Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5df2f705-ffef-373b-bed6-c4ebc88e9c9f.roa
File:                     5df2f705-ffef-373b-bed6-c4ebc88e9c9f.roa (raw, json)
Hash identifier:          Rmg15+h55F9wKnWjBRcCGWA7Ib0X+7iqbGKLtbJQ0Ww=
Subject key identifier:   BD:7F:1E:2E:50:32:55:75:E5:96:5F:00:D5:7F:98:13:1E:67:1A:00
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584EB2B1E87B59EBD38241481900
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5df2f705-ffef-373b-bed6-c4ebc88e9c9f.roa
Signing time:             Sun 02 Aug 2026 01:00:11 +0000
ROA not before:           Sun 02 Aug 2026 01:00:11 +0000
ROA not after:            Sat 31 Oct 2026 01:00:11 +0000
asID:                     7029
IP address blocks:        208.38.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b2:b1:e8:7b:59:eb:d3:82:41:48:19:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Aug  2 01:00:11 2026 GMT
            Not After : Oct 31 01:00:11 2026 GMT
        Subject: CN=8552b781-cbde-4d5f-8488-47c94073f041
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:f5:d7:6b:de:9a:a0:d1:5b:91:0e:90:2c:dd:
                    0e:68:a6:33:f6:2e:48:e8:c6:38:ad:1b:43:5f:5d:
                    02:49:34:87:db:61:cd:4c:c1:23:db:27:a2:42:0a:
                    20:04:e2:38:77:29:d5:96:d9:42:e2:6e:03:5d:4d:
                    5e:e0:23:f5:ab:ab:ac:d4:33:3e:4a:3d:e3:96:e1:
                    c2:eb:8f:2b:b0:00:21:3f:dd:2d:f9:a6:2e:2d:46:
                    88:e7:d7:fe:24:d2:41:15:ac:1d:81:ea:cb:89:a9:
                    aa:9d:7b:64:74:66:4e:e1:1f:00:f1:f2:1c:74:57:
                    a7:ac:d9:64:1a:8e:57:44:d5:f4:eb:87:ba:0a:79:
                    40:e4:c1:4f:38:05:b6:ea:8f:0a:af:85:de:40:33:
                    ca:33:72:c6:a9:27:cc:a3:1c:f6:ac:f4:30:da:2a:
                    de:1d:d4:34:06:f9:89:d9:1e:b3:97:39:2a:dc:04:
                    96:e8:50:6a:10:f9:29:23:a4:17:ff:54:41:45:6e:
                    4f:9c:ff:14:64:16:34:f9:5a:17:52:1c:08:9e:db:
                    ef:d3:8b:02:31:f0:09:6b:e6:38:c8:22:54:3c:ee:
                    cc:a1:ee:b1:a5:bb:4f:21:ae:94:9d:1c:3f:8b:19:
                    e3:cc:e5:05:92:4c:59:ce:62:82:4c:69:bc:41:26:
                    1c:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:7F:1E:2E:50:32:55:75:E5:96:5F:00:D5:7F:98:13:1E:67:1A:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5df2f705-ffef-373b-bed6-c4ebc88e9c9f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.38.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:5d:99:4f:bb:87:2d:51:db:61:a4:bb:5d:a5:0c:96:ab:25:
         30:55:d3:37:bc:27:bd:84:b3:fa:71:56:0c:e0:b3:38:64:78:
         2c:0c:97:78:99:b5:e5:82:c5:b6:1d:63:a0:89:2d:81:d3:f9:
         0a:3e:07:0d:12:0d:d8:99:7e:72:98:9e:fd:2b:4e:a6:c1:82:
         d3:76:46:7a:8c:21:f1:35:3c:df:84:91:6e:67:c5:90:44:fb:
         2f:5c:04:f5:82:76:18:49:2e:91:80:6b:74:ff:99:5a:0a:97:
         eb:f3:6f:92:00:a0:ac:9b:67:85:9b:a5:df:51:a9:58:18:06:
         0e:d2:67:f0:fd:25:bf:2b:10:2a:27:63:d4:94:4c:62:5c:db:
         59:28:d5:fc:cf:99:22:ab:a8:89:a2:a8:55:43:4f:34:00:55:
         15:6b:72:76:85:20:12:7a:09:f1:28:b7:ab:5a:5e:2b:e9:77:
         78:87:20:dd:76:b6:fb:82:12:71:06:03:e0:55:34:35:64:97:
         f1:23:79:85:32:e8:98:ce:df:97:df:e2:c0:45:24:12:01:c4:
         8e:b6:52:ee:f9:c5:a0:21:58:3f:a1:62:1b:4d:60:69:84:6d:
         84:dc:aa:d8:d5:c8:82:c6:e7:11:30:44:a4:84:70:c4:5a:a8:
         7a:ce:b4:9b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6yseh7WevTgkFIGQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTI2MDgwMjAxMDAxMVoXDTI2MTAzMTAxMDAxMVowLzEtMCsGA1UEAxMk
ODU1MmI3ODEtY2JkZS00ZDVmLTg0ODgtNDdjOTQwNzNmMDQxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyfXXa96aoNFbkQ6QLN0OaKYz9i5I6MY4rRtD
X10CSTSH22HNTMEj2yeiQgogBOI4dynVltlC4m4DXU1e4CP1q6us1DM+Sj3jluHC
648rsAAhP90t+aYuLUaI59f+JNJBFawdgerLiamqnXtkdGZO4R8A8fIcdFenrNlk
Go5XRNX064e6CnlA5MFPOAW26o8Kr4XeQDPKM3LGqSfMoxz2rPQw2ireHdQ0BvmJ
2R6zlzkq3ASW6FBqEPkpI6QX/1RBRW5PnP8UZBY0+VoXUhwIntvv04sCMfAJa+Y4
yCJUPO7Moe6xpbtPIa6UnRw/ixnjzOUFkkxZzmKCTGm8QSYcXwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL1/Hi5QMlV15ZZfANV/mBMeZxoAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNWRmMmY3MDUtZmZlZi0z
NzNiLWJlZDYtYzRlYmM4OGU5YzlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQG0CZAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAVdmU+7hy1R22Gku12lDJarJTBV0ze8J72Es/pxVgzgszhkeCwMl3iZ
teWCxbYdY6CJLYHT+Qo+Bw0SDdiZfnKYnv0rTqbBgtN2RnqMIfE1PN+EkW5nxZBE
+y9cBPWCdhhJLpGAa3T/mVoKl+vzb5IAoKybZ4Wbpd9RqVgYBg7SZ/D9Jb8rECon
Y9SUTGJc21ko1fzPmSKrqImiqFVDTzQAVRVrcnaFIBJ6CfEot6taXivpd3iHIN12
tvuCEnEGA+BVNDVkl/EjeYUy6JjO35ff4sBFJBIBxI62Uu75xaAhWD+hYhtNYGmE
bYTcqtjVyILG5xEwRKSEcMRaqHrOtJs=
-----END CERTIFICATE-----
Generated at Thu Aug 27 09:48:47 2026 by rpki-client