Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7163cc81-5f4e-3b14-85a7-e3fe343f998c.roa
File:                     7163cc81-5f4e-3b14-85a7-e3fe343f998c.roa (raw, json)
Hash identifier:          t9wOgKXDWYden4AK2qXG/8NKKxZ9kt0qtQQ2lQTOMjE=
Subject key identifier:   5E:8B:67:91:10:BC:2A:0A:1B:73:66:D5:E5:B6:73:4C:0C:CC:42:13
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584F11BAA90104C7AB7AC869B640
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7163cc81-5f4e-3b14-85a7-e3fe343f998c.roa
Signing time:             Sat 05 Sep 2026 02:00:17 +0000
ROA not before:           Sat 05 Sep 2026 02:00:17 +0000
ROA not after:            Fri 04 Dec 2026 03:00:17 +0000
asID:                     7029
IP address blocks:        173.213.158.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Sep 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:11:ba:a9:01:04:c7:ab:7a:c8:69:b6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Sep  5 02:00:17 2026 GMT
            Not After : Dec  4 03:00:17 2026 GMT
        Subject: CN=e84e751c-7947-4543-985d-90d43e7c9fa6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:aa:ab:7b:18:8c:dd:07:a4:d3:ef:85:f3:e1:
                    b2:5a:0e:83:74:7c:8b:21:94:a2:e2:3d:d9:da:0f:
                    58:1a:71:c9:3c:be:f3:2f:b6:d2:9b:3b:c3:7f:38:
                    a5:55:a8:06:25:1a:b9:9b:f5:0f:02:da:e0:4f:cd:
                    7c:60:62:34:8a:63:6a:71:47:5c:78:bc:1f:54:ba:
                    34:9b:d1:35:21:32:f2:b9:6b:74:3e:cb:9e:50:16:
                    0e:d7:22:11:26:2c:dd:3f:69:14:55:aa:06:fd:a4:
                    d7:3d:4f:c3:1b:e4:5f:0e:11:90:a3:72:b4:0c:31:
                    0a:8c:06:fa:1c:c6:c2:8c:89:00:d2:a6:81:2f:0d:
                    2c:52:73:93:65:4f:1f:cc:5c:68:14:a0:38:e2:e0:
                    56:82:2e:26:39:03:83:6c:65:52:79:96:4d:10:00:
                    e6:6b:10:f2:96:17:63:a0:e8:c4:9b:32:55:81:88:
                    87:72:bc:9b:c9:2d:73:f9:20:b4:73:08:83:1d:87:
                    79:eb:bf:ca:e4:bc:c5:1c:b7:3f:d1:b4:66:a2:45:
                    cb:d6:4a:94:b8:b5:9f:9b:8e:7c:cf:f6:ff:0f:83:
                    53:44:2c:94:59:32:01:52:61:9e:bc:51:44:e9:28:
                    40:01:73:45:22:dc:44:5d:ff:4f:10:e7:50:b2:e2:
                    43:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:8B:67:91:10:BC:2A:0A:1B:73:66:D5:E5:B6:73:4C:0C:CC:42:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7163cc81-5f4e-3b14-85a7-e3fe343f998c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.213.158.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:b6:b9:23:cc:c9:42:ff:e4:50:e4:ea:12:84:6e:a3:89:c2:
         6f:7a:94:12:73:f2:13:d4:75:c4:c0:f7:89:80:c4:08:18:0c:
         3d:76:2a:12:80:93:09:98:25:28:7f:51:59:72:61:f3:f7:10:
         0a:df:4a:ad:2e:32:76:27:fe:fd:fe:4b:1c:30:20:76:25:d3:
         2d:24:fb:47:92:e2:04:45:15:81:43:cb:ec:10:97:75:1f:6b:
         d8:c5:88:99:4d:e7:a0:1a:4d:16:75:bf:50:d7:a1:66:70:6a:
         b3:d3:b2:ff:fc:8e:41:68:c4:9e:83:64:a5:87:04:b1:39:3e:
         cc:de:92:31:ae:f8:8d:de:15:76:90:97:49:83:04:73:b8:87:
         28:8b:0a:1e:57:78:3c:fb:c2:19:8c:67:63:95:80:16:6f:62:
         7c:73:8d:51:50:5e:96:50:c6:2f:33:5e:be:ab:51:41:90:22:
         81:5b:39:35:3d:64:22:3e:95:66:8f:7c:53:62:97:ab:e6:a2:
         5b:b8:13:4b:cd:09:4b:e8:f7:21:e3:35:ed:3e:60:e1:a6:10:
         42:04:76:57:c3:b2:a1:6a:37:a0:e7:02:dd:63:c7:f6:64:14:
         53:ab:49:6a:40:51:43:af:a7:40:12:19:57:56:35:41:87:5a:
         40:3d:9e:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 21:53:10 2026 by rpki-client