Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5ce44d4d-189a-3359-93fa-8cba7b4391b7.roa
File:                     5ce44d4d-189a-3359-93fa-8cba7b4391b7.roa (raw, json)
Hash identifier:          XQr+lZLvI8IbwSjc+vLWI7Q2Omenaw9Fw38bCUjqYzA=
Subject key identifier:   4F:7C:25:E1:B5:CB:10:3F:AA:4E:D1:74:E7:AC:44:83:91:04:B3:00
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584DD4C06CE1A063C769958E6D80
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5ce44d4d-189a-3359-93fa-8cba7b4391b7.roa
Signing time:             Thu 14 May 2026 13:00:31 +0000
ROA not before:           Thu 14 May 2026 13:00:31 +0000
ROA not after:            Wed 12 Aug 2026 13:00:31 +0000
asID:                     7029
IP address blocks:        173.187.170.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 30 May 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d4:c0:6c:e1:a0:63:c7:69:95:8e:6d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: May 14 13:00:31 2026 GMT
            Not After : Aug 12 13:00:31 2026 GMT
        Subject: CN=93dd21fd-f35f-435a-80aa-378adbdc86d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:32:6f:7b:ec:0a:6f:d9:25:f8:68:0f:c2:fd:
                    5d:8b:75:3e:3f:2f:1b:22:d4:b6:6e:76:6d:4f:12:
                    f6:fd:a1:c8:9c:df:8e:7e:c8:f9:43:be:56:8d:ca:
                    b3:55:6e:2b:66:71:be:f8:51:c6:4b:2e:3d:2d:4a:
                    24:ff:d4:7f:8c:7f:7c:8d:f7:e6:f9:6f:f9:57:8b:
                    47:db:df:52:1d:a7:7c:e8:9a:7c:3d:b8:7b:21:ce:
                    c1:0c:61:70:1c:9c:26:90:c9:5d:08:b6:62:86:d0:
                    64:1f:a8:88:a1:c9:2c:91:ca:09:45:e1:0a:06:ce:
                    f3:d3:0e:7a:55:82:eb:cb:56:e7:1a:47:1a:6e:63:
                    3b:fb:34:40:2b:83:a3:ea:f4:b7:c9:d7:f4:82:73:
                    c1:4f:cf:9b:99:73:18:1b:76:1b:75:99:cd:45:fd:
                    0b:b7:33:a1:da:9e:cd:fa:fe:71:ea:13:2b:ae:3f:
                    d7:87:87:31:43:1e:35:a4:81:1f:e4:aa:96:46:f8:
                    69:8a:ea:ec:e0:fb:d4:ef:a7:e7:14:7e:5c:ae:a0:
                    4b:07:85:b0:ce:94:a2:bd:74:b3:55:ca:28:09:58:
                    c7:91:60:af:f1:f4:b1:72:e9:f0:9a:5a:26:06:4a:
                    f8:a7:2e:a3:7a:74:47:c3:26:a1:f7:12:da:f1:26:
                    ff:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:7C:25:E1:B5:CB:10:3F:AA:4E:D1:74:E7:AC:44:83:91:04:B3:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5ce44d4d-189a-3359-93fa-8cba7b4391b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.187.170.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:fc:61:90:81:ae:cb:bb:68:0c:8d:29:71:20:c2:c0:72:bd:
         2d:28:1c:2f:ed:66:94:fd:ef:7a:22:8c:f8:53:d2:96:9e:b5:
         92:94:6b:aa:eb:1a:bf:98:42:a9:46:db:f4:c8:98:c3:58:a3:
         60:21:fa:ec:41:a2:43:bd:f4:fd:01:37:12:72:dd:c3:04:be:
         0e:4e:b8:8c:f8:7e:1d:c0:4e:85:e7:7f:e2:f8:4f:36:77:f8:
         80:e8:50:94:48:40:12:e3:9c:b9:1b:63:66:f7:c4:ef:a7:28:
         19:eb:4b:56:87:27:10:d8:ea:06:56:ca:bb:ae:46:db:2b:6c:
         f6:3c:97:a8:d1:8b:34:93:a8:40:6a:42:3b:66:69:b3:85:af:
         50:c8:10:55:17:44:41:bc:90:91:de:71:01:89:c3:e3:e0:a9:
         59:b8:58:2e:91:b3:7f:d6:e5:ae:0e:d9:85:c7:1b:3c:0a:78:
         7e:45:8b:1b:92:6f:82:16:cf:cf:ab:bf:ca:d9:4d:91:71:4c:
         55:d8:49:29:d5:bb:dc:b6:95:0c:b0:b2:7c:79:f4:f8:f5:4d:
         4b:67:c3:dc:0e:ce:31:32:44:6a:03:39:ce:f0:28:e4:67:9f:
         78:55:95:2a:08:cf:b3:fb:b4:d7:91:84:81:2a:a2:35:8b:40:
         7d:45:ed:61
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3UwGzhoGPHaZWObYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTI2MDUxNDEzMDAzMVoXDTI2MDgxMjEzMDAzMVowLzEtMCsGA1UEAxMk
OTNkZDIxZmQtZjM1Zi00MzVhLTgwYWEtMzc4YWRiZGM4NmQzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkzJve+wKb9kl+GgPwv1di3U+Py8bItS2bnZt
TxL2/aHInN+Ofsj5Q75WjcqzVW4rZnG++FHGSy49LUok/9R/jH98jffm+W/5V4tH
299SHad86Jp8Pbh7Ic7BDGFwHJwmkMldCLZihtBkH6iIockskcoJReEKBs7z0w56
VYLry1bnGkcabmM7+zRAK4Oj6vS3ydf0gnPBT8+bmXMYG3YbdZnNRf0LtzOh2p7N
+v5x6hMrrj/Xh4cxQx41pIEf5KqWRvhpiurs4PvU76fnFH5crqBLB4WwzpSivXSz
VcooCVjHkWCv8fSxcunwmlomBkr4py6jenRHwyah9xLa8Sb/0wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFE98JeG1yxA/qk7RdOesRIORBLMAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNWNlNDRkNGQtMTg5YS0z
MzU5LTkzZmEtOGNiYTdiNDM5MWI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrbuqMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACn8YZCBrsu7aAyNKXEgwsByvS0oHC/tZpT973oijPhT0paetZKUa6rr
Gr+YQqlG2/TImMNYo2Ah+uxBokO99P0BNxJy3cMEvg5OuIz4fh3AToXnf+L4TzZ3
+IDoUJRIQBLjnLkbY2b3xO+nKBnrS1aHJxDY6gZWyruuRtsrbPY8l6jRizSTqEBq
QjtmabOFr1DIEFUXREG8kJHecQGJw+PgqVm4WC6Rs3/W5a4O2YXHGzwKeH5FixuS
b4IWz8+rv8rZTZFxTFXYSSnVu9y2lQywsnx59Pj1TUtnw9wOzjEyRGoDOc7wKORn
n3hVlSoIz7P7tNeRhIEqojWLQH1F7WE=
-----END CERTIFICATE-----
Generated at Thu May 28 17:11:29 2026 by rpki-client