Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c3503e4d-f8af-3c8f-9581-42da4ef0073e.roa
File:                     c3503e4d-f8af-3c8f-9581-42da4ef0073e.roa (raw, json)
Hash identifier:          riktUZ2bL5SYwc26Ndt2AJoTfnQgGpwz2N8o1YR1Pms=
Subject key identifier:   D2:92:35:CA:2E:77:99:25:73:2D:82:A2:EE:15:96:D3:BB:E4:6B:57
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584CEA5CFB5888F95FC778603400
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c3503e4d-f8af-3c8f-9581-42da4ef0073e.roa
Signing time:             Thu 19 Feb 2026 14:00:40 +0000
ROA not before:           Thu 19 Feb 2026 14:00:40 +0000
ROA not after:            Wed 20 May 2026 13:00:40 +0000
asID:                     7029
IP address blocks:        151.213.0.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Feb 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ea:5c:fb:58:88:f9:5f:c7:78:60:34:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Feb 19 14:00:40 2026 GMT
            Not After : May 20 13:00:40 2026 GMT
        Subject: CN=0f717c8b-74ca-4e49-87be-91b5f0f1e92d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:0b:dd:15:8f:d4:4f:11:72:38:1d:14:cb:19:
                    61:60:75:84:c2:7f:a6:97:0d:89:02:f1:d0:27:b7:
                    6a:06:d3:01:8f:9b:9a:29:9f:76:1e:e6:bb:f7:13:
                    fe:32:67:4b:5c:b1:eb:e3:8b:12:a8:ed:94:54:9c:
                    02:3b:9a:9e:16:f5:0e:95:00:8a:dc:f9:58:5c:6d:
                    27:86:5b:98:ee:66:c7:e1:c2:77:80:b6:8e:de:8b:
                    6e:ad:93:2d:f5:23:f6:0f:40:1d:14:4c:ca:28:40:
                    f9:00:ef:11:96:8c:22:33:8c:d0:97:a9:c9:ce:fd:
                    ef:e6:ef:9a:02:c7:34:63:c5:b6:5e:05:4d:a9:2d:
                    ee:4e:8d:69:98:d8:6d:55:e4:43:d8:72:3c:b0:90:
                    ee:ec:88:55:14:9a:f8:3e:b7:e8:67:2f:eb:ad:d9:
                    ab:a8:f9:98:ea:22:ed:88:01:b2:aa:84:78:fc:ae:
                    71:0b:af:51:5b:84:ff:a7:57:74:f6:88:cc:5e:a8:
                    71:25:91:1b:6a:d1:60:2c:b1:83:18:e2:b0:ec:95:
                    f0:62:e7:9f:4f:df:e7:0d:e4:87:e0:9f:60:5e:57:
                    c3:4e:a5:f8:44:ab:ba:1e:99:4e:f4:df:cd:03:a2:
                    02:90:f7:23:b5:2c:b8:04:75:2f:f9:45:71:16:9b:
                    ca:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:92:35:CA:2E:77:99:25:73:2D:82:A2:EE:15:96:D3:BB:E4:6B:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c3503e4d-f8af-3c8f-9581-42da4ef0073e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.213.0.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:53:1c:ec:3c:45:55:1f:ca:b6:3d:08:6e:f9:94:41:4c:b1:
         25:32:7a:66:2a:55:5b:59:7a:da:be:59:ae:a0:65:6b:38:71:
         c2:cb:81:2f:3d:49:fb:cf:49:86:28:0d:8d:82:73:92:60:1e:
         67:6a:db:53:7b:c5:6f:66:2d:26:94:6d:d5:f8:b4:9c:d6:35:
         66:e8:df:73:2a:4b:35:32:6b:f0:77:db:74:d1:94:a9:8f:25:
         42:36:61:98:2a:66:31:78:b5:89:bb:65:77:e4:22:7f:2a:b8:
         82:fe:50:9d:49:d1:a5:cd:df:4e:8c:95:34:ef:ff:27:0b:47:
         c1:ba:27:0a:b0:2d:82:6c:b8:19:aa:04:fc:b2:e7:1a:b5:48:
         57:33:4a:82:6b:cb:03:3e:e1:d5:e2:a6:39:59:c5:b9:95:c5:
         e8:90:81:04:be:71:9e:1b:ac:e3:cd:67:c1:5d:e7:8e:59:fc:
         9a:53:2f:86:e5:15:10:cb:bc:78:55:e7:73:67:bf:69:7d:29:
         3d:61:57:43:80:63:42:72:56:ae:92:80:da:31:bd:b0:72:8d:
         7a:97:99:81:a1:df:e7:f2:0a:d9:6e:f7:95:d2:3d:1d:20:d3:
         7d:b5:ef:fd:53:8b:cb:87:f5:c6:40:9b:8a:36:2d:83:a7:a8:
         ee:e6:d0:51
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzqXPtYiPlfx3hgNAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTI2MDIxOTE0MDA0MFoXDTI2MDUyMDEzMDA0MFowLzEtMCsGA1UEAxMk
MGY3MTdjOGItNzRjYS00ZTQ5LTg3YmUtOTFiNWYwZjFlOTJkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAugvdFY/UTxFyOB0UyxlhYHWEwn+mlw2JAvHQ
J7dqBtMBj5uaKZ92Hua79xP+MmdLXLHr44sSqO2UVJwCO5qeFvUOlQCK3PlYXG0n
hluY7mbH4cJ3gLaO3oturZMt9SP2D0AdFEzKKED5AO8RlowiM4zQl6nJzv3v5u+a
Asc0Y8W2XgVNqS3uTo1pmNhtVeRD2HI8sJDu7IhVFJr4PrfoZy/rrdmrqPmY6iLt
iAGyqoR4/K5xC69RW4T/p1d09ojMXqhxJZEbatFgLLGDGOKw7JXwYuefT9/nDeSH
4J9gXlfDTqX4RKu6HplO9N/NA6ICkPcjtSy4BHUv+UVxFpvKfwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNKSNcoud5klcy2Cou4VltO75GtXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYzM1MDNlNGQtZjhhZi0z
YzhmLTk1ODEtNDJkYTRlZjAwNzNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCl9UAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAExTHOw8RVUfyrY9CG75lEFMsSUyemYqVVtZetq+Wa6gZWs4ccLLgS89
SfvPSYYoDY2Cc5JgHmdq21N7xW9mLSaUbdX4tJzWNWbo33MqSzUya/B323TRlKmP
JUI2YZgqZjF4tYm7ZXfkIn8quIL+UJ1J0aXN306MlTTv/ycLR8G6JwqwLYJsuBmq
BPyy5xq1SFczSoJrywM+4dXipjlZxbmVxeiQgQS+cZ4brOPNZ8Fd545Z/JpTL4bl
FRDLvHhV53Nnv2l9KT1hV0OAY0JyVq6SgNoxvbByjXqXmYGh3+fyCtlu95XSPR0g
03217/1Ti8uH9cZAm4o2LYOnqO7m0FE=
-----END CERTIFICATE-----
Generated at Thu Feb 26 06:33:09 2026 by rpki-client