Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d0ed1e6e-cd53-336b-ade0-c38427c13588.roa
File:                     d0ed1e6e-cd53-336b-ade0-c38427c13588.roa (raw, json)
Hash identifier:          js7e7v8um15CVHFJ6haqTZ0pZ1MFZauOJR8eRwnGN3w=
Subject key identifier:   A8:8E:D2:87:68:E1:19:32:77:21:C6:02:55:48:87:73:28:C2:97:F3
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584E104F30CD09B5335A81866F00
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d0ed1e6e-cd53-336b-ade0-c38427c13588.roa
Signing time:             Thu 04 Jun 2026 21:00:12 +0000
ROA not before:           Thu 04 Jun 2026 21:00:12 +0000
ROA not after:            Wed 02 Sep 2026 21:00:12 +0000
asID:                     7029
IP address blocks:        75.89.210.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:10:4f:30:cd:09:b5:33:5a:81:86:6f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Jun  4 21:00:12 2026 GMT
            Not After : Sep  2 21:00:12 2026 GMT
        Subject: CN=a3251e91-9182-46a4-aa20-bc8b2a83f155
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:72:58:cd:b6:d8:50:89:54:1c:0e:9f:5b:d9:
                    8f:61:d1:b1:55:b2:42:a8:ae:1b:db:f7:9c:27:e0:
                    25:63:6a:3e:91:36:b4:c1:96:db:33:69:a4:08:a5:
                    da:93:3c:66:d6:af:24:13:30:5f:77:66:02:28:e3:
                    39:55:fd:b4:75:a5:41:ed:e7:37:50:32:97:e2:e9:
                    00:62:7b:97:06:11:11:1f:5a:34:47:31:22:10:80:
                    25:47:3f:99:f3:98:2c:2a:29:7b:43:af:42:88:57:
                    b2:dc:e5:97:62:27:09:70:72:cf:b3:49:60:1a:9e:
                    90:63:7b:82:9a:c2:83:dc:0e:50:0a:60:e1:64:ae:
                    1c:0e:c7:55:a5:9a:97:0a:8d:a0:82:dc:d8:d0:79:
                    4b:1d:87:32:a8:4a:4e:ab:e8:cc:e5:20:e1:1a:ad:
                    fe:24:7c:b6:47:84:bf:e2:a9:1d:8a:6d:b2:04:63:
                    ed:8c:f2:2b:a8:27:3f:60:23:90:00:b5:c2:3c:4d:
                    f3:35:56:da:ac:02:b7:e2:14:7f:c2:52:d9:3e:79:
                    bc:89:9f:20:48:32:f7:34:25:ce:81:7a:d8:f8:9d:
                    3f:58:52:d2:6c:d8:c1:b8:bd:1c:db:79:d3:0c:85:
                    9c:a7:66:a0:28:10:7c:97:65:8c:84:44:bc:78:d0:
                    8e:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:8E:D2:87:68:E1:19:32:77:21:C6:02:55:48:87:73:28:C2:97:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d0ed1e6e-cd53-336b-ade0-c38427c13588.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.89.210.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:be:5e:51:66:b3:a3:dc:02:e8:cc:f9:24:ed:77:be:d0:6d:
         26:a5:67:ca:eb:99:f1:e8:e4:a2:8a:d9:74:91:dc:fd:5a:a6:
         8d:97:f5:3c:28:c1:9b:96:91:3b:27:db:ca:19:61:d5:fc:32:
         1f:c9:35:3d:47:0a:f3:27:3f:b7:d4:a9:a5:a3:39:63:ef:80:
         4d:fd:72:46:a7:ba:0b:8d:af:51:f0:12:0d:6a:ca:a2:02:f9:
         9b:76:af:9f:48:a9:c5:e8:b9:d5:a7:30:72:58:d9:c1:0e:c0:
         bc:ae:57:92:98:62:65:13:ca:75:68:8e:11:44:f2:be:77:a6:
         bc:ac:44:36:fd:99:d7:33:7b:b5:cc:38:0e:d5:57:cc:39:8c:
         ae:02:a2:03:b1:ec:e1:dd:56:e4:71:15:e5:b8:04:53:6d:c9:
         fc:0e:20:aa:e7:af:3b:ce:d0:74:47:f2:3e:60:f1:a4:49:06:
         a5:d6:11:15:ab:d4:43:eb:82:e3:eb:19:a8:08:91:55:da:dd:
         6d:d2:eb:f6:2f:63:f7:d2:47:8b:11:6b:cb:47:9a:ad:14:2e:
         c2:76:74:71:60:5b:bb:57:fc:79:c3:5b:d7:cb:10:c2:d4:a6:
         10:fd:8b:df:db:6b:d8:0a:c4:6a:01:6c:e4:85:f9:6a:34:74:
         e3:a2:d6:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:35:01 2026 by rpki-client