Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8dacf3-283f-4888-8217-ee30c6e58c44/49e77d26-2107-380e-bb25-0554a686ecc5.roa
File:                     49e77d26-2107-380e-bb25-0554a686ecc5.roa (raw, json)
Hash identifier:          iK5/lF5u530uYCg46SpQS0y10i6ZmfLPUoeDUCLLSQ0=
Subject key identifier:   18:33:2D:5A:7B:0A:93:C0:47:8F:0B:83:53:C6:72:FF:32:A2:E1:2E
Certificate issuer:       /CN=dc8dacf3-283f-4888-8217-ee30c6e58c44
Certificate serial:       010D0C9F4328584F85787A89FC727B412C869900
Authority key identifier: BC:78:88:8A:0C:C4:26:DC:74:DC:53:A1:5F:F0:3B:F8:4A:D7:51:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8dacf3-283f-4888-8217-ee30c6e58c44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8dacf3-283f-4888-8217-ee30c6e58c44/49e77d26-2107-380e-bb25-0554a686ecc5.roa
Signing time:             Fri 16 Oct 2026 13:00:12 +0000
ROA not before:           Fri 16 Oct 2026 13:00:12 +0000
ROA not after:            Thu 14 Jan 2027 14:00:12 +0000
asID:                     14434
IP address blocks:        172.102.224.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8dacf3-283f-4888-8217-ee30c6e58c44/dc8dacf3-283f-4888-8217-ee30c6e58c44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8dacf3-283f-4888-8217-ee30c6e58c44/dc8dacf3-283f-4888-8217-ee30c6e58c44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8dacf3-283f-4888-8217-ee30c6e58c44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 20 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:85:78:7a:89:fc:72:7b:41:2c:86:99:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc8dacf3-283f-4888-8217-ee30c6e58c44
        Validity
            Not Before: Oct 16 13:00:12 2026 GMT
            Not After : Jan 14 14:00:12 2027 GMT
        Subject: CN=5a59ff6a-2fea-4f6b-a51e-f2a78802b62c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:eb:75:12:a3:29:5e:3f:0a:c9:05:4d:5f:b9:
                    b5:2b:59:8b:35:01:74:2b:61:79:e0:e7:d2:9b:b2:
                    96:a7:05:9c:33:6c:36:b1:2b:41:7b:ee:f8:8e:ee:
                    e9:21:96:74:70:e4:63:28:37:58:b7:28:7f:8b:15:
                    83:bc:cd:37:1c:e6:90:4c:2d:b9:94:6e:fb:7f:6f:
                    1f:d5:dd:87:ed:e7:47:63:00:b6:89:32:97:f9:15:
                    55:fe:77:4e:b8:61:f6:3b:b2:48:7c:63:06:e7:a3:
                    cc:87:2b:76:a5:48:c7:ff:5f:46:0b:a5:51:13:cb:
                    6f:84:44:87:01:8e:02:e8:96:ec:f8:b4:21:7d:9e:
                    be:a1:2b:69:4c:c6:f0:f4:83:b9:67:c3:57:e0:07:
                    8c:9f:91:cc:55:8d:d2:58:83:54:61:4a:ad:2f:0e:
                    97:67:a2:d2:d3:54:d0:6c:c9:5f:c0:7d:f8:d1:8f:
                    70:93:74:1d:d1:bd:da:ae:e5:73:dc:bf:48:02:5b:
                    fc:3d:2a:77:d2:6d:25:c6:73:08:b7:f4:f4:87:7b:
                    ff:ce:96:55:54:6d:e6:63:bf:ea:49:8f:af:6b:fe:
                    5e:31:a5:87:be:41:a0:d3:4e:93:3c:0b:c4:01:5f:
                    ec:69:a5:a6:c0:d7:2b:8c:b6:5c:12:84:7b:96:84:
                    dd:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:33:2D:5A:7B:0A:93:C0:47:8F:0B:83:53:C6:72:FF:32:A2:E1:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8dacf3-283f-4888-8217-ee30c6e58c44/49e77d26-2107-380e-bb25-0554a686ecc5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8dacf3-283f-4888-8217-ee30c6e58c44/dc8dacf3-283f-4888-8217-ee30c6e58c44.crl

