Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/75791fe6-f1b4-30b1-a525-2d08d4fb1d28.roa
File:                     75791fe6-f1b4-30b1-a525-2d08d4fb1d28.roa (raw, json)
Hash identifier:          8NHyJSlMCKFFBkj0xGZn9ltHJAAbgndL4l60o/elz4A=
Subject key identifier:   20:0C:14:ED:2C:AC:C4:10:78:27:D9:C1:8D:4B:55:CE:B7:06:0A:94
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584ECA6C89D9247D56AA19974AC0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/75791fe6-f1b4-30b1-a525-2d08d4fb1d28.roa
Signing time:             Mon 10 Aug 2026 13:00:12 +0000
ROA not before:           Mon 10 Aug 2026 13:00:12 +0000
ROA not after:            Sun 08 Nov 2026 14:00:12 +0000
asID:                     7029
IP address blocks:        209.2.52.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Sep 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ca:6c:89:d9:24:7d:56:aa:19:97:4a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Aug 10 13:00:12 2026 GMT
            Not After : Nov  8 14:00:12 2026 GMT
        Subject: CN=0f121892-3ec0-4417-8336-603e2238261b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:49:0c:39:e7:48:90:cd:17:a8:56:8d:61:e7:
                    68:42:6b:0b:ae:09:a7:52:e8:e3:ac:e0:db:4f:85:
                    28:0f:f8:dc:a7:ab:63:c9:50:53:2a:a9:ab:e5:9a:
                    72:9b:71:05:fd:40:2e:00:2d:64:e1:f9:85:89:9c:
                    d7:94:d0:34:4a:64:ce:df:07:09:69:ea:c5:3c:cc:
                    e5:02:3a:07:d6:09:68:36:6b:68:c2:34:80:13:9d:
                    4f:17:db:ab:b0:68:d4:81:a3:44:5c:e9:19:64:85:
                    7c:02:a3:92:d2:3c:ae:c4:39:69:72:60:e3:a0:5d:
                    ab:62:f0:c6:52:1c:23:b9:6b:1a:40:d9:65:32:08:
                    1a:39:55:74:ea:67:72:07:c0:52:6b:12:7a:b3:13:
                    76:4b:21:ac:39:09:d6:d6:ad:b0:a5:9e:c4:a1:67:
                    aa:77:aa:3a:8a:a5:a0:23:d6:67:d1:1b:f1:41:b4:
                    86:b4:85:9c:32:29:fe:8e:2d:fe:5d:e2:5b:cd:de:
                    00:d2:6e:1f:49:86:42:a2:bc:b7:07:38:69:c1:88:
                    29:a5:84:e6:c2:cb:3e:ad:c0:4b:15:42:dd:0e:1c:
                    68:91:57:96:f5:be:70:5f:68:a4:0a:9f:76:a8:73:
                    12:e7:1c:f0:50:23:da:6f:06:39:06:3d:04:42:ee:
                    06:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:0C:14:ED:2C:AC:C4:10:78:27:D9:C1:8D:4B:55:CE:B7:06:0A:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/75791fe6-f1b4-30b1-a525-2d08d4fb1d28.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.2.52.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:3b:77:27:07:53:ad:10:4c:18:dc:74:1e:3e:0c:62:e3:43:
         bd:f4:f9:67:53:cd:9f:b2:25:3a:f3:03:55:0a:b3:36:59:9e:
         04:75:6d:47:7b:ac:85:20:ab:62:9d:1d:f5:28:28:18:b5:1a:
         81:59:52:4e:7b:8b:65:34:8b:2b:b5:29:49:4f:05:84:f8:d4:
         ed:57:a0:aa:5c:93:1f:8b:3e:76:40:0e:0f:3f:f1:80:54:05:
         03:a3:50:bb:cc:6d:bd:f4:a2:65:35:ba:74:15:b0:f1:6b:7c:
         34:22:14:4c:74:44:dd:0c:7c:4e:ce:60:20:25:b2:9b:3a:72:
         49:b7:ae:43:4f:a4:b5:a0:c3:5d:b3:f7:49:83:45:67:95:32:
         0c:d3:80:91:31:ae:b3:8e:57:d6:29:2d:1a:ee:6d:54:95:3e:
         63:5e:9f:04:6b:7c:d2:00:c8:55:5c:ec:5c:53:d7:d5:ee:84:
         6a:c4:14:e1:91:d2:a4:70:37:57:84:47:26:db:27:fa:42:07:
         a4:82:42:43:15:fe:69:ee:a1:26:78:83:81:06:c3:e1:d1:4c:
         ac:df:58:ca:58:45:2f:42:70:30:86:35:52:d9:7a:f6:38:db:
         37:76:f5:e1:22:42:c4:43:f2:ec:e9:69:7d:91:16:8d:54:1d:
         97:16:c0:dd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7KbInZJH1WqhmXSsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTI2MDgxMDEzMDAxMloXDTI2MTEwODE0MDAxMlowLzEtMCsGA1UEAxMk
MGYxMjE4OTItM2VjMC00NDE3LTgzMzYtNjAzZTIyMzgyNjFiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskkMOedIkM0XqFaNYedoQmsLrgmnUujjrODb
T4UoD/jcp6tjyVBTKqmr5Zpym3EF/UAuAC1k4fmFiZzXlNA0SmTO3wcJaerFPMzl
AjoH1gloNmtowjSAE51PF9ursGjUgaNEXOkZZIV8AqOS0jyuxDlpcmDjoF2rYvDG
UhwjuWsaQNllMggaOVV06mdyB8BSaxJ6sxN2SyGsOQnW1q2wpZ7EoWeqd6o6iqWg
I9Zn0RvxQbSGtIWcMin+ji3+XeJbzd4A0m4fSYZCory3BzhpwYgppYTmwss+rcBL
FULdDhxokVeW9b5wX2ikCp92qHMS5xzwUCPabwY5Bj0EQu4GrwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCAMFO0srMQQeCfZwY1LVc63BgqUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNzU3OTFmZTYtZjFiNC0z
MGIxLWE1MjUtMmQwOGQ0ZmIxZDI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0QI0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAA7dycHU60QTBjcdB4+DGLjQ730+WdTzZ+yJTrzA1UKszZZngR1bUd7
rIUgq2KdHfUoKBi1GoFZUk57i2U0iyu1KUlPBYT41O1XoKpckx+LPnZADg8/8YBU
BQOjULvMbb30omU1unQVsPFrfDQiFEx0RN0MfE7OYCAlsps6ckm3rkNPpLWgw12z
90mDRWeVMgzTgJExrrOOV9YpLRrubVSVPmNenwRrfNIAyFVc7FxT19XuhGrEFOGR
0qRwN1eERybbJ/pCB6SCQkMV/mnuoSZ4g4EGw+HRTKzfWMpYRS9CcDCGNVLZevY4
2zd29eEiQsRD8uzpaX2RFo1UHZcWwN0=
-----END CERTIFICATE-----
Generated at Tue Sep 1 03:42:48 2026 by rpki-client