Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8d5239f0-54e0-3aba-9274-5937c077877c.roa
File:                     8d5239f0-54e0-3aba-9274-5937c077877c.roa (raw, json)
Hash identifier:          bVe4p+a695BNTVNjKxmZPrWphMpx0MiyO87k8KNMJKs=
Subject key identifier:   7F:4E:E8:27:02:E0:90:A9:52:82:A8:39:85:79:2F:27:D3:D2:2B:C6
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584EBB11C12F2C2326A7580ECAC0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8d5239f0-54e0-3aba-9274-5937c077877c.roa
Signing time:             Wed 05 Aug 2026 01:00:12 +0000
ROA not before:           Wed 05 Aug 2026 01:00:12 +0000
ROA not after:            Tue 03 Nov 2026 02:00:12 +0000
asID:                     7029
IP address blocks:        75.90.0.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:bb:11:c1:2f:2c:23:26:a7:58:0e:ca:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Aug  5 01:00:12 2026 GMT
            Not After : Nov  3 02:00:12 2026 GMT
        Subject: CN=e3d2fdce-ba61-4230-bebd-8cd20414d442
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:af:b6:c0:d2:49:17:a7:3c:06:74:e1:d7:7a:
                    bc:de:ed:76:72:38:66:3b:e1:13:94:bc:66:20:9b:
                    94:19:62:25:d2:31:87:96:f1:31:7e:3a:c9:e3:17:
                    65:2d:01:8c:bb:98:91:86:ad:13:34:c8:96:54:b8:
                    89:af:b9:c1:6b:06:23:e2:84:7c:ca:4e:d3:93:45:
                    2a:d6:c3:fa:c6:22:c5:bb:b8:d9:e1:b2:84:16:76:
                    fa:c0:38:bb:a3:e2:41:9a:e5:1a:24:3f:a1:a1:8b:
                    5f:43:a8:e6:1c:4a:8f:30:2a:53:aa:f5:0a:e5:db:
                    13:a2:af:51:f7:56:f8:d2:1c:16:b6:53:36:44:1b:
                    70:69:b4:d7:35:e1:40:51:21:16:40:dc:cf:55:46:
                    52:c3:d7:6a:42:2e:4c:4d:2b:bc:c7:82:79:bf:b7:
                    16:3b:c1:ca:eb:8b:34:c3:1a:51:a0:04:9d:a2:f3:
                    29:eb:cd:b2:b4:bc:e5:01:0f:05:ca:02:ef:f6:b7:
                    67:a5:f2:6e:89:1e:a2:27:a9:aa:e1:0b:4e:fe:bc:
                    49:e3:1b:a3:10:d0:eb:1a:40:67:3a:12:e4:e5:d4:
                    bd:f6:5d:ec:40:e6:49:a6:5e:c1:cc:34:6e:4c:2e:
                    95:ad:bf:5a:a3:40:c0:14:8a:21:32:af:43:b8:eb:
                    00:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:4E:E8:27:02:E0:90:A9:52:82:A8:39:85:79:2F:27:D3:D2:2B:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8d5239f0-54e0-3aba-9274-5937c077877c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.90.0.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:5e:52:6f:d3:57:5a:cc:05:95:b6:fb:d5:36:4e:0f:72:80:
         90:d4:a1:6e:c3:ba:39:a0:8d:1e:1e:48:90:cb:fe:30:c6:da:
         63:92:6d:93:5c:a5:9b:d4:e3:ee:c7:6a:58:3e:66:0c:26:02:
         55:26:8b:5c:73:eb:5b:0a:4b:23:0f:95:23:cd:1d:e7:f5:99:
         e8:4b:8c:1b:a6:6f:ef:64:75:b3:00:10:92:b1:b1:65:c9:c9:
         70:c9:59:d2:e4:4f:56:e8:fe:34:4b:83:c2:b0:d1:ed:99:f2:
         ef:00:c0:24:05:26:86:87:09:39:4d:93:c1:e8:c3:ea:37:af:
         c6:5b:f2:22:f2:a9:26:d5:22:3d:a4:d6:aa:91:7f:af:4b:21:
         73:6d:09:14:6c:d4:5f:3b:ba:54:75:9c:1b:62:5b:b6:54:23:
         27:a4:f8:42:3d:3d:02:3a:f7:5e:f8:d1:49:7a:89:67:32:55:
         42:38:85:a4:85:b0:51:30:69:e9:47:c0:8b:70:f9:80:57:75:
         79:ff:07:a3:80:35:c8:5d:63:6d:9a:b9:4f:25:51:df:23:87:
         0b:73:1d:e6:7d:ef:73:7d:e7:db:3a:51:f5:df:17:4a:f3:04:
         0b:7d:f8:8f:7a:4b:d6:59:e9:c8:5d:2d:96:a5:a5:a5:99:50:
         cd:7f:61:20
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE67EcEvLCMmp1gOysAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTI2MDgwNTAxMDAxMloXDTI2MTEwMzAyMDAxMlowLzEtMCsGA1UEAxMk
ZTNkMmZkY2UtYmE2MS00MjMwLWJlYmQtOGNkMjA0MTRkNDQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqa+2wNJJF6c8BnTh13q83u12cjhmO+ETlLxm
IJuUGWIl0jGHlvExfjrJ4xdlLQGMu5iRhq0TNMiWVLiJr7nBawYj4oR8yk7Tk0Uq
1sP6xiLFu7jZ4bKEFnb6wDi7o+JBmuUaJD+hoYtfQ6jmHEqPMCpTqvUK5dsToq9R
91b40hwWtlM2RBtwabTXNeFAUSEWQNzPVUZSw9dqQi5MTSu8x4J5v7cWO8HK64s0
wxpRoASdovMp682ytLzlAQ8FygLv9rdnpfJuiR6iJ6mq4QtO/rxJ4xujENDrGkBn
OhLk5dS99l3sQOZJpl7BzDRuTC6Vrb9ao0DAFIohMq9DuOsAIQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFH9O6CcC4JCpUoKoOYV5LyfT0ivGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOGQ1MjM5ZjAtNTRlMC0z
YWJhLTkyNzQtNTkzN2MwNzc4NzdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDS1oAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB1eUm/TV1rMBZW2+9U2Tg9ygJDUoW7DujmgjR4eSJDL/jDG2mOSbZNc
pZvU4+7Halg+ZgwmAlUmi1xz61sKSyMPlSPNHef1mehLjBumb+9kdbMAEJKxsWXJ
yXDJWdLkT1bo/jRLg8Kw0e2Z8u8AwCQFJoaHCTlNk8How+o3r8Zb8iLyqSbVIj2k
1qqRf69LIXNtCRRs1F87ulR1nBtiW7ZUIyek+EI9PQI691740Ul6iWcyVUI4haSF
sFEwaelHwItw+YBXdXn/B6OANchdY22auU8lUd8jhwtzHeZ973N959s6UfXfF0rz
BAt9+I96S9ZZ6chdLZalpaWZUM1/YSA=
-----END CERTIFICATE-----
Generated at Thu Aug 27 12:32:20 2026 by rpki-client