Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0d9c751b-5796-3b96-a97b-b6dc33f7b0bd.roa
File:                     0d9c751b-5796-3b96-a97b-b6dc33f7b0bd.roa (raw, json)
Hash identifier:          7s+pQrkzhNXAVNUIMfzvSOruwJj0jmNQ4Uo9Fl0/ZoE=
Subject key identifier:   13:CF:B1:A5:88:22:5C:0F:3F:90:67:7C:B9:3D:3D:0C:2B:95:11:7D
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584EB2B1EE15303B9B9C5FFBF580
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0d9c751b-5796-3b96-a97b-b6dc33f7b0bd.roa
Signing time:             Sun 02 Aug 2026 01:00:11 +0000
ROA not before:           Sun 02 Aug 2026 01:00:11 +0000
ROA not after:            Sat 31 Oct 2026 01:00:11 +0000
asID:                     7029
IP address blocks:        69.66.140.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b2:b1:ee:15:30:3b:9b:9c:5f:fb:f5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Aug  2 01:00:11 2026 GMT
            Not After : Oct 31 01:00:11 2026 GMT
        Subject: CN=4690bab0-b410-411e-8208-4863a0428bb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:99:81:f8:d2:08:90:c0:7d:ff:54:fd:09:28:
                    c3:8f:dd:5f:2a:b4:03:6b:63:79:71:d5:2c:e5:ea:
                    cd:d5:2f:51:8b:34:e0:01:ed:2d:ca:60:46:ae:0f:
                    8a:e2:aa:c1:d2:49:4b:cd:e8:6a:31:bc:66:ed:61:
                    29:bb:22:ee:bf:28:a3:d1:02:f9:7e:9b:b6:88:a6:
                    4c:1a:60:b8:1a:7d:44:40:c9:0f:00:ee:d3:33:e5:
                    b9:78:f8:80:5d:25:8e:e5:31:34:c2:5b:01:e2:b1:
                    55:c7:9c:75:da:fb:90:45:64:8a:1b:6a:92:17:75:
                    3f:42:58:bb:86:f4:7b:e1:c5:d2:c3:71:fe:1a:01:
                    97:d6:03:c7:45:0f:ac:a9:ac:6c:09:50:83:7a:a1:
                    1e:3f:10:57:f2:f0:ff:bf:49:c1:25:b0:29:a0:dc:
                    7c:6e:89:40:40:f4:b2:2d:66:9a:cf:df:ca:34:68:
                    8c:89:77:b9:14:2c:d1:c4:6c:4b:e8:76:3c:ec:67:
                    75:84:1b:d1:39:75:8b:f2:e0:77:27:20:fe:50:30:
                    c5:c8:e2:d5:1d:ff:50:24:eb:18:02:eb:52:cb:08:
                    bd:52:c8:0e:3a:a7:82:87:0a:ad:ec:d2:37:49:69:
                    40:ee:01:ae:f1:c6:ac:af:fc:a3:e5:d2:75:16:9c:
                    0b:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:CF:B1:A5:88:22:5C:0F:3F:90:67:7C:B9:3D:3D:0C:2B:95:11:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0d9c751b-5796-3b96-a97b-b6dc33f7b0bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.66.140.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:28:c2:c9:cd:26:84:1e:8a:b8:36:72:82:04:44:1a:88:d1:
         6c:09:23:c4:04:9d:b4:43:d5:e8:99:62:ff:cb:89:4f:0d:66:
         51:1b:48:30:2a:45:f6:e0:ed:cf:b3:82:30:39:1b:55:ed:94:
         a4:29:52:43:49:0e:17:f0:9d:c7:ad:0c:59:75:78:8f:5d:e4:
         7e:47:3a:17:88:43:97:6a:b2:6d:d2:4b:13:87:c7:36:fc:e8:
         0c:92:7c:b8:1b:97:21:42:34:69:4a:f3:11:4c:5c:1e:ff:47:
         fc:0b:ef:5c:b5:90:3d:e2:86:76:d9:52:7a:75:f6:a9:1b:a4:
         7d:05:9c:1a:bb:75:ee:c7:4e:81:3f:fd:a7:c1:1e:59:3e:90:
         8b:ea:35:46:6c:c5:76:e9:aa:04:cf:24:58:6f:3a:16:76:ee:
         01:cd:95:3b:38:98:e7:3c:ab:5a:65:b8:23:88:c9:35:35:4b:
         7b:41:e5:b5:1c:86:b0:6e:83:11:01:f0:60:93:d9:90:96:0f:
         01:9b:6b:32:91:cd:ee:62:b6:45:6a:aa:0e:89:9d:a3:3f:52:
         4a:72:4e:85:61:3b:e8:a1:18:b5:b6:2a:73:e7:93:d7:21:eb:
         96:ef:86:ab:41:6f:20:77:37:c8:df:d3:91:d7:c7:da:6f:19:
         a7:aa:a8:a1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6yse4VMDubnF/79YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTI2MDgwMjAxMDAxMVoXDTI2MTAzMTAxMDAxMVowLzEtMCsGA1UEAxMk
NDY5MGJhYjAtYjQxMC00MTFlLTgyMDgtNDg2M2EwNDI4YmI3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkpmB+NIIkMB9/1T9CSjDj91fKrQDa2N5cdUs
5erN1S9RizTgAe0tymBGrg+K4qrB0klLzehqMbxm7WEpuyLuvyij0QL5fpu2iKZM
GmC4Gn1EQMkPAO7TM+W5ePiAXSWO5TE0wlsB4rFVx5x12vuQRWSKG2qSF3U/Qli7
hvR74cXSw3H+GgGX1gPHRQ+sqaxsCVCDeqEePxBX8vD/v0nBJbApoNx8bolAQPSy
LWaaz9/KNGiMiXe5FCzRxGxL6HY87Gd1hBvROXWL8uB3JyD+UDDFyOLVHf9QJOsY
AutSywi9UsgOOqeChwqt7NI3SWlA7gGu8casr/yj5dJ1FpwL6wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBPPsaWIIlwPP5BnfLk9PQwrlRF9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMGQ5Yzc1MWItNTc5Ni0z
Yjk2LWE5N2ItYjZkYzMzZjdiMGJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRUKMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEYowsnNJoQeirg2coIERBqI0WwJI8QEnbRD1eiZYv/LiU8NZlEbSDAq
Rfbg7c+zgjA5G1XtlKQpUkNJDhfwncetDFl1eI9d5H5HOheIQ5dqsm3SSxOHxzb8
6AySfLgblyFCNGlK8xFMXB7/R/wL71y1kD3ihnbZUnp19qkbpH0FnBq7de7HToE/
/afBHlk+kIvqNUZsxXbpqgTPJFhvOhZ27gHNlTs4mOc8q1pluCOIyTU1S3tB5bUc
hrBugxEB8GCT2ZCWDwGbazKRze5itkVqqg6JnaM/UkpyToVhO+ihGLW2KnPnk9ch
65bvhqtBbyB3N8jf05HXx9pvGaeqqKE=
-----END CERTIFICATE-----
Generated at Thu Aug 27 15:16:23 2026 by rpki-client