Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7bdd3c11-6583-4dc4-a05b-bbdcdfdcd272/b49d1b93-c2b5-3691-86ae-33c7b9f6e6bf.roa
File:                     b49d1b93-c2b5-3691-86ae-33c7b9f6e6bf.roa (raw, json)
Hash identifier:          nkixN5DvLA76No3Cp1+h368m7eVTcVBVMm91dmPtN70=
Subject key identifier:   E8:AD:FB:CF:5A:27:36:8B:98:49:C3:5C:A5:84:3D:84:3A:1A:32:7F
Certificate issuer:       /CN=7bdd3c11-6583-4dc4-a05b-bbdcdfdcd272
Certificate serial:       010D0C9F4328584EDC91E3F1417B7678E5608610
Authority key identifier: 2A:03:B4:01:A5:51:2C:BF:C3:1B:2E:80:CF:84:43:5F:4A:80:3B:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7bdd3c11-6583-4dc4-a05b-bbdcdfdcd272.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7bdd3c11-6583-4dc4-a05b-bbdcdfdcd272/b49d1b93-c2b5-3691-86ae-33c7b9f6e6bf.roa
Signing time:             Mon 17 Aug 2026 01:00:12 +0000
ROA not before:           Mon 17 Aug 2026 01:00:12 +0000
ROA not after:            Sun 15 Nov 2026 02:00:12 +0000
asID:                     7925
IP address blocks:        129.71.0.0/16 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7bdd3c11-6583-4dc4-a05b-bbdcdfdcd272/7bdd3c11-6583-4dc4-a05b-bbdcdfdcd272.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7bdd3c11-6583-4dc4-a05b-bbdcdfdcd272/7bdd3c11-6583-4dc4-a05b-bbdcdfdcd272.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7bdd3c11-6583-4dc4-a05b-bbdcdfdcd272.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:dc:91:e3:f1:41:7b:76:78:e5:60:86:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bdd3c11-6583-4dc4-a05b-bbdcdfdcd272
        Validity
            Not Before: Aug 17 01:00:12 2026 GMT
            Not After : Nov 15 02:00:12 2026 GMT
        Subject: CN=8e8f702e-69fb-49a6-8588-b539c7f56536
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:2d:63:67:b0:2d:92:f6:38:27:6f:49:51:cb:
                    9d:19:d1:6c:6c:8f:c6:e1:0e:10:92:14:c2:22:fb:
                    b7:45:99:25:39:2f:2d:bd:6f:c4:46:7f:2f:ac:54:
                    c4:4c:c1:b7:67:35:06:2d:f2:94:1a:24:31:e6:69:
                    8e:9e:a3:aa:15:5b:18:be:98:8a:44:2a:f4:d3:7b:
                    d6:63:b6:bc:5a:c5:9d:cf:26:57:ea:bf:d6:22:2f:
                    6a:d9:db:28:f0:da:94:d2:e9:e0:c6:87:ae:d1:07:
                    7d:06:08:ac:b7:dc:06:88:3d:42:11:42:34:17:70:
                    b5:55:e6:ee:ad:49:ff:93:3b:16:9a:89:40:7b:b7:
                    81:d9:6f:b4:fc:27:8e:72:07:f9:4e:0c:11:e5:93:
                    9e:c8:f4:bc:95:d7:0c:f7:7a:51:a6:db:72:f6:5d:
                    ba:87:3e:3b:3c:a7:39:f1:90:6d:cc:cf:09:9c:88:
                    35:8f:ac:70:13:eb:66:55:9b:62:dd:8f:ba:60:09:
                    83:e5:2a:4f:94:da:6d:2f:16:33:ef:4e:f4:e1:98:
                    13:35:92:53:17:aa:91:15:26:07:9d:d3:08:02:3f:
                    d2:4b:22:8e:94:ec:00:95:fe:5f:ff:99:3f:0a:6b:
                    7f:ae:ab:6c:57:74:2c:4f:a7:bb:09:45:fe:38:8a:
                    ce:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:AD:FB:CF:5A:27:36:8B:98:49:C3:5C:A5:84:3D:84:3A:1A:32:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7bdd3c11-6583-4dc4-a05b-bbdcdfdcd272/b49d1b93-c2b5-3691-86ae-33c7b9f6e6bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7bdd3c11-6583-4dc4-a05b-bbdcdfdcd272/7bdd3c11-6583-4dc4-a05b-bbdcdfdcd272.crl

            X509v3 Authority Key Identifier:
                keyid:2A:03:B4:01:A5:51:2C:BF:C3:1B:2E:80:CF:84:43:5F:4A:80:3B:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7bdd3c11-6583-4dc4-a05b-bbdcdfdcd272.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.71.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:4c:9e:ab:93:67:19:0e:b9:c0:50:f1:37:bc:f1:0a:8e:5e:
         77:8e:eb:5c:9d:3b:3a:2f:b3:f7:15:67:32:46:6c:39:97:f3:
         2a:98:ce:30:ef:e3:b3:04:bb:9b:d7:70:4c:10:9c:0b:03:e3:
         9f:6c:29:ed:1b:05:70:ce:a6:82:95:1e:b8:81:3a:21:e7:a9:
         36:cd:2e:92:cc:48:26:bb:45:b3:13:7c:6c:f4:d6:03:8b:ec:
         26:04:da:a5:b7:46:39:8f:5c:4d:0b:b3:88:cd:21:0d:4e:c9:
         a8:34:74:c6:08:e3:d7:81:00:3a:18:57:74:bc:c0:36:a1:9e:
         74:ed:87:f0:16:3a:5a:e2:1f:a9:b6:02:7f:ab:c7:95:fd:0f:
         66:e1:e6:eb:b7:16:80:d8:89:63:41:9c:62:c7:5e:e4:2d:8a:
         2e:28:8e:cd:2b:63:a8:9f:69:6a:a3:b7:9e:92:f7:aa:ac:5e:
         87:36:fa:c9:0f:e3:20:8b:d6:28:29:b7:9a:dd:41:9f:e4:2b:
         ea:c0:80:18:73:33:d1:03:0a:ce:c4:ba:be:09:e8:0c:50:0c:
         53:98:17:a7:0b:18:be:0a:5e:f3:0e:20:d0:9a:ca:bb:06:f2:
         76:d8:80:6c:3e:70:ed:cd:c7:cb:5f:fb:3e:f5:29:12:42:d3:
         68:07:33:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 02:01:46 2026 by rpki-client