Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5b2726a1-d444-3dd4-91b5-b75356c0bbf3.roa
File:                     5b2726a1-d444-3dd4-91b5-b75356c0bbf3.roa (raw, json)
Hash identifier:          /Ii+dFrPX01VV39bTKUtQH95YREBlGrTp09e7jhXu6Y=
Subject key identifier:   D9:2B:20:C1:C6:47:0E:89:9A:54:62:26:08:5B:6B:F6:E0:22:28:5E
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584F549D959F32617913DAAB6900
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5b2726a1-d444-3dd4-91b5-b75356c0bbf3.roa
Signing time:             Tue 29 Sep 2026 01:00:12 +0000
ROA not before:           Tue 29 Sep 2026 01:00:12 +0000
ROA not after:            Mon 28 Dec 2026 02:00:12 +0000
asID:                     7029
IP address blocks:        209.183.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:54:9d:95:9f:32:61:79:13:da:ab:69:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Sep 29 01:00:12 2026 GMT
            Not After : Dec 28 02:00:12 2026 GMT
        Subject: CN=1883d1b1-a804-4122-a982-a249de0f4e2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:9b:d6:06:0b:75:af:ca:23:6e:b8:ac:97:f2:
                    5f:44:f2:d7:80:25:da:64:d1:bb:4e:73:3a:fe:01:
                    d5:05:e6:18:79:db:ff:b3:45:d9:c2:26:ba:31:0b:
                    1c:fe:1b:31:75:45:bc:43:f8:ba:94:25:af:62:44:
                    e6:cf:5c:2c:ee:58:a2:d3:a0:29:ef:8c:f7:a5:63:
                    6a:16:56:18:ec:65:5a:cd:bc:08:8f:8e:f7:6e:0b:
                    46:42:b9:a7:c4:aa:10:e7:0b:b3:61:a0:71:5f:06:
                    6f:c0:6a:0d:5c:0e:aa:76:d5:48:d4:98:19:6e:02:
                    3b:fc:39:71:5c:2c:e8:fc:07:a4:d9:29:d2:bc:4d:
                    26:cb:04:cd:6a:ad:ef:e3:90:e4:ea:ae:d2:18:85:
                    96:da:14:36:4e:92:fe:f6:cf:20:3f:28:e3:a3:a4:
                    26:20:d9:b7:c2:60:22:37:2c:70:3e:40:4e:4f:ae:
                    0b:e9:f2:92:9f:20:f2:1a:d1:dc:c1:bb:ac:99:63:
                    4b:c0:c3:05:e9:f1:3e:7f:b8:87:24:f4:6d:a9:8b:
                    50:7b:df:95:15:64:21:34:6c:e9:54:fe:ac:81:b3:
                    ba:fb:d6:5f:4a:69:8b:4a:be:c0:78:90:a2:5c:26:
                    08:1c:1b:2a:91:0b:7d:b9:70:1f:15:f8:a9:77:a7:
                    4f:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:2B:20:C1:C6:47:0E:89:9A:54:62:26:08:5B:6B:F6:E0:22:28:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5b2726a1-d444-3dd4-91b5-b75356c0bbf3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.183.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:6d:c7:b7:b2:be:af:0a:fd:15:95:41:57:b4:27:87:9d:d1:
         46:29:59:16:89:75:f3:fc:a0:04:f8:08:48:09:b1:58:fa:ff:
         a9:67:45:e8:b0:6b:14:ba:b1:2d:d9:0a:d2:a3:16:a8:ff:8e:
         bf:8f:84:dc:fa:24:82:fc:7e:66:1c:a0:28:86:3f:9c:58:6b:
         fb:40:77:99:16:9f:41:df:4e:ed:7e:51:cb:89:1e:6d:6b:4b:
         4f:54:84:51:42:16:a0:3e:6d:19:57:a4:b7:90:69:f9:90:22:
         55:71:6a:4f:1d:af:80:40:00:97:44:ed:13:4e:92:56:78:ff:
         40:b7:5a:cd:77:8c:7f:32:5b:c0:bc:2d:b4:01:2c:cb:36:cf:
         b9:60:99:4d:6f:ed:dc:d5:c0:44:2b:aa:06:50:55:fc:e3:68:
         c1:65:b0:9a:f9:31:9d:f9:82:7a:a4:1d:fe:6c:d2:f5:d6:fc:
         6e:49:ef:1a:d4:5c:43:bd:7a:8a:1d:a3:c5:1e:ad:ff:7f:b5:
         20:f8:2b:bc:d5:2f:25:43:4c:15:a1:ff:26:d4:5e:4d:ec:d0:
         13:f9:03:cf:2d:dd:80:2a:c7:6a:cb:10:aa:34:3c:97:b5:86:
         40:ab:0c:fe:46:c7:c1:9e:91:51:6e:18:91:6a:40:65:ab:d7:
         f7:74:59:38
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9UnZWfMmF5E9qraQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk
MTg4M2QxYjEtYTgwNC00MTIyLWE5ODItYTI0OWRlMGY0ZTJmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiJvWBgt1r8ojbrisl/JfRPLXgCXaZNG7TnM6
/gHVBeYYedv/s0XZwia6MQsc/hsxdUW8Q/i6lCWvYkTmz1ws7lii06Ap74z3pWNq
FlYY7GVazbwIj473bgtGQrmnxKoQ5wuzYaBxXwZvwGoNXA6qdtVI1JgZbgI7/Dlx
XCzo/Aek2SnSvE0mywTNaq3v45Dk6q7SGIWW2hQ2TpL+9s8gPyjjo6QmINm3wmAi
NyxwPkBOT64L6fKSnyDyGtHcwbusmWNLwMMF6fE+f7iHJPRtqYtQe9+VFWQhNGzp
VP6sgbO6+9ZfSmmLSr7AeJCiXCYIHBsqkQt9uXAfFfipd6dP1QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNkrIMHGRw6JmlRiJghba/bgIiheMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNWIyNzI2YTEtZDQ0NC0z
ZGQ0LTkxYjUtYjc1MzU2YzBiYmYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQG0bdAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJJtx7eyvq8K/RWVQVe0J4ed0UYpWRaJdfP8oAT4CEgJsVj6/6lnReiw
axS6sS3ZCtKjFqj/jr+PhNz6JIL8fmYcoCiGP5xYa/tAd5kWn0HfTu1+UcuJHm1r
S09UhFFCFqA+bRlXpLeQafmQIlVxak8dr4BAAJdE7RNOklZ4/0C3Ws13jH8yW8C8
LbQBLMs2z7lgmU1v7dzVwEQrqgZQVfzjaMFlsJr5MZ35gnqkHf5s0vXW/G5J7xrU
XEO9eoodo8Uerf9/tSD4K7zVLyVDTBWh/ybUXk3s0BP5A88t3YAqx2rLEKo0PJe1
hkCrDP5Gx8GekVFuGJFqQGWr1/d0WTg=
-----END CERTIFICATE-----
Generated at Tue Oct 13 06:24:17 2026 by rpki-client