Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1424321f-7c68-34dd-a645-963575b3f3f1.roa
File:                     1424321f-7c68-34dd-a645-963575b3f3f1.roa (raw, json)
Hash identifier:          nrhdVsHl26kXTrS9ecK3vKk3ld1hXQAd9ZNmJw3DRC8=
Subject key identifier:   6A:F1:E9:7C:52:74:C2:95:08:5D:73:F5:18:14:93:E5:8C:36:11:EC
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584E1C9944ACB9BA6925B92C6B00
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1424321f-7c68-34dd-a645-963575b3f3f1.roa
Signing time:             Tue 09 Jun 2026 06:39:58 +0000
ROA not before:           Tue 09 Jun 2026 06:39:58 +0000
ROA not after:            Mon 07 Sep 2026 06:39:58 +0000
asID:                     7029
IP address blocks:        174.131.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1c:99:44:ac:b9:ba:69:25:b9:2c:6b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Jun  9 06:39:58 2026 GMT
            Not After : Sep  7 06:39:58 2026 GMT
        Subject: CN=79d83f01-2a44-4e45-94f9-bba882c7f444
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:92:11:b8:38:4b:e4:f2:d9:20:7b:e6:87:22:
                    06:24:a0:f6:91:7a:2a:46:d2:12:cb:b6:42:7e:b0:
                    6f:1b:de:e7:5a:94:d5:75:22:7e:10:bd:82:ed:b6:
                    d4:19:70:37:e1:5b:29:dd:4b:ef:a8:e4:ad:a9:9c:
                    a6:29:bb:d3:47:e0:19:b2:ec:9e:ce:62:75:9c:f0:
                    a0:38:d4:d6:2e:d4:2b:87:cc:1d:97:b2:1b:45:b8:
                    4d:ba:bf:7c:71:e2:76:33:4d:b0:75:1d:1c:39:d3:
                    0f:39:14:8e:4d:76:1a:9c:cf:dc:65:c8:c5:c3:98:
                    9e:de:40:0b:94:25:24:0b:d4:d4:f2:03:ff:76:68:
                    6f:0a:3f:b2:40:fc:d8:db:01:65:16:cd:ed:88:82:
                    30:51:fe:80:dc:4f:c0:bb:df:92:57:42:7c:27:dc:
                    29:c1:ad:16:f2:f6:70:d2:15:2c:cf:9d:2f:32:49:
                    03:5c:e1:ba:68:19:fb:ad:a6:6d:8f:7c:b2:dd:ce:
                    68:51:4f:fc:e3:76:d7:14:1f:c9:9c:1c:09:1b:46:
                    c6:9b:1f:5a:70:11:2c:3c:a8:8f:78:ea:b3:f6:13:
                    e0:59:94:e4:87:3f:57:dc:40:e3:67:0f:e6:18:0c:
                    60:06:83:6f:b2:6a:5e:ff:fd:72:06:88:eb:69:b2:
                    7c:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:F1:E9:7C:52:74:C2:95:08:5D:73:F5:18:14:93:E5:8C:36:11:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1424321f-7c68-34dd-a645-963575b3f3f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.131.216.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:81:65:86:04:8c:eb:5f:b4:56:b0:1e:33:84:54:e2:c0:5d:
         ee:16:36:76:d3:59:6e:0a:5c:44:e7:6a:7b:9a:6a:9e:12:f7:
         29:ff:98:1f:3e:a4:3f:2b:12:e6:f8:db:1a:75:0f:7c:21:d0:
         ca:b0:9c:d0:33:12:c6:41:fe:96:92:ab:c1:43:d5:8b:3f:37:
         86:16:1b:83:0a:c4:f7:6a:1e:9f:95:48:09:91:70:5f:9d:d7:
         7d:f4:e3:2d:53:02:b2:47:10:9c:9c:e9:28:0b:7a:90:f2:1b:
         5c:79:10:83:fd:c0:33:38:93:0b:6b:5a:e4:7a:09:f7:6c:5c:
         be:72:c2:6a:ac:6d:90:58:c2:bd:2a:b2:b5:05:5a:e0:00:70:
         b0:9c:6c:56:18:48:d3:9e:c0:e4:0b:15:a6:34:64:42:d2:86:
         da:f3:34:4e:e9:52:e2:22:00:00:ec:25:b4:88:66:ee:fb:f3:
         b7:dc:a1:98:fe:df:0c:87:b0:dc:e0:4f:a1:a6:26:3f:31:40:
         30:84:6b:67:aa:ee:5d:73:dd:2e:f6:ff:3e:02:80:97:e0:0e:
         ad:09:16:db:15:b1:9a:8a:e7:5c:d0:6c:a4:d5:39:69:66:4a:
         63:d1:dd:1e:36:13:ae:e4:fd:bd:b9:cb:0d:c1:0f:d8:af:76:
         6b:a4:af:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:42:28 2026 by rpki-client