Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/49181f68-05b3-3ec9-92b2-2ae39c37f882.roa
File:                     49181f68-05b3-3ec9-92b2-2ae39c37f882.roa (raw, json)
Hash identifier:          VTLARsZRSPG2tbwt3tghIMBd7kuOwFejVw9f/N+kEmk=
Subject key identifier:   32:E5:94:0F:4F:6F:15:D3:FC:4C:45:F5:47:8A:3A:62:DD:4A:FB:2C
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D6EDA7CB9173B88FF25E276C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/49181f68-05b3-3ec9-92b2-2ae39c37f882.roa
Signing time:             Wed 08 Apr 2026 01:00:24 +0000
ROA not before:           Wed 08 Apr 2026 01:00:24 +0000
ROA not after:            Tue 07 Jul 2026 01:00:24 +0000
asID:                     397207
IP address blocks:        199.7.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6e:da:7c:b9:17:3b:88:ff:25:e2:76:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr  8 01:00:24 2026 GMT
            Not After : Jul  7 01:00:24 2026 GMT
        Subject: CN=bdc3b9f3-ca46-417b-ba6c-4d2fd4c5beb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:04:c1:59:57:7b:88:89:3e:de:ab:74:aa:c1:
                    54:49:00:21:45:79:89:f7:ce:22:2f:3e:2a:f8:ce:
                    7f:75:5f:32:a3:bc:02:2b:b6:7e:8a:af:13:f4:87:
                    c3:58:1d:fc:03:da:4b:a3:11:83:30:b2:d0:bf:43:
                    c9:cc:34:98:64:7d:32:e4:eb:59:4e:0b:88:cc:38:
                    be:b8:c7:ed:ba:31:02:17:f3:6f:79:b3:22:79:87:
                    06:17:c4:37:21:ce:ce:cc:8e:e7:c7:b2:33:53:44:
                    db:62:25:b2:9f:f1:90:a2:68:29:9c:e9:33:bf:b9:
                    40:10:94:ff:2e:6f:6a:d0:9d:46:7c:d8:18:07:2a:
                    21:1e:31:d9:9e:a0:94:1f:a5:47:d8:6d:c2:f5:74:
                    b0:29:5b:70:32:bf:c0:ca:cd:1a:0e:c5:eb:ae:11:
                    cc:ad:89:19:4e:64:d9:62:01:b1:ef:11:5f:6f:a9:
                    d6:5e:70:e8:6e:d2:fc:44:1c:ad:6a:d8:5a:45:a4:
                    0b:aa:fa:bb:54:20:6c:4b:e1:51:1d:0e:c3:ed:73:
                    2c:ed:cc:07:ee:c2:15:a5:73:0d:0c:c8:f5:74:71:
                    9f:9c:f8:6f:18:a1:a0:0a:fc:34:ab:05:c9:97:2f:
                    e7:9c:e7:78:bc:8a:df:46:0a:1e:28:3f:49:78:83:
                    62:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:E5:94:0F:4F:6F:15:D3:FC:4C:45:F5:47:8A:3A:62:DD:4A:FB:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/49181f68-05b3-3ec9-92b2-2ae39c37f882.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:d7:41:0e:e0:5d:70:0b:49:40:45:1f:60:c8:f3:3b:4a:27:
         9c:60:99:2f:c4:22:00:4a:50:9f:24:fc:12:62:6f:21:e8:2b:
         88:a4:88:e7:01:b6:15:af:a5:cd:7f:a6:6f:53:40:6f:b7:93:
         76:5e:93:cd:ec:75:9d:af:0e:49:55:94:93:a1:f0:53:ef:ad:
         37:b8:19:a0:c4:a6:64:d8:06:ae:14:ae:25:e1:b4:80:fc:ec:
         d4:dd:53:5b:bc:e9:e1:47:0e:d6:ab:f6:62:17:a5:71:35:3f:
         e4:ba:b0:e6:8b:27:c9:65:c3:45:c6:76:5b:fd:eb:ba:06:44:
         a5:ab:07:db:93:15:b8:c6:4e:4a:74:f3:8c:73:b0:68:32:e5:
         f4:a5:35:44:7b:ea:b6:92:e4:63:6f:64:ea:fa:e7:8d:53:d4:
         fb:1d:ff:9c:3a:10:46:20:5c:63:7e:e9:38:c1:8e:1d:cc:44:
         76:6e:c9:06:8c:27:e3:a6:20:e0:01:2c:40:d4:28:cb:a3:9f:
         aa:5e:1d:f7:1e:a5:db:0f:3a:e6:db:77:9c:4b:9b:1b:48:bc:
         23:91:ae:44:79:e6:20:cb:e8:95:20:64:79:9c:13:1a:4f:99:
         96:b6:46:4c:70:a9:e9:89:51:c0:d8:76:50:c7:15:a1:73:0f:
         bf:35:d8:45
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1u2ny5FzuI/yXidsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDQwODAxMDAyNFoXDTI2MDcwNzAxMDAyNFowLzEtMCsGA1UEAxMk
YmRjM2I5ZjMtY2E0Ni00MTdiