Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3b4b0db6-95d7-3cfd-bab1-8c6d9bce8c09.roa
File:                     3b4b0db6-95d7-3cfd-bab1-8c6d9bce8c09.roa (raw, json)
Hash identifier:          bD97hBknS8F7DkQiQmLZArgJkMvF0qoGY0SQ1oOtS/Q=
Subject key identifier:   C2:1B:9F:E6:D3:FE:60:93:5D:06:7B:D0:88:B7:7B:24:79:5B:9F:87
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584EB2B1EBA4ACC046E9948FFC90
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3b4b0db6-95d7-3cfd-bab1-8c6d9bce8c09.roa
Signing time:             Sun 02 Aug 2026 01:00:11 +0000
ROA not before:           Sun 02 Aug 2026 01:00:11 +0000
ROA not after:            Sat 31 Oct 2026 01:00:11 +0000
asID:                     30288
IP address blocks:        207.106.214.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b2:b1:eb:a4:ac:c0:46:e9:94:8f:fc:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Aug  2 01:00:11 2026 GMT
            Not After : Oct 31 01:00:11 2026 GMT
        Subject: CN=7c5513ee-ea2f-49f6-8569-8cdebe4ee56a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:1b:9e:99:0d:84:12:4c:61:af:f8:f4:cc:e6:
                    d4:16:e7:e0:f9:96:0e:94:1d:6e:d3:10:7b:d5:c2:
                    a3:63:18:86:cd:8a:2d:c8:d8:f1:a2:66:4d:4f:61:
                    ea:c8:df:42:c2:91:74:33:1b:db:c7:fb:df:2c:20:
                    44:01:1d:d3:af:bd:33:23:f5:bc:52:68:eb:ce:d2:
                    8c:c9:b9:b1:5f:50:a1:6d:8c:1e:60:df:10:6a:47:
                    f1:c8:52:56:19:eb:ed:d6:38:6f:12:24:b0:b3:d0:
                    4c:76:fc:d3:13:85:69:9d:c7:49:da:61:f4:10:73:
                    e5:f2:5c:ab:dd:34:cb:b4:a2:bf:5e:ed:c5:19:ae:
                    36:f2:25:a2:d4:89:9a:50:81:67:ae:e2:ca:b1:be:
                    82:98:73:c0:69:97:77:fa:0e:4a:86:03:46:2d:ed:
                    f6:f8:56:2c:51:df:7f:13:3c:f5:bc:7e:5c:ae:98:
                    f9:15:7a:bb:3a:1b:ab:ee:46:8e:01:27:3d:ea:12:
                    3f:32:a8:c3:7e:4d:13:a2:62:46:31:ac:9c:e2:0a:
                    86:c2:da:08:ff:ac:79:3b:57:cc:1b:82:c3:94:78:
                    3b:c3:3a:2c:52:c9:ae:45:c4:1f:31:57:13:8e:2e:
                    ba:4a:99:92:2d:d1:dd:2e:83:b5:d7:30:2f:29:3f:
                    00:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:1B:9F:E6:D3:FE:60:93:5D:06:7B:D0:88:B7:7B:24:79:5B:9F:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3b4b0db6-95d7-3cfd-bab1-8c6d9bce8c09.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.106.214.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:fd:6d:bf:2a:36:4e:0d:b7:07:cc:f0:33:de:40:15:9a:5e:
         9a:aa:f3:be:4b:ec:df:4a:ef:ff:25:af:46:67:e6:10:60:81:
         6b:53:64:be:fb:06:92:fc:c2:7b:a1:43:1b:24:ca:22:4b:c9:
         17:de:1f:0e:18:de:ab:b6:9a:ef:bf:ad:65:2d:ea:33:be:71:
         bf:44:c3:84:99:d4:3f:b5:84:e3:31:1a:64:97:6f:45:8f:c4:
         fd:62:2f:19:0c:da:a7:c1:18:9f:55:ea:09:30:fc:7b:30:9b:
         89:d3:48:93:4a:d2:64:d0:58:60:b5:a1:75:01:aa:ed:1e:89:
         01:9b:e3:17:a9:14:16:60:50:ab:cd:91:31:ad:6b:6a:99:a8:
         9d:86:26:2f:9c:55:1a:e4:69:4f:4a:db:f5:df:c5:75:47:14:
         aa:4f:18:ae:4b:67:b3:b6:c2:e6:e1:16:b3:f1:8c:c3:79:43:
         5f:f1:b9:15:b1:f1:f3:b9:e8:61:7d:2a:47:10:82:88:e1:5a:
         c7:3c:5c:b0:08:ab:ff:18:fb:53:f3:46:f7:7f:af:66:12:37:
         83:b0:dd:98:d1:29:ea:b0:08:9c:9b:7a:e6:4d:0c:b3:54:2d:
         b3:2d:21:fa:f7:5a:e8:2d:cd:c0:70:b3:b4:94:13:1b:5d:ec:
         24:79:b9:19
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6yseukrMBG6ZSP/JAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTI2MDgwMjAxMDAxMVoXDTI2MTAzMTAxMDAxMVowLzEtMCsGA1UEAxMk
N2M1NTEzZWUtZWEyZi00OWY2LTg1NjktOGNkZWJlNGVlNTZhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsxuemQ2EEkxhr/j0zObUFufg+ZYOlB1u0xB7
1cKjYxiGzYotyNjxomZNT2HqyN9CwpF0Mxvbx/vfLCBEAR3Tr70zI/W8UmjrztKM
ybmxX1ChbYweYN8QakfxyFJWGevt1jhvEiSws9BMdvzTE4VpncdJ2mH0EHPl8lyr
3TTLtKK/Xu3FGa428iWi1ImaUIFnruLKsb6CmHPAaZd3+g5KhgNGLe32+FYsUd9/
Ezz1vH5crpj5FXq7Ohur7kaOASc96hI/MqjDfk0TomJGMayc4gqGwtoI/6x5O1fM
G4LDlHg7wzosUsmuRcQfMVcTji66SpmSLdHdLoO11zAvKT8AnwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMIbn+bT/mCTXQZ70Ii3eyR5W5+HMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvM2I0YjBkYjYtOTVkNy0z
Y2ZkLWJhYjEtOGM2ZDliY2U4YzA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz2rWMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACb9bb8qNk4NtwfM8DPeQBWaXpqq875L7N9K7/8lr0Zn5hBggWtTZL77
BpL8wnuhQxskyiJLyRfeHw4Y3qu2mu+/rWUt6jO+cb9Ew4SZ1D+1hOMxGmSXb0WP
xP1iLxkM2qfBGJ9V6gkw/Hswm4nTSJNK0mTQWGC1oXUBqu0eiQGb4xepFBZgUKvN
kTGta2qZqJ2GJi+cVRrkaU9K2/XfxXVHFKpPGK5LZ7O2wubhFrPxjMN5Q1/xuRWx
8fO56GF9KkcQgojhWsc8XLAIq/8Y+1PzRvd/r2YSN4Ow3ZjRKeqwCJybeuZNDLNU
LbMtIfr3WugtzcBws7SUExtd7CR5uRk=
-----END CERTIFICATE-----
Generated at Thu Aug 27 13:16:08 2026 by rpki-client