Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8f35530c-97c7-4e60-9a44-86cf5b7715a2/fb908917-c491-34f1-b319-3e29a99f6486.roa
File:                     fb908917-c491-34f1-b319-3e29a99f6486.roa (raw, json)
Hash identifier:          PZ1yURU78MIiWjV70Zqebq5kvKOg4g/cxWcAJrqN0lw=
Subject key identifier:   C9:32:BC:72:25:5B:D3:E1:25:61:9D:C7:6D:15:1A:15:1F:F1:86:C5
Certificate issuer:       /CN=8f35530c-97c7-4e60-9a44-86cf5b7715a2
Certificate serial:       010D0C9F4328584EB9AC4D9166B57932FE8678C0
Authority key identifier: 5F:80:7A:B7:8E:C5:D7:FE:41:53:3E:67:5D:7F:29:6E:5F:EE:1B:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8f35530c-97c7-4e60-9a44-86cf5b7715a2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8f35530c-97c7-4e60-9a44-86cf5b7715a2/fb908917-c491-34f1-b319-3e29a99f6486.roa
Signing time:             Tue 04 Aug 2026 13:00:12 +0000
ROA not before:           Tue 04 Aug 2026 13:00:12 +0000
ROA not after:            Mon 02 Nov 2026 14:00:12 +0000
asID:                     33553
IP address blocks:        199.191.49.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8f35530c-97c7-4e60-9a44-86cf5b7715a2/8f35530c-97c7-4e60-9a44-86cf5b7715a2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8f35530c-97c7-4e60-9a44-86cf5b7715a2/8f35530c-97c7-4e60-9a44-86cf5b7715a2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8f35530c-97c7-4e60-9a44-86cf5b7715a2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b9:ac:4d:91:66:b5:79:32:fe:86:78:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f35530c-97c7-4e60-9a44-86cf5b7715a2
        Validity
            Not Before: Aug  4 13:00:12 2026 GMT
            Not After : Nov  2 14:00:12 2026 GMT
        Subject: CN=7f39a061-5da1-438c-8bd1-0fbc69d4dce3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:b5:7f:64:52:d0:4e:39:81:5a:49:9d:b1:4f:
                    37:c2:40:94:57:3e:c7:4c:5b:c3:36:6d:e4:8c:7b:
                    a4:40:51:c9:11:e8:6d:46:61:c7:08:2f:e9:14:e6:
                    1b:82:f8:0e:0b:51:ac:3d:a9:4a:70:f2:9d:4e:f7:
                    75:8c:3b:82:12:da:ee:e9:06:5e:84:a1:b0:78:31:
                    78:9d:4e:92:2c:2f:26:37:c5:d0:48:b6:57:53:66:
                    8f:df:b5:e7:b4:9b:4b:0d:aa:77:d0:0f:e0:89:b7:
                    46:a7:ae:8e:e7:8c:b2:0f:5a:07:8d:12:31:ad:cd:
                    cd:92:05:74:90:4a:c0:3c:7a:72:2c:7c:f5:41:c4:
                    8e:bc:d9:3e:dc:8d:2a:c0:11:08:76:7b:6a:b2:dc:
                    9b:91:21:29:54:6a:ae:a7:95:49:63:59:73:11:7f:
                    b3:6e:25:33:b3:a4:f9:23:da:ab:0d:c7:6e:1d:43:
                    69:6c:55:c5:77:10:d9:32:06:2b:b8:78:e1:16:45:
                    d2:3a:22:af:1e:e1:7a:7a:e6:b5:ed:03:fd:f8:11:
                    89:e2:42:6d:52:a0:16:6e:de:29:21:ba:e5:89:cd:
                    3f:31:80:67:68:f4:0b:7c:ef:76:00:bd:8f:f8:c9:
                    fc:16:16:d3:6a:7e:f9:18:7e:32:8a:b5:23:52:aa:
                    35:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:32:BC:72:25:5B:D3:E1:25:61:9D:C7:6D:15:1A:15:1F:F1:86:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8f35530c-97c7-4e60-9a44-86cf5b7715a2/fb908917-c491-34f1-b319-3e29a99f6486.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8f35530c-97c7-4e60-9a44-86cf5b7715a2/8f35530c-97c7-4e60-9a44-86cf5b7715a2.crl

            X509v3 Authority Key Identifier:
                keyid:5F:80:7A:B7:8E:C5:D7:FE:41:53:3E:67:5D:7F:29:6E:5F:EE:1B:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8f35530c-97c7-4e60-9a44-86cf5b7715a2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.191.49.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:e6:d6:e1:9b:0d:12:27:23:2a:b0:21:e5:07:44:94:43:90:
         e0:b3:c9:1b:44:8c:ad:76:3d:a0:07:a2:38:a9:cc:9a:c6:23:
         f5:1d:04:ed:a8:e3:b7:0e:2d:94:9b:78:0f:fa:b8:cd:8b:f0:
         28:d5:43:8d:01:e4:82:03:2a:f0:06:7c:86:fb:59:a3:46:bc:
         25:52:4d:a8:6c:f4:c2:d3:01:34:6e:79:98:bd:98:4b:78:e6:
         74:38:f3:2e:2f:31:34:88:e3:be:30:19:17:56:3f:07:d2:c3:
         42:47:64:50:6f:0e:40:5c:38:56:f9:f3:8a:ff:df:48:f0:ea:
         b6:39:3e:c1:d2:5a:b6:27:72:6b:a1:8b:c6:5f:81:3a:d8:bb:
         d0:6c:88:e4:9e:4b:6b:c0:37:a1:cb:0c:f8:91:89:af:02:d9:
         9d:38:63:ea:4d:e6:20:5a:b8:75:f2:a8:49:3c:92:4a:04:dc:
         e2:4f:2c:81:8b:a6:18:07:e6:68:2a:ac:4e:3e:8e:19:f7:0b:
         b3:a5:81:01:a9:dd:20:55:57:3d:7b:93:71:f1:71:1f:66:1f:
         ff:d1:a0:78:c2:06:80:04:ea:99:83:43:55:1a:82:a2:0d:38:
         ab:d6:64:6d:3a:06:2d:2c:5d:8e:81:14:c1:35:0a:fa:d0:a4:
         8f:37:8a:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 02:49:18 2026 by rpki-client