f8:40:d4:4e:05:e3:77:8c:9e:f1:3d:68:89:
         da:09:6e:17:65:28:45:e9:31:b5:e2:4f:6c:ec:68:28:f5:2f:
         a2:a6:fd:17:cf:6c:29:78:38:22:ab:7e:3f:fc:93:3c:26:fd:
         f1:7f:e9:c2:1b:f4:4c:27:af:fc:de:96:c3:a9:cc:ed:34:7c:
         d7:e1:d6:e8:92:01:91:d0:19:53:ec:0e:e7:33:35:72:42:44:
         a8:6c:4c:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 16:40:29 2026 by rpki-client