Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/bb31b58c-e150-33f4-ac15-3fcb02bcc54a.roa
File:                     bb31b58c-e150-33f4-ac15-3fcb02bcc54a.roa (raw, json)
Hash identifier:          4C3fCfBIRsR6OBfiQyCmW1kAh0/MggjqrheVfMifY9I=
Subject key identifier:   28:80:A4:D3:39:02:FE:93:11:C3:5A:04:74:42:F7:1F:4B:A5:B0:64
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584CE8F7776C9C70A6D912A29F80
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/bb31b58c-e150-33f4-ac15-3fcb02bcc54a.roa
Signing time:             Thu 19 Feb 2026 02:00:32 +0000
ROA not before:           Thu 19 Feb 2026 02:00:32 +0000
ROA not after:            Wed 20 May 2026 01:00:32 +0000
asID:                     7029
IP address blocks:        71.29.132.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e8:f7:77:6c:9c:70:a6:d9:12:a2:9f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Feb 19 02:00:32 2026 GMT
            Not After : May 20 01:00:32 2026 GMT
        Subject: CN=cc79d22c-f160-4f84-8867-241009f4cb23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:99:77:0d:ab:57:0b:67:cd:f3:37:3d:ba:aa:
                    a4:5e:95:e9:fe:74:b6:d9:b0:84:d4:6f:1d:c1:bd:
                    00:71:3f:ae:58:4a:06:cc:c0:ec:39:1e:0d:d5:a2:
                    14:95:41:42:a9:1c:52:f0:42:a9:9e:79:0b:95:1e:
                    67:14:82:ee:81:a6:1e:40:bd:cd:07:10:ba:3a:cc:
                    03:20:d0:7f:c3:49:7d:60:c4:40:54:41:e6:d0:05:
                    e0:1c:2f:29:48:67:6c:76:be:aa:3b:01:07:83:10:
                    2e:76:65:e5:bf:79:fb:c1:e7:80:64:36:d9:70:90:
                    3d:3c:33:7b:fd:31:eb:18:07:4d:0d:6d:d6:7a:0c:
                    93:c7:67:f3:83:ed:06:8c:61:93:4a:6e:e6:f7:00:
                    33:bb:00:7c:6a:1a:63:b4:de:0a:d8:b6:76:83:12:
                    96:90:ae:bf:30:00:6d:87:8c:b3:ef:52:6c:e6:9a:
                    fb:f5:8b:a4:29:8a:e5:48:1e:eb:36:b6:9c:c0:96:
                    62:da:ad:34:6e:e7:20:d2:32:8c:c7:5a:5e:5d:65:
                    73:d6:5a:c6:c5:b7:0f:09:79:ef:37:ab:af:0b:e3:
                    6c:81:39:a8:81:df:b0:b2:29:5e:4f:fe:47:65:7c:
                    f3:d5:bc:77:cf:cb:60:d0:62:7f:3d:e3:97:e2:ae:
                    df:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:80:A4:D3:39:02:FE:93:11:C3:5A:04:74:42:F7:1F:4B:A5:B0:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/bb31b58c-e150-33f4-ac15-3fcb02bcc54a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.29.132.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:b7:1c:cf:f1:10:a6:bc:85:3b:7a:83:4f:54:62:5b:bd:b2:
         8d:c2:78:75:62:68:39:c3:6f:2c:a8:f6:e2:30:80:36:21:27:
         93:18:7f:1d:1c:3e:68:5b:6c:bd:fd:14:79:d1:b5:18:21:16:
         a7:27:fa:77:24:bc:7b:27:c4:11:64:0c:be:51:85:c7:c6:2c:
         b3:a7:00:37:08:72:a6:f3:df:ed:fc:f6:c4:91:6c:b6:5d:0b:
         ec:d5:7c:d9:02:fc:96:e6:e5:3b:f0:e2:47:0c:c9:9e:45:a1:
         85:4a:e1:a3:4f:1f:7f:c9:57:7a:cc:17:ee:56:b2:75:9d:c6:
         af:89:90:63:85:dc:89:18:d0:8b:de:b1:f3:51:9d:73:c7:72:
         2a:cd:2e:d2:cf:67:33:d3:70:3d:ce:01:22:60:d9:54:11:b1:
         92:97:80:8c:64:ad:3e:b7:58:f7:57:3e:4b:56:f6:2b:c5:57:
         0a:2c:b4:fd:39:2c:e8:23:39:1a:21:16:65:e7:f2:ef:37:48:
         25:34:40:99:14:e2:fd:63:8d:c2:09:ef:49:2f:cc:92:eb:d8:
         53:7f:c4:3b:2d:c5:8e:fb:b5:aa:e5:5e:61:79:ce:0d:20:ea:
         13:71:0d:67:7f:a4:23:b1:53:b9:50:fe:2c:65:b7:74:39:da:
         4b:08:56:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:32:03 2026 by rpki-client