Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/516cc248-81bd-33c0-bf40-213c6b40e73b.roa
File:                     516cc248-81bd-33c0-bf40-213c6b40e73b.roa (raw, json)
Hash identifier:          nipQqQHtLgkFRbWOCA+u04mrNnfEO+KRGljL3eSZTvs=
Subject key identifier:   D0:30:DC:91:78:A0:29:38:1C:05:71:65:08:B0:0C:07:2A:7B:3B:82
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584EB2B1CCD74919085017D26A00
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/516cc248-81bd-33c0-bf40-213c6b40e73b.roa
Signing time:             Sun 02 Aug 2026 01:00:11 +0000
ROA not before:           Sun 02 Aug 2026 01:00:11 +0000
ROA not after:            Sat 31 Oct 2026 01:00:11 +0000
asID:                     7029
IP address blocks:        216.224.128.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b2:b1:cc:d7:49:19:08:50:17:d2:6a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Aug  2 01:00:11 2026 GMT
            Not After : Oct 31 01:00:11 2026 GMT
        Subject: CN=8a1ac5e4-f3c0-4b64-87e1-57447f7a8c05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:15:1c:2b:84:4c:6b:46:fd:05:ad:29:ea:9d:
                    68:3c:44:43:5e:bc:03:3e:e2:39:47:04:70:fd:c0:
                    0d:c0:5f:10:b6:05:8b:80:25:5e:a5:61:44:d4:41:
                    66:33:34:ed:54:2f:11:3d:c1:fd:21:25:26:fc:32:
                    5c:e5:d8:05:66:e4:82:83:64:b4:06:38:4e:06:3a:
                    fc:e2:b8:51:4b:33:41:db:a6:27:51:ce:a4:03:0c:
                    78:ed:f8:0d:be:84:47:ee:b1:6b:f6:ea:dd:ad:8b:
                    69:78:5e:5e:aa:2a:7a:b3:13:2c:1b:5a:17:a1:d9:
                    2e:07:5c:f6:54:51:e5:48:85:1b:de:92:37:b7:cf:
                    36:1f:4a:f9:87:2a:35:32:58:1c:5a:3a:9d:aa:b9:
                    9e:7b:8b:12:6f:81:70:3f:22:ee:eb:dd:9e:8d:3b:
                    81:61:27:4a:cc:b8:91:bc:2e:b4:b8:a4:cf:a1:aa:
                    5b:52:93:59:27:dd:c2:c3:73:de:23:9b:7a:27:30:
                    f0:12:e1:8f:9f:28:6b:47:c5:4a:8b:e7:c1:ad:bf:
                    ba:c9:3b:21:fc:e9:68:8b:f6:41:b8:7f:de:fa:75:
                    ea:59:7e:bc:88:c7:da:c9:08:60:ea:2e:c3:86:3e:
                    b7:90:19:52:e3:3e:0f:7c:65:b2:e0:aa:42:d6:de:
                    7d:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:30:DC:91:78:A0:29:38:1C:05:71:65:08:B0:0C:07:2A:7B:3B:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/516cc248-81bd-33c0-bf40-213c6b40e73b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.224.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:2e:37:02:28:2b:97:c8:97:cd:a7:ad:47:7f:e9:a7:89:f9:
         f6:ed:c2:2d:f3:32:98:d6:4c:62:f8:21:1a:6a:44:1d:7e:03:
         97:e2:d0:bf:77:90:9c:27:0c:0d:45:54:f0:3d:a2:03:28:0f:
         89:ea:59:89:02:31:27:07:d4:0e:ee:29:be:4e:ad:ff:0f:00:
         f0:ff:b6:01:d8:e8:f9:e3:27:0d:53:5d:9b:48:39:cb:57:81:
         e5:a2:4f:de:ad:96:fd:2a:03:a1:51:e6:b0:0b:a9:67:ad:cb:
         76:b2:b9:d8:4a:b5:3b:f2:f3:1d:2e:cc:a6:65:5b:cb:25:27:
         9f:e8:ee:c5:c7:f4:32:57:12:57:18:00:17:71:ed:c3:dc:33:
         c8:06:0b:4d:91:9c:da:cb:07:f1:62:9c:2d:23:dc:3e:58:8e:
         6e:db:05:4f:9c:10:40:de:4d:e0:c3:67:da:a2:ba:50:49:0c:
         2d:2b:fd:23:a2:1f:88:01:7f:58:5e:fd:db:a2:c0:2f:af:c0:
         a5:f4:22:ad:ff:63:05:52:d4:b5:58:fc:f8:40:16:d0:bd:5f:
         e3:6b:f0:ad:19:2c:54:01:c4:5d:23:16:a9:b8:55:2c:92:37:
         3f:12:ae:b7:db:8e:0c:a8:20:e1:28:b4:60:bc:ad:62:85:33:
         ad:74:48:fd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6ysczXSRkIUBfSagAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTI2MDgwMjAxMDAxMVoXDTI2MTAzMTAxMDAxMVowLzEtMCsGA1UEAxMk
OGExYWM1ZTQtZjNjMC00YjY0LTg3ZTEtNTc0NDdmN2E4YzA1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwRUcK4RMa0b9Ba0p6p1oPERDXrwDPuI5RwRw
/cANwF8QtgWLgCVepWFE1EFmMzTtVC8RPcH9ISUm/DJc5dgFZuSCg2S0BjhOBjr8
4rhRSzNB26YnUc6kAwx47fgNvoRH7rFr9urdrYtpeF5eqip6sxMsG1oXodkuB1z2
VFHlSIUb3pI3t882H0r5hyo1MlgcWjqdqrmee4sSb4FwPyLu692ejTuBYSdKzLiR
vC60uKTPoapbUpNZJ93Cw3PeI5t6JzDwEuGPnyhrR8VKi+fBrb+6yTsh/Oloi/ZB
uH/e+nXqWX68iMfayQhg6i7Dhj63kBlS4z4PfGWy4KpC1t59pwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNAw3JF4oCk4HAVxZQiwDAcqezuCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNTE2Y2MyNDgtODFiZC0z
M2MwLWJmNDAtMjEzYzZiNDBlNzNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQG2OCAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGouNwIoK5fIl82nrUd/6aeJ+fbtwi3zMpjWTGL4IRpqRB1+A5fi0L93
kJwnDA1FVPA9ogMoD4nqWYkCMScH1A7uKb5Orf8PAPD/tgHY6PnjJw1TXZtIOctX
geWiT96tlv0qA6FR5rALqWety3ayudhKtTvy8x0uzKZlW8slJ5/o7sXH9DJXElcY
ABdx7cPcM8gGC02RnNrLB/FinC0j3D5Yjm7bBU+cEEDeTeDDZ9qiulBJDC0r/SOi
H4gBf1he/duiwC+vwKX0Iq3/YwVS1LVY/PhAFtC9X+Nr8K0ZLFQBxF0jFqm4VSyS
Nz8SrrfbjgyoIOEotGC8rWKFM610SP0=
-----END CERTIFICATE-----
Generated at Thu Aug 27 14:22:18 2026 by rpki-client