Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f2756625-3400-3b21-b99a-4860555ace81.roa
File:                     f2756625-3400-3b21-b99a-4860555ace81.roa (raw, json)
Hash identifier:          ZuGQ153+uiU+83KxXobL+S9hkuoVirDCUuWwD0oPvwY=
Subject key identifier:   0D:CB:F9:A5:1A:65:E8:03:4C:55:23:A7:E1:2D:51:5D:3E:42:CF:C5
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584EA78F2AE81146DCC89B0D8980
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f2756625-3400-3b21-b99a-4860555ace81.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     7029
IP address blocks:        173.187.208.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:8f:2a:e8:11:46:dc:c8:9b:0d:89:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=76403dac-37d5-4e24-95b0-ff07ebd20033
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:79:e0:36:08:ab:ec:be:99:77:b5:28:47:8b:
                    3c:c7:86:8c:37:85:37:e5:6f:08:a3:1b:e8:4f:09:
                    4b:6e:3d:bb:29:37:56:d5:1a:ab:b3:8e:d2:e4:ff:
                    43:3f:ce:92:14:66:97:40:43:5b:21:e2:42:4e:be:
                    89:ef:2c:03:35:b0:d4:79:0f:90:f5:1f:92:79:48:
                    c4:3c:05:37:13:c1:f9:c9:30:63:f9:37:d0:53:7e:
                    21:ee:94:dc:8b:36:17:9b:33:b2:29:1a:85:fc:78:
                    52:ef:e1:0d:9f:e0:16:4b:75:bd:b4:4b:35:63:93:
                    d5:10:58:78:ff:fa:1b:28:76:28:53:1d:99:1e:1f:
                    7d:5a:70:d2:fc:8a:8a:c1:75:2c:75:26:0c:7b:cb:
                    70:e4:96:6b:cb:44:ac:17:33:56:f2:44:b1:e2:ef:
                    4d:81:b5:86:b5:db:e6:65:07:5a:b5:ec:cd:70:bb:
                    a3:a5:d5:ec:da:e6:bf:aa:7c:c6:c2:0f:03:36:a8:
                    2a:5b:74:c6:c5:82:08:6b:0c:d8:0e:90:50:50:94:
                    00:71:80:0f:36:cd:ad:b7:65:a3:a3:da:15:ba:c3:
                    b9:4c:93:f0:f1:42:ad:4b:fb:f0:25:37:d1:fc:05:
                    e7:44:e5:7f:9c:35:7e:c7:dd:ff:12:1a:2d:99:e3:
                    f1:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:CB:F9:A5:1A:65:E8:03:4C:55:23:A7:E1:2D:51:5D:3E:42:CF:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f2756625-3400-3b21-b99a-4860555ace81.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.187.208.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:25:51:39:05:ca:07:ff:75:31:c0:ef:9e:fa:44:bc:1d:dc:
         3f:cf:62:e8:22:cf:38:a7:6f:b2:8f:57:fc:6a:78:39:ee:c9:
         61:e1:f6:89:d9:5b:b2:66:bc:32:16:48:32:f7:53:06:bc:3a:
         6b:0b:c5:ff:1e:69:1c:05:86:61:74:f7:40:e0:4a:53:35:00:
         e8:8b:18:1b:9f:ad:24:0c:e2:e3:ab:6d:1e:c1:87:2d:63:c1:
         0a:7c:7e:0b:17:09:1e:a8:da:09:91:2d:36:33:83:63:5f:33:
         03:5d:05:13:cb:6e:15:b0:03:f1:c7:b8:49:58:0c:04:f4:62:
         20:5a:1f:ae:ce:86:db:07:1b:34:f5:49:75:77:e5:ad:ac:d3:
         4a:7b:66:17:a7:b9:d6:e4:71:f3:eb:0c:2c:ca:92:bd:50:e2:
         e4:43:85:92:ae:a7:d6:a4:41:82:58:5f:dd:31:6c:9e:b1:2f:
         16:ce:c1:2c:8e:98:5d:9e:9c:53:80:a9:27:8f:d1:f3:ab:bc:
         db:4d:c4:7b:c0:48:17:a3:fc:4c:ef:80:08:8f:8b:70:fa:2e:
         a3:76:b7:d6:17:84:2b:26:82:1f:d9:5e:d1:b4:57:69:93:dd:
         38:5a:f6:ca:9d:14:4f:74:e0:64:12:66:c3:05:ea:42:dc:1f:
         42:c0:78:85
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6njyroEUbcyJsNiYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
NzY0MDNkYWMtMzdkNS00ZTI0LTk1YjAtZmYwN2ViZDIwMDMzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp3ngNgir7L6Zd7UoR4s8x4aMN4U35W8Ioxvo
TwlLbj27KTdW1Rqrs47S5P9DP86SFGaXQENbIeJCTr6J7ywDNbDUeQ+Q9R+SeUjE
PAU3E8H5yTBj+TfQU34h7pTcizYXmzOyKRqF/HhS7+ENn+AWS3W9tEs1Y5PVEFh4
//obKHYoUx2ZHh99WnDS/IqKwXUsdSYMe8tw5JZry0SsFzNW8kSx4u9NgbWGtdvm
ZQdatezNcLujpdXs2ua/qnzGwg8DNqgqW3TGxYIIawzYDpBQUJQAcYAPNs2tt2Wj
o9oVusO5TJPw8UKtS/vwJTfR/AXnROV/nDV+x93/EhotmePxzwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFA3L+aUaZegDTFUjp+EtUV0+Qs/FMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZjI3NTY2MjUtMzQwMC0z
YjIxLWI5OWEtNDg2MDU1NWFjZTgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrbvQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF8lUTkFygf/dTHA7576RLwd3D/PYugizzinb7KPV/xqeDnuyWHh9onZ
W7JmvDIWSDL3Uwa8OmsLxf8eaRwFhmF090DgSlM1AOiLGBufrSQM4uOrbR7Bhy1j
wQp8fgsXCR6o2gmRLTYzg2NfMwNdBRPLbhWwA/HHuElYDAT0YiBaH67OhtsHGzT1
SXV35a2s00p7ZhenudbkcfPrDCzKkr1Q4uRDhZKup9akQYJYX90xbJ6xLxbOwSyO
mF2enFOAqSeP0fOrvNtNxHvASBej/EzvgAiPi3D6LqN2t9YXhCsmgh/ZXtG0V2mT
3Tha9sqdFE904GQSZsMF6kLcH0LAeIU=
-----END CERTIFICATE-----
Generated at Thu Aug 27 09:49:50 2026 by rpki-client