Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3bdc6966-5141-3334-888e-7e197a25c456.roa
File:                     3bdc6966-5141-3334-888e-7e197a25c456.roa (raw, json)
Hash identifier:          IuR2RlJ/0PmP46LA+Qnaa5pid02kyaKjpb3uya74MJE=
Subject key identifier:   82:31:47:3C:61:D4:26:0F:D2:DB:6C:BB:62:E6:93:9F:BD:E9:71:39
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584E5FDF6D5FA18FBF8F72D0D280
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3bdc6966-5141-3334-888e-7e197a25c456.roa
Signing time:             Fri 03 Jul 2026 09:00:12 +0000
ROA not before:           Fri 03 Jul 2026 09:00:12 +0000
ROA not after:            Thu 01 Oct 2026 09:00:12 +0000
asID:                     7029
IP address blocks:        71.31.160.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5f:df:6d:5f:a1:8f:bf:8f:72:d0:d2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Jul  3 09:00:12 2026 GMT
            Not After : Oct  1 09:00:12 2026 GMT
        Subject: CN=ad9b74ec-d6c9-47cc-8d7f-fd3cca1801b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:12:34:14:e2:46:6e:3a:16:cb:cf:d2:12:60:
                    8c:a2:ce:e7:7b:35:88:e5:6f:10:aa:0d:8a:ab:e5:
                    41:08:d4:bb:91:94:22:33:7b:c2:6d:04:39:0b:63:
                    59:c8:b2:18:63:ff:51:e1:80:b8:85:1c:4e:bf:9c:
                    4c:86:40:77:ce:4f:b1:2e:be:94:77:56:84:09:51:
                    4d:e8:75:b7:6b:f0:a8:9c:a4:34:e6:80:01:8c:25:
                    60:3a:27:58:3b:ce:f8:f1:b4:2a:eb:97:a2:66:97:
                    83:b8:e0:55:be:bf:b9:28:97:64:19:b3:1e:7e:75:
                    40:92:80:64:5b:a9:5c:27:ab:f1:61:d9:15:2f:0c:
                    ae:d5:7d:51:2c:b7:81:67:92:60:9b:60:75:47:4a:
                    22:53:c3:36:af:88:76:40:82:78:86:51:3d:a5:16:
                    7d:2d:15:c4:42:db:05:c7:57:f6:22:d4:d9:2a:45:
                    4b:9f:4e:87:ca:00:71:db:73:19:2c:45:54:59:2f:
                    84:c4:9a:d9:f8:1a:0d:71:e5:48:73:17:24:08:b1:
                    d8:76:d4:11:13:53:e6:cf:9d:88:23:eb:6a:01:2c:
                    d9:0c:6c:7b:6c:7f:7b:41:88:11:80:70:93:aa:8d:
                    71:2b:92:2a:3b:6d:c2:04:e8:29:78:74:38:b7:c1:
                    50:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:31:47:3C:61:D4:26:0F:D2:DB:6C:BB:62:E6:93:9F:BD:E9:71:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3bdc6966-5141-3334-888e-7e197a25c456.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.31.160.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:99:73:dd:c1:9c:c0:9e:b2:63:89:ae:61:8f:75:70:dc:39:
         0f:ad:2a:ae:9e:97:44:0f:02:09:eb:73:f3:3d:ab:16:fa:ef:
         92:eb:2c:bb:06:19:84:aa:f6:1b:17:b4:5a:38:39:fc:a6:b7:
         fd:20:4d:23:b5:26:0e:a5:59:9e:6b:5b:f0:59:60:ad:6b:98:
         27:af:6b:d3:70:13:22:90:50:73:37:e0:de:46:9d:50:87:bd:
         c0:a5:66:a3:06:14:5b:2b:66:28:d6:d6:a9:d6:80:8a:2e:3a:
         ee:ef:cd:54:73:91:6a:4f:e8:5e:e4:36:f6:6d:e0:58:fc:6b:
         17:97:88:91:b1:ad:cc:7e:bb:63:6a:7a:b4:57:3a:4f:1a:84:
         40:d4:0f:03:81:24:7c:3e:48:ea:31:9f:0b:5c:5a:a8:a8:da:
         c7:a3:fb:67:ed:4f:29:9b:fa:b5:1c:2f:b3:b1:53:5c:b9:7a:
         f8:89:04:b3:0e:8c:b6:7e:24:be:d8:9d:5b:65:90:9d:2f:63:
         e8:b2:d1:52:5f:c2:6a:a6:79:e4:f0:8e:91:05:24:1a:2b:27:
         43:1a:b7:53:b8:55:b4:46:c7:b1:75:3d:41:a6:b3:26:70:c8:
         a9:33:be:3e:7f:1a:5b:39:a1:fa:bc:71:eb:98:22:85:cd:49:
         9b:36:bf:3b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5f321foY+/j3LQ0oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTI2MDcwMzA5MDAxMloXDTI2MTAwMTA5MDAxMlowLzEtMCsGA1UEAxMk
YWQ5Yjc0ZWMtZDZjOS00N2NjLThkN2YtZmQzY2NhMTgwMWI0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqxI0FOJGbjoWy8/SEmCMos7nezWI5W8Qqg2K
q+VBCNS7kZQiM3vCbQQ5C2NZyLIYY/9R4YC4hRxOv5xMhkB3zk+xLr6Ud1aECVFN
6HW3a/ConKQ05oABjCVgOidYO8748bQq65eiZpeDuOBVvr+5KJdkGbMefnVAkoBk
W6lcJ6vxYdkVLwyu1X1RLLeBZ5Jgm2B1R0oiU8M2r4h2QIJ4hlE9pRZ9LRXEQtsF
x1f2ItTZKkVLn06HygBx23MZLEVUWS+ExJrZ+BoNceVIcxckCLHYdtQRE1Pmz52I
I+tqASzZDGx7bH97QYgRgHCTqo1xK5IqO23CBOgpeHQ4t8FQHQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIIxRzxh1CYP0ttsu2Lmk5+96XE5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvM2JkYzY5NjYtNTE0MS0z
MzM0LTg4OGUtN2UxOTdhMjVjNDU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRx+gMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGOZc93BnMCesmOJrmGPdXDcOQ+tKq6el0QPAgnrc/M9qxb675LrLLsG
GYSq9hsXtFo4Ofymt/0gTSO1Jg6lWZ5rW/BZYK1rmCeva9NwEyKQUHM34N5GnVCH
vcClZqMGFFsrZijW1qnWgIouOu7vzVRzkWpP6F7kNvZt4Fj8axeXiJGxrcx+u2Nq
erRXOk8ahEDUDwOBJHw+SOoxnwtcWqio2sej+2ftTymb+rUcL7OxU1y5eviJBLMO
jLZ+JL7YnVtlkJ0vY+iy0VJfwmqmeeTwjpEFJBorJ0Mat1O4VbRGx7F1PUGmsyZw
yKkzvj5/Gls5ofq8ceuYIoXNSZs2vzs=
-----END CERTIFICATE-----
Generated at Mon Jul 13 05:57:22 2026 by rpki-client