Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1c1f8562-35e5-3180-b4df-e4605ff06b9d.roa
File:                     1c1f8562-35e5-3180-b4df-e4605ff06b9d.roa (raw, json)
Hash identifier:          6qxHQ48UodyDwbAS8elwwJBo021aopS3qktM5EyrPQg=
Subject key identifier:   28:3F:42:12:1F:2B:79:68:24:3A:28:16:34:C6:04:CC:B1:E7:80:7A
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584EA788894168AC71F8405CCAC0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1c1f8562-35e5-3180-b4df-e4605ff06b9d.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     7029
IP address blocks:        173.186.236.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:89:41:68:ac:71:f8:40:5c:ca:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=e97cdafd-e0d8-4c38-9d68-1bbb58250145
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:38:68:08:8a:62:d4:19:76:2c:23:4d:73:a3:
                    de:f3:b9:5e:7e:4c:86:07:52:ac:5a:02:a6:9b:52:
                    15:61:86:db:1d:4a:ed:5b:b8:1c:20:1f:d0:d9:54:
                    ae:cd:0f:85:1a:0e:23:79:0b:df:a2:66:01:7a:54:
                    20:87:1e:c6:48:fb:b5:e8:d2:df:ea:a0:30:a0:b4:
                    6a:e5:f3:10:28:43:c0:61:f1:52:08:10:40:93:9d:
                    c6:56:16:dc:1f:18:e9:3d:2a:96:46:b2:e3:35:d3:
                    fb:93:c6:29:1f:d5:a8:e7:ec:ac:d1:31:c0:82:89:
                    08:7c:b5:23:49:5a:eb:1c:13:37:ff:dc:81:99:e7:
                    14:a9:10:21:79:e9:87:41:51:e0:80:e7:24:be:b4:
                    4c:91:e6:64:98:2e:20:fb:a6:ea:7e:d5:c9:c2:26:
                    2f:b7:30:88:d4:7d:79:39:34:30:0c:21:7e:83:55:
                    b3:3b:f7:b1:85:d8:d2:d1:8e:c4:76:ba:83:2c:47:
                    be:76:5a:f5:5a:2c:90:7d:c7:2c:87:e3:1e:1d:a7:
                    0e:10:69:56:11:0c:50:de:e4:ad:77:ac:41:d4:5c:
                    03:a2:bc:6e:73:a1:f0:e0:eb:41:f8:82:90:11:b1:
                    76:44:8e:58:d2:8e:e1:41:02:42:bf:d2:a9:29:b8:
                    e6:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:3F:42:12:1F:2B:79:68:24:3A:28:16:34:C6:04:CC:B1:E7:80:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1c1f8562-35e5-3180-b4df-e4605ff06b9d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.186.236.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:0d:24:86:8d:0c:c0:d6:43:e1:11:01:5c:9f:80:b6:0c:59:
         67:42:4c:0c:da:41:2c:5b:97:d6:f7:03:ce:0e:13:f7:09:5b:
         62:52:b9:9c:87:a7:8b:d5:8b:81:14:ee:9e:46:b8:d5:80:5a:
         92:20:29:2a:53:4b:9a:e8:1f:f5:cd:d8:f5:91:27:88:a5:f4:
         eb:1c:00:23:52:3a:92:e3:3f:44:df:f3:c5:40:a2:0b:60:80:
         6c:bb:d7:59:65:9e:7c:73:4f:16:dd:5a:83:18:b1:52:bc:52:
         27:58:4b:d8:e4:e5:38:87:e1:ff:f2:41:d8:ef:16:4f:b7:5a:
         07:5f:11:39:82:77:62:48:6b:86:ce:e3:b2:ee:4e:f8:93:c9:
         bd:2a:fc:6a:12:a1:17:57:31:4f:b4:b8:5b:29:c2:b3:b1:4c:
         a2:96:e3:f3:5b:f8:1f:fd:a4:69:66:6f:32:59:0e:70:97:b9:
         34:6f:0b:fc:a0:a9:93:3e:e2:50:07:72:0a:38:d4:52:17:f3:
         a0:4c:3b:36:bd:21:ba:64:aa:b6:a0:6f:a2:e8:a9:ac:6b:6a:
         61:47:01:94:59:9c:c7:0b:25:1f:86:0d:c3:66:a9:a1:d2:a4:
         cd:73:da:c2:69:9b:55:fd:c7:56:8c:78:f1:24:ac:2d:52:de:
         52:82:62:46
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6niIlBaKxx+EBcysAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
ZTk3Y2RhZmQtZTBkOC00YzM4LTlkNjgtMWJiYjU4MjUwMTQ1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8jhoCIpi1Bl2LCNNc6Pe87lefkyGB1KsWgKm
m1IVYYbbHUrtW7gcIB/Q2VSuzQ+FGg4jeQvfomYBelQghx7GSPu16NLf6qAwoLRq
5fMQKEPAYfFSCBBAk53GVhbcHxjpPSqWRrLjNdP7k8YpH9Wo5+ys0THAgokIfLUj
SVrrHBM3/9yBmecUqRAheemHQVHggOckvrRMkeZkmC4g+6bqftXJwiYvtzCI1H15
OTQwDCF+g1WzO/exhdjS0Y7EdrqDLEe+dlr1WiyQfccsh+MeHacOEGlWEQxQ3uSt
d6xB1FwDorxuc6Hw4OtB+IKQEbF2RI5Y0o7hQQJCv9KpKbjmZwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCg/QhIfK3loJDooFjTGBMyx54B6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMWMxZjg1NjItMzVlNS0z
MTgwLWI0ZGYtZTQ2MDVmZjA2YjlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrbrsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFUNJIaNDMDWQ+ERAVyfgLYMWWdCTAzaQSxbl9b3A84OE/cJW2JSuZyH
p4vVi4EU7p5GuNWAWpIgKSpTS5roH/XN2PWRJ4il9OscACNSOpLjP0Tf88VAogtg
gGy711llnnxzTxbdWoMYsVK8UidYS9jk5TiH4f/yQdjvFk+3WgdfETmCd2JIa4bO
47LuTviTyb0q/GoSoRdXMU+0uFspwrOxTKKW4/Nb+B/9pGlmbzJZDnCXuTRvC/yg
qZM+4lAHcgo41FIX86BMOza9Ibpkqragb6LoqaxramFHAZRZnMcLJR+GDcNmqaHS
pM1z2sJpm1X9x1aMePEkrC1S3lKCYkY=
-----END CERTIFICATE-----
Generated at Thu Aug 27 09:47:25 2026 by rpki-client