            X509v3 Authority Key Identifier:
                keyid:BC:78:88:8A:0C:C4:26:DC:74:DC:53:A1:5F:F0:3B:F8:4A:D7:51:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8dacf3-283f-4888-8217-ee30c6e58c44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.102.224.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:6d:1e:34:cd:5f:b8:d2:ad:70:b3:bc:dc:af:b5:87:99:d1:
         a3:bf:62:c1:37:af:97:a9:55:56:92:5c:35:81:2a:3d:98:2b:
         aa:01:f3:4b:e3:9a:3c:84:12:53:b8:53:37:ce:39:8b:67:f9:
         d7:44:9d:23:11:d7:0b:d4:8a:e6:a1:3b:ea:57:f1:9b:39:1c:
         04:73:24:dc:fc:b1:38:e0:69:e3:e4:a9:49:e1:ed:3c:18:24:
         7e:17:87:77:b6:9b:38:cc:85:a8:75:49:9b:5d:88:a9:c8:46:
         b2:21:b8:b5:a9:d8:ad:1d:9c:a7:d2:76:54:2d:69:2e:a6:a9:
         09:03:7e:66:24:c2:9e:30:4b:13:20:ba:e2:46:30:6c:5d:f7:
         93:96:f5:e8:8a:93:7f:c0:43:21:4b:de:3c:e2:cd:0d:e1:86:
         2c:24:80:ca:da:fd:0c:dd:24:eb:ce:71:41:14:80:9c:7f:9b:
         a6:82:7e:d2:14:b9:4f:9f:d3:e2:1f:a1:1e:ab:f4:98:16:ed:
         a8:5e:77:d0:e5:af:ac:5f:f7:9f:48:68:28:3d:d9:ad:56:7d:
         81:aa:4d:a5:f7:cf:78:bb:57:6c:28:94:95:b5:62:5a:b5:da:
         9c:1d:f2:91:db:10:e5:c2:96:f2:de:b9:da:4c:0c:9d:1e:99:
         0e:a0:a1:35
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+FeHqJ/HJ7QSyGmQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGM4ZGFjZjMtMjgzZi00ODg4LTgyMTctZWUzMGM2ZTU4
YzQ0MB4XDTI2MTAxNjEzMDAxMloXDTI3MDExNDE0MDAxMlowLzEtMCsGA1UEAxMk
NWE1OWZmNmEtMmZlYS00ZjZiLWE1MWUtZjJhNzg4MDJiNjJjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAket1EqMpXj8KyQVNX7m1K1mLNQF0K2F54OfS
m7KWpwWcM2w2sStBe+74ju7pIZZ0cORjKDdYtyh/ixWDvM03HOaQTC25lG77f28f
1d2H7edHYwC2iTKX+RVV/ndOuGH2O7JIfGMG56PMhyt2pUjH/19GC6VRE8tvhESH
AY4C6Jbs+LQhfZ6+oStpTMbw9IO5Z8NX4AeMn5HMVY3SWINUYUqtLw6XZ6LS01TQ
bMlfwH340Y9wk3Qd0b3aruVz3L9IAlv8PSp30m0lxnMIt/T0h3v/zpZVVG3mY7/q
SY+va/5eMaWHvkGg006TPAvEAV/saaWmwNcrjLZcEoR7loTdSwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBgzLVp7CpPAR48Lg1PGcv8youEuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9kYzhk
YWNmMy0yODNmLTQ4ODgtODIxNy1lZTMwYzZlNThjNDQvNDllNzdkMjYtMjEwNy0z
ODBlLWJiMjUtMDU1NGE2ODZlY2M1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZGM4ZGFjZjMtMjgzZi00ODg4LTgy
MTctZWUzMGM2ZTU4YzQ0L2RjOGRhY2YzLTI4M2YtNDg4OC04MjE3LWVlMzBjNmU1
OGM0NC5jcmwwHwYDVR0jBBgwFoAUvHiIigzEJtx03FOhX/A7+ErXURMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9kYzhkYWNmMy0yODNmLTQ4ODgtODIxNy1lZTMw
YzZlNThjNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrGbgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIdtHjTNX7jSrXCzvNyvtYeZ0aO/YsE3r5epVVaSXDWBKj2YK6oB80vj
mjyEElO4UzfOOYtn+ddEnSMR1wvUiuahO+pX8Zs5HARzJNz8sTjgaePkqUnh7TwY
JH4Xh3e2mzjMhah1SZtdiKnIRrIhuLWp2K0dnKfSdlQtaS6mqQkDfmYkwp4wSxMg
uuJGMGxd95OW9eiKk3/AQyFL3jzizQ3hhiwkgMra/QzdJOvOcUEUgJx/m6aCftIU
uU+f0+IfoR6r9JgW7ahed9Dlr6xf959IaCg92a1WfYGqTaX3z3i7V2wolJW1Ylq1
2pwd8pHbEOXClvLeudpMDJ0emQ6goTU=
-----END CERTIFICATE-----
Generated at Sun Oct 18 11:29:33 2026 by rpki-client