Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/12f6ec73-a984-3a93-9e1b-848fb948dd73.roa
File:                     12f6ec73-a984-3a93-9e1b-848fb948dd73.roa (raw, json)
Hash identifier:          Zj4h1vZrwl0wVmxlHzhppJKu2DgzuX9/gW2UXMh7mzE=
Subject key identifier:   DD:87:EE:AD:D8:84:F3:8E:1F:20:DA:6D:46:14:4A:BE:CF:E4:06:30
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584F7A50208DF808FEB8A6027200
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/12f6ec73-a984-3a93-9e1b-848fb948dd73.roa
Signing time:             Mon 12 Oct 2026 13:00:12 +0000
ROA not before:           Mon 12 Oct 2026 13:00:12 +0000
ROA not after:            Sun 10 Jan 2027 14:00:12 +0000
asID:                     7029
IP address blocks:        75.90.244.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7a:50:20:8d:f8:08:fe:b8:a6:02:72:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Oct 12 13:00:12 2026 GMT
            Not After : Jan 10 14:00:12 2027 GMT
        Subject: CN=b094a3ff-03c9-45eb-affd-2c4b492503e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:ec:03:b2:3c:7c:16:67:9c:96:85:bc:c9:10:
                    27:d3:fd:13:d2:3e:71:8b:1e:de:65:a9:02:72:50:
                    1d:19:22:82:5e:ed:2a:36:ce:40:5f:a1:14:2e:78:
                    31:c1:d2:ea:eb:34:ec:be:bc:d4:22:c5:18:a2:df:
                    a3:6f:05:b5:b4:c5:9f:18:3e:8f:e2:e1:88:80:22:
                    80:b2:de:9e:3a:20:a7:04:ef:2d:26:85:07:5e:ea:
                    b6:3b:3c:54:4d:3e:9b:f5:e8:74:55:ef:78:9e:65:
                    13:67:fa:c2:3c:7e:a3:85:d8:2e:16:f9:62:77:fd:
                    14:48:70:0a:fc:32:cd:2c:a2:72:a2:bc:57:4e:4b:
                    56:d9:6a:4a:5c:cb:c5:09:a2:e3:f0:07:8f:90:04:
                    95:d8:5c:6e:57:c1:6b:40:43:92:b9:db:1f:6e:ed:
                    d9:3e:a6:a6:c1:1d:70:5b:10:88:42:46:87:24:56:
                    32:90:3c:43:2d:57:e9:75:09:c1:df:b2:ad:b5:59:
                    c3:c4:6b:46:33:ae:e1:a1:ba:48:95:bb:73:aa:46:
                    fa:5a:fc:79:4d:2b:43:7f:1c:91:95:f2:da:5c:67:
                    10:5b:7c:dc:82:0d:60:e1:09:44:f3:a3:ff:3d:d4:
                    bc:df:af:ec:f6:fb:7d:47:02:7a:60:b2:51:5a:5e:
                    c3:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:87:EE:AD:D8:84:F3:8E:1F:20:DA:6D:46:14:4A:BE:CF:E4:06:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/12f6ec73-a984-3a93-9e1b-848fb948dd73.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.90.244.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:ee:5a:a8:9b:c2:a4:5a:fb:2c:67:61:47:94:19:ee:02:ce:
         58:a8:95:92:16:bd:8d:90:cf:1f:85:1f:aa:8d:a2:29:73:88:
         24:41:73:8e:7a:f5:25:d5:1b:a5:22:94:db:30:e1:c4:e6:70:
         f9:a2:0c:d6:75:04:29:59:64:5a:46:db:e3:1f:3e:cf:7e:0e:
         55:81:21:cb:76:4e:b2:9a:d5:7f:f8:5a:dd:84:c0:3b:21:80:
         d7:33:dc:e1:0b:8f:ff:8b:6d:cc:f7:93:d8:f5:ee:34:c8:ab:
         e8:ba:15:d1:e8:7c:65:e7:19:63:37:6c:c4:f4:ba:8d:c7:65:
         29:16:43:f0:16:4b:d7:39:2b:52:01:b5:0f:46:67:77:7c:8b:
         7a:80:d6:1c:55:b6:34:a2:b6:9e:8d:63:56:15:52:3f:05:b6:
         dc:5c:17:e2:24:69:7b:41:5b:51:0a:1f:94:71:9d:62:52:2b:
         bf:44:16:2c:ff:3e:86:ab:24:82:0d:bd:01:f6:7a:3a:16:4c:
         72:d7:03:64:ce:27:ca:91:0c:43:66:e1:d8:b5:96:e2:69:5d:
         8a:75:49:f9:39:a1:c8:59:d5:c0:68:07:dc:85:28:fe:67:08:
         11:5d:3e:c3:1f:ce:d4:54:2f:d7:45:fc:d6:1a:75:e5:d7:8b:
         80:44:7d:eb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE96UCCN+Aj+uKYCcgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTI2MTAxMjEzMDAxMloXDTI3MDExMDE0MDAxMlowLzEtMCsGA1UEAxMk
YjA5NGEzZmYtMDNjOS00NWViLWFmZmQtMmM0YjQ5MjUwM2UxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgewDsjx8FmecloW8yRAn0/0T0j5xix7eZakC
clAdGSKCXu0qNs5AX6EULngxwdLq6zTsvrzUIsUYot+jbwW1tMWfGD6P4uGIgCKA
st6eOiCnBO8tJoUHXuq2OzxUTT6b9eh0Ve94nmUTZ/rCPH6jhdguFvlid/0USHAK
/DLNLKJyorxXTktW2WpKXMvFCaLj8AePkASV2FxuV8FrQEOSudsfbu3ZPqamwR1w
WxCIQkaHJFYykDxDLVfpdQnB37KttVnDxGtGM67hobpIlbtzqkb6Wvx5TStDfxyR
lfLaXGcQW3zcgg1g4QlE86P/PdS836/s9vt9RwJ6YLJRWl7D5QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFN2H7q3YhPOOHyDabUYUSr7P5AYwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMTJmNmVjNzMtYTk4NC0z
YTkzLTllMWItODQ4ZmI5NDhkZDczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCS1r0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEzuWqibwqRa+yxnYUeUGe4CzliolZIWvY2Qzx+FH6qNoilziCRBc456
9SXVG6UilNsw4cTmcPmiDNZ1BClZZFpG2+MfPs9+DlWBIct2TrKa1X/4Wt2EwDsh
gNcz3OELj/+Lbcz3k9j17jTIq+i6FdHofGXnGWM3bMT0uo3HZSkWQ/AWS9c5K1IB
tQ9GZ3d8i3qA1hxVtjSitp6NY1YVUj8FttxcF+IkaXtBW1EKH5RxnWJSK79EFiz/
PoarJIINvQH2ejoWTHLXA2TOJ8qRDENm4di1luJpXYp1Sfk5ochZ1cBoB9yFKP5n
CBFdPsMfztRUL9dF/NYadeXXi4BEfes=
-----END CERTIFICATE-----
Generated at Tue Oct 13 06:22:03 2026 by rpki-client