Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/93c9f237-63f7-3061-837f-50277678230d.roa
File:                     93c9f237-63f7-3061-837f-50277678230d.roa (raw, json)
Hash identifier:          3S6FBuXGzSmLq2iLvPWiukQMenDFDWfGGdqUCXFaTBs=
Subject key identifier:   20:1F:76:36:5D:0F:17:FE:3E:0B:36:1B:18:D4:13:3B:A9:6F:88:EA
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584EB2B1E148C101A8116D1B1300
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/93c9f237-63f7-3061-837f-50277678230d.roa
Signing time:             Sun 02 Aug 2026 01:00:11 +0000
ROA not before:           Sun 02 Aug 2026 01:00:11 +0000
ROA not after:            Sat 31 Oct 2026 01:00:11 +0000
asID:                     7029
IP address blocks:        63.252.236.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b2:b1:e1:48:c1:01:a8:11:6d:1b:13:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Aug  2 01:00:11 2026 GMT
            Not After : Oct 31 01:00:11 2026 GMT
        Subject: CN=39f0f13a-3f71-4150-9923-deba00896075
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:ea:96:e1:9c:50:cd:e7:4a:bc:71:90:19:17:
                    a8:c9:59:9a:26:df:d9:42:88:38:4d:23:16:ac:67:
                    27:4f:10:8e:ef:b3:c6:56:37:7e:c9:14:30:a2:63:
                    9c:b1:3e:7d:47:cb:9c:01:87:bf:41:54:0c:eb:14:
                    2d:49:f4:69:1a:68:3a:2b:a3:5a:17:c5:09:32:9f:
                    7c:ae:74:8f:a1:1e:5c:9b:99:7a:61:15:64:ed:81:
                    ca:25:86:95:e3:2c:12:ca:b7:eb:f4:03:9c:ab:4b:
                    ed:b6:fb:30:16:1d:c6:e0:ac:99:31:cb:07:dd:89:
                    ed:35:08:73:2b:40:4e:28:0b:de:c5:6a:61:2e:e1:
                    04:dc:ff:ad:69:42:56:f8:d0:54:7d:82:db:e5:78:
                    b6:ef:7e:2a:b0:fb:d9:e3:43:93:af:ff:42:46:32:
                    d3:1d:a7:a3:0e:3c:f0:7c:15:36:54:a4:6d:27:f3:
                    5a:28:81:f9:dc:b8:39:c9:26:08:7b:4e:37:5c:26:
                    ab:96:32:2b:fa:98:e1:11:92:6f:84:12:3c:b4:70:
                    cc:86:68:d2:7b:00:7d:67:53:24:0d:a5:af:45:41:
                    15:0b:64:93:a1:ab:d3:a5:1d:a2:0c:f8:36:f4:fe:
                    73:2c:51:54:fc:23:57:ae:40:2f:db:5c:2f:57:97:
                    19:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:1F:76:36:5D:0F:17:FE:3E:0B:36:1B:18:D4:13:3B:A9:6F:88:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/93c9f237-63f7-3061-837f-50277678230d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.252.236.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:b7:6f:6f:5d:08:4d:24:d7:e0:63:7f:53:66:3c:35:e9:3e:
         03:f6:8c:6f:3f:97:4d:32:00:97:f2:b3:85:85:5a:97:93:e9:
         2d:32:9d:9c:79:73:4f:7d:e8:85:3c:0b:1a:e7:53:c1:cb:d6:
         1f:b1:29:1d:30:fa:de:87:ae:d7:ba:1b:64:c2:3f:69:6a:4d:
         c1:a4:b0:f0:71:ba:8f:dd:7e:6a:a7:b9:1f:85:b8:c7:9e:1b:
         61:f5:37:d4:21:5f:07:59:6d:d0:d4:bb:e9:13:1a:53:27:63:
         6b:ad:31:cf:2e:b6:a7:39:f1:a7:f5:70:30:3a:0a:62:e4:ea:
         94:bd:78:fa:9f:15:d0:1b:19:e7:be:26:63:8b:67:d9:79:b8:
         4e:aa:9a:26:d4:ef:49:9a:ea:9a:10:43:fe:2b:9b:4c:da:4c:
         11:b9:45:ca:01:30:69:41:89:24:11:45:21:ed:b1:9c:e5:eb:
         96:dc:96:bd:f7:22:a7:60:1a:7f:11:56:04:e0:06:3c:1d:22:
         7f:41:b9:2a:72:bc:fe:bf:35:7b:f5:29:2e:65:25:0a:2b:37:
         f9:3c:d0:28:b7:a1:39:d7:d7:6d:f5:10:34:97:9f:e0:fa:10:
         6c:7a:90:28:f1:05:f0:0d:83:44:a1:5f:8d:e4:0c:61:d5:5d:
         d5:4b:40:77
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6yseFIwQGoEW0bEwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTI2MDgwMjAxMDAxMVoXDTI2MTAzMTAxMDAxMVowLzEtMCsGA1UEAxMk
MzlmMGYxM2EtM2Y3MS00MTUwLTk5MjMtZGViYTAwODk2MDc1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAieqW4ZxQzedKvHGQGReoyVmaJt/ZQog4TSMW
rGcnTxCO77PGVjd+yRQwomOcsT59R8ucAYe/QVQM6xQtSfRpGmg6K6NaF8UJMp98
rnSPoR5cm5l6YRVk7YHKJYaV4ywSyrfr9AOcq0vttvswFh3G4KyZMcsH3YntNQhz
K0BOKAvexWphLuEE3P+taUJW+NBUfYLb5Xi2734qsPvZ40OTr/9CRjLTHaejDjzw
fBU2VKRtJ/NaKIH53Lg5ySYIe043XCarljIr+pjhEZJvhBI8tHDMhmjSewB9Z1Mk
DaWvRUEVC2SToavTpR2iDPg29P5zLFFU/CNXrkAv21wvV5cZ3QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCAfdjZdDxf+Pgs2GxjUEzupb4jqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOTNjOWYyMzctNjNmNy0z
MDYxLTgzN2YtNTAyNzc2NzgyMzBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAP/zsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAa3b29dCE0k1+Bjf1NmPDXpPgP2jG8/l00yAJfys4WFWpeT6S0ynZx5
c0996IU8CxrnU8HL1h+xKR0w+t6Hrte6G2TCP2lqTcGksPBxuo/dfmqnuR+FuMee
G2H1N9QhXwdZbdDUu+kTGlMnY2utMc8utqc58af1cDA6CmLk6pS9ePqfFdAbGee+
JmOLZ9l5uE6qmibU70ma6poQQ/4rm0zaTBG5RcoBMGlBiSQRRSHtsZzl65bclr33
IqdgGn8RVgTgBjwdIn9BuSpyvP6/NXv1KS5lJQorN/k80Ci3oTnX1231EDSXn+D6
EGx6kCjxBfANg0ShX43kDGHVXdVLQHc=
-----END CERTIFICATE-----
Generated at Thu Aug 27 11:38:52 2026 by rpki-client