Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e06fcac8-fdd3-3542-9d92-e6bb4e0ba89b.roa
File:                     e06fcac8-fdd3-3542-9d92-e6bb4e0ba89b.roa (raw, json)
Hash identifier:          49WSUHk89UN+w4kliIuvF6NOdchpkf8TjtVdCv9eAtA=
Subject key identifier:   E0:47:36:A9:AF:43:F3:B8:69:87:39:FC:05:72:B7:CC:03:AC:C4:3D
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584EA79321795E73517858034000
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e06fcac8-fdd3-3542-9d92-e6bb4e0ba89b.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     7029
IP address blocks:        98.22.64.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:93:21:79:5e:73:51:78:58:03:40:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=98f8981b-ccd1-46c2-9553-6c2685df6e80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:c0:e5:9f:e4:e6:53:00:19:22:b7:34:e9:45:
                    4f:9e:dc:ec:fa:f8:6f:1c:ae:fe:3e:77:e8:36:f8:
                    66:a6:46:bc:49:6e:69:4c:b3:4a:d3:a0:42:92:68:
                    a9:7d:c8:99:25:ba:5a:a5:a4:e0:29:ef:5b:22:cc:
                    79:03:2a:7d:42:9f:b1:ac:b7:5f:14:a6:4f:12:7d:
                    a6:49:e5:df:55:18:82:65:26:6e:e4:b8:ee:30:5e:
                    ca:33:b0:d8:f6:45:14:ee:b8:df:fd:eb:97:b7:7e:
                    c0:5b:96:aa:37:9c:9b:64:64:52:3f:95:70:a8:2a:
                    15:e8:84:dc:72:d6:49:fe:a8:cf:93:35:a2:52:94:
                    fc:6a:60:5b:35:9f:da:8e:34:0b:3b:78:87:6b:38:
                    65:49:b1:2c:a4:2a:52:0d:12:fc:3d:c7:76:c2:ab:
                    50:b6:d5:19:44:ec:56:35:e8:2e:1c:07:cd:9f:57:
                    dd:8d:29:8e:52:a5:5e:6e:20:6e:7e:52:75:99:01:
                    9d:f3:2c:37:79:a1:6b:81:52:76:01:73:d3:52:21:
                    5f:b2:17:b5:c3:dc:1b:90:2a:d2:27:b3:cf:09:24:
                    d5:3c:fa:bf:77:95:d9:1d:bc:87:f4:d9:57:c0:ba:
                    2b:eb:e3:59:db:b3:0b:e2:57:a4:52:c9:3e:dc:60:
                    48:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:47:36:A9:AF:43:F3:B8:69:87:39:FC:05:72:B7:CC:03:AC:C4:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e06fcac8-fdd3-3542-9d92-e6bb4e0ba89b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.22.64.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:35:3e:ae:c4:f2:27:e8:be:b4:61:78:3f:46:33:0a:6e:86:
         65:f6:6e:be:b9:aa:ec:67:65:e9:ab:92:96:b9:b5:04:16:e6:
         89:00:7d:3b:b7:7a:41:8a:3d:7b:d4:b4:00:f9:24:b1:22:e3:
         47:eb:4c:37:68:a2:a4:93:10:40:04:bf:d7:f6:5a:97:7c:b5:
         58:4b:56:77:7b:7e:ef:ac:4d:0f:2a:09:70:35:30:5d:62:01:
         7b:54:ee:0d:d4:b9:8a:7a:21:52:21:c3:73:ee:6b:92:3d:36:
         1c:69:25:01:a9:8e:95:95:d2:d6:35:0a:5a:83:25:e1:50:2e:
         e6:f4:0f:bc:96:23:06:51:d4:a6:67:4a:6b:ce:8c:92:e1:c3:
         ee:d1:fd:a3:a0:d4:14:6c:5f:ec:1a:84:dc:fc:7e:1d:b0:f0:
         ff:61:e3:cc:c0:d0:f7:4a:57:78:79:fd:66:8d:fc:4a:52:c2:
         2f:ff:da:fe:e5:6f:7f:27:d5:61:f9:5e:b6:77:42:d1:56:2c:
         b7:51:ad:65:33:bd:e4:98:86:f7:81:b0:ae:ba:38:8a:d9:d2:
         3b:6b:71:ec:95:5b:21:6e:49:4c:df:b5:01:79:76:9d:f6:60:
         68:e0:2d:8b:c5:90:b5:76:ef:3c:60:ab:7f:9c:bc:1b:a3:cf:
         49:0f:31:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:45:23 2026 by rpki-client