Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/493a16ab-9932-37f3-8628-c9ae1384c112.roa
File:                     493a16ab-9932-37f3-8628-c9ae1384c112.roa (raw, json)
Hash identifier:          t0SI3VsBM7FBTS1z0NV81C2dzL9zsosiBZYl1i+IKEo=
Subject key identifier:   60:B2:B9:0E:1D:DD:07:B1:B3:48:8F:05:7F:DC:17:27:70:26:E7:BB
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584EB2B1E32056AE5015609A5116
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/493a16ab-9932-37f3-8628-c9ae1384c112.roa
Signing time:             Sun 02 Aug 2026 01:00:11 +0000
ROA not before:           Sun 02 Aug 2026 01:00:11 +0000
ROA not after:            Sat 31 Oct 2026 01:00:11 +0000
asID:                     7029
IP address blocks:        67.140.0.0/15 maxlen: 15
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b2:b1:e3:20:56:ae:50:15:60:9a:51:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Aug  2 01:00:11 2026 GMT
            Not After : Oct 31 01:00:11 2026 GMT
        Subject: CN=b99fa17c-1e80-4773-8c6e-32674e910d42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b0:11:6e:3e:81:34:bb:30:23:5d:94:61:37:
                    08:2d:c7:e2:ff:80:de:2c:fe:5a:63:34:f0:c9:81:
                    c9:e4:b6:cb:05:7d:36:04:de:ec:64:8e:f9:c4:df:
                    b2:e2:4e:78:8a:61:e0:14:ae:f3:ac:9d:27:19:26:
                    b4:e7:b5:fa:b2:88:f0:17:ac:37:e9:e2:f0:1a:1b:
                    44:c0:57:4f:c6:30:f9:f9:f9:e3:fb:2f:08:87:9c:
                    84:46:2c:44:57:ab:19:59:46:bb:bc:8b:5f:97:21:
                    dc:36:af:74:7a:76:ee:7d:70:12:86:cf:9d:bd:4a:
                    2b:19:2e:4e:e9:42:c1:83:0b:cc:e3:6f:ea:72:91:
                    5d:48:2f:48:03:1e:41:4b:57:90:6c:d8:36:df:84:
                    12:80:6f:d7:a4:3f:11:6c:88:d3:b3:74:ad:8f:64:
                    bc:cd:43:d2:69:90:67:fa:9d:b5:ca:2a:1b:95:c7:
                    03:cd:65:b8:16:6d:c8:3c:31:02:32:ce:15:eb:72:
                    3a:9c:02:c5:c8:49:b5:65:8f:56:15:e7:12:f0:77:
                    aa:c6:5a:ea:bf:00:fd:18:ec:ec:25:aa:43:40:b2:
                    ed:c6:2a:09:74:13:6d:2a:0d:d5:1c:4a:56:c6:88:
                    3e:41:0a:95:b3:3a:75:e7:2c:2b:36:35:8a:0b:e8:
                    02:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:B2:B9:0E:1D:DD:07:B1:B3:48:8F:05:7F:DC:17:27:70:26:E7:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/493a16ab-9932-37f3-8628-c9ae1384c112.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.140.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:d6:05:15:fa:65:bc:e3:87:c9:b9:c7:bf:12:03:95:a8:3c:
         6b:fa:61:f6:7f:d4:d5:45:cb:07:52:c3:22:9d:98:01:79:13:
         50:02:c4:42:e7:30:2e:45:09:78:dd:50:3e:98:b6:2f:7e:5e:
         b8:1a:33:2b:8a:b9:e4:01:99:f7:55:87:91:a2:91:1e:74:81:
         a0:10:52:1a:f5:33:de:0e:c0:a3:6c:f8:c3:38:63:f4:5b:ef:
         df:f3:17:44:3e:57:6a:c7:20:e4:c0:e1:33:48:65:c2:79:42:
         8d:ec:82:3b:52:68:24:33:0b:c6:22:3d:26:70:0a:d0:7b:8f:
         15:20:24:f8:0b:98:a0:81:6b:65:c7:d6:de:0e:26:c5:0a:23:
         bc:0d:7b:ea:d1:ae:47:2f:8f:c4:bb:a8:eb:e4:b1:30:5c:fc:
         98:51:5f:10:a0:cd:5f:a1:e3:17:bf:fe:a5:fe:16:0b:15:79:
         20:51:75:d2:25:3a:5f:df:f6:90:b7:0c:40:43:80:cd:66:7d:
         1c:4e:21:2a:85:84:94:c3:cc:fb:6c:2f:8e:f1:b0:8a:85:93:
         56:21:5a:75:48:31:89:40:42:e7:c8:01:78:ea:88:92:e6:6f:
         ea:8b:59:6f:da:ea:83:d9:98:16:2e:c9:7b:3d:2e:98:34:c7:
         fb:4b:6d:18
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE6yseMgVq5QFWCaURYwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTI2MDgwMjAxMDAxMVoXDTI2MTAzMTAxMDAxMVowLzEtMCsGA1UEAxMk
Yjk5ZmExN2MtMWU4MC00NzczLThjNmUtMzI2NzRlOTEwZDQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAurARbj6BNLswI12UYTcILcfi/4DeLP5aYzTw
yYHJ5LbLBX02BN7sZI75xN+y4k54imHgFK7zrJ0nGSa057X6sojwF6w36eLwGhtE
wFdPxjD5+fnj+y8Ih5yERixEV6sZWUa7vItflyHcNq90enbufXAShs+dvUorGS5O
6ULBgwvM42/qcpFdSC9IAx5BS1eQbNg234QSgG/XpD8RbIjTs3Stj2S8zUPSaZBn
+p21yioblccDzWW4Fm3IPDECMs4V63I6nALFyEm1ZY9WFecS8HeqxlrqvwD9GOzs
JapDQLLtxioJdBNtKg3VHEpWxog+QQqVszp15ywrNjWKC+gC6QIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFGCyuQ4d3Qexs0iPBX/cFydwJue7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNDkzYTE2YWItOTkzMi0z
N2YzLTg2MjgtYzlhZTEzODRjMTEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBQ4wwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAeNYFFfplvOOHybnHvxIDlag8a/ph9n/U1UXLB1LDIp2YAXkTUALEQucw
LkUJeN1QPpi2L35euBozK4q55AGZ91WHkaKRHnSBoBBSGvUz3g7Ao2z4wzhj9Fvv
3/MXRD5Xascg5MDhM0hlwnlCjeyCO1JoJDMLxiI9JnAK0HuPFSAk+AuYoIFrZcfW
3g4mxQojvA176tGuRy+PxLuo6+SxMFz8mFFfEKDNX6HjF7/+pf4WCxV5IFF10iU6
X9/2kLcMQEOAzWZ9HE4hKoWElMPM+2wvjvGwioWTViFadUgxiUBC58gBeOqIkuZv
6otZb9rqg9mYFi7Jez0umDTH+0ttGA==
-----END CERTIFICATE-----
Generated at Thu Aug 27 10:39:35 2026 by rpki-client