Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/98035b9f-7634-35d4-9ec6-1ce7fae5f9f5.roa
File:                     98035b9f-7634-35d4-9ec6-1ce7fae5f9f5.roa (raw, json)
Hash identifier:          Aw2xjJ1ZtInEFN5gW+/aRM9aXyQ6XTWesoomKVuLhrc=
Subject key identifier:   C8:DA:28:CE:70:14:C5:1F:10:08:4D:FF:2A:2A:0D:96:46:22:83:E6
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584EA78FCD06CB43B1CA8561F180
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/98035b9f-7634-35d4-9ec6-1ce7fae5f9f5.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     7029
IP address blocks:        75.89.40.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:8f:cd:06:cb:43:b1:ca:85:61:f1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=9f5c6b2c-067a-4604-981f-5030a76a4779
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:a4:91:60:dc:e9:46:06:32:ca:32:23:08:6c:
                    85:3a:2e:b4:ab:5e:1f:1b:48:b6:51:cc:8b:56:ae:
                    8e:5b:36:a2:35:6f:88:6c:bb:c2:e2:1d:60:86:b0:
                    8e:ba:8e:9b:b6:9b:59:37:79:e6:95:9a:48:8f:5b:
                    a6:33:9e:31:13:a1:70:6b:42:43:d5:16:5e:d3:bc:
                    a8:d5:2e:49:76:7e:0b:3e:5a:98:92:b4:5d:42:6f:
                    72:79:ce:2a:d2:00:8c:2e:fc:94:1f:2b:2f:60:04:
                    f1:07:5e:2c:02:73:b7:45:0f:bc:e5:d2:9e:21:b9:
                    17:b8:2f:cd:61:3e:b0:e0:1f:47:c7:ca:43:48:a3:
                    11:f1:a8:ad:67:7c:5b:13:3b:c2:3b:c5:3e:c2:9e:
                    b1:1c:f6:71:d1:4d:7b:9a:75:13:91:be:8c:8f:35:
                    89:7c:63:2b:77:b4:33:f5:f3:fb:12:4d:e5:76:d4:
                    c6:d7:83:ee:94:66:28:14:95:de:58:78:ce:f1:cd:
                    86:8f:01:9a:73:fd:8a:25:22:55:b2:f7:54:28:ad:
                    6e:a5:8a:fd:97:f1:8a:b2:9a:b3:12:6d:6b:84:42:
                    8d:81:69:8c:db:97:21:5b:ae:6c:cd:4b:20:3a:2f:
                    ae:00:5d:eb:95:fe:a1:85:7b:86:d1:f8:77:7f:c2:
                    f3:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:DA:28:CE:70:14:C5:1F:10:08:4D:FF:2A:2A:0D:96:46:22:83:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/98035b9f-7634-35d4-9ec6-1ce7fae5f9f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.89.40.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:fe:6a:f3:b2:03:b7:94:3f:70:ce:fd:ca:86:22:34:95:61:
         60:4b:a8:74:f3:9d:f7:4a:95:44:49:e0:68:03:5a:ce:66:28:
         72:9d:59:ff:d2:4f:43:17:05:81:91:50:81:5b:a4:f0:8d:67:
         ae:0f:8b:0f:e5:0a:74:17:39:df:4e:67:48:04:32:8b:48:f9:
         00:5e:5a:89:c4:05:8c:10:01:78:20:4f:dd:43:65:e1:59:15:
         5e:12:e3:26:1e:54:cf:18:0b:72:57:73:30:e2:3a:0e:5c:c8:
         7b:3d:fd:e5:81:dd:98:b0:e5:fb:a4:ac:de:bd:32:8d:35:c1:
         4c:03:30:19:f2:c5:41:ac:29:0c:50:e7:da:af:b1:45:59:51:
         23:15:fa:32:b9:43:cb:e6:23:ce:3c:60:21:d7:60:1f:fb:48:
         0d:0c:a0:4d:0e:3d:73:b4:d8:cc:2a:93:ad:11:0c:02:ac:b7:
         91:cb:2d:9e:9c:8a:a6:4b:83:01:88:bb:ac:55:5b:81:6f:78:
         23:89:5b:33:90:c9:0e:e9:0a:89:01:f9:7f:52:ee:3a:d9:a4:
         b2:bc:62:e2:2d:c5:1b:b5:21:5d:12:f3:a7:23:b4:b3:56:b3:
         d2:55:93:df:9e:5a:85:0b:a5:e1:22:b5:95:0b:63:30:f3:2f:
         98:fa:ed:27
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nj80Gy0OxyoVh8YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
OWY1YzZiMmMtMDY3YS00NjA0LTk4MWYtNTAzMGE3NmE0Nzc5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxqSRYNzpRgYyyjIjCGyFOi60q14fG0i2UcyL
Vq6OWzaiNW+IbLvC4h1ghrCOuo6btptZN3nmlZpIj1umM54xE6Fwa0JD1RZe07yo
1S5Jdn4LPlqYkrRdQm9yec4q0gCMLvyUHysvYATxB14sAnO3RQ+85dKeIbkXuC/N
YT6w4B9Hx8pDSKMR8aitZ3xbEzvCO8U+wp6xHPZx0U17mnUTkb6MjzWJfGMrd7Qz
9fP7Ek3ldtTG14PulGYoFJXeWHjO8c2GjwGac/2KJSJVsvdUKK1upYr9l/GKspqz
Em1rhEKNgWmM25chW65szUsgOi+uAF3rlf6hhXuG0fh3f8LzwQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMjaKM5wFMUfEAhN/yoqDZZGIoPmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOTgwMzViOWYtNzYzNC0z
NWQ0LTllYzYtMWNlN2ZhZTVmOWY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDS1koMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAj+avOyA7eUP3DO/cqGIjSVYWBLqHTznfdKlURJ4GgDWs5mKHKdWf/S
T0MXBYGRUIFbpPCNZ64Piw/lCnQXOd9OZ0gEMotI+QBeWonEBYwQAXggT91DZeFZ
FV4S4yYeVM8YC3JXczDiOg5cyHs9/eWB3Ziw5fukrN69Mo01wUwDMBnyxUGsKQxQ
59qvsUVZUSMV+jK5Q8vmI848YCHXYB/7SA0MoE0OPXO02Mwqk60RDAKst5HLLZ6c
iqZLgwGIu6xVW4FveCOJWzOQyQ7pCokB+X9S7jrZpLK8YuItxRu1IV0S86cjtLNW
s9JVk9+eWoULpeEitZULYzDzL5j67Sc=
-----END CERTIFICATE-----
Generated at Thu Aug 27 10:32:13 2026 by rpki-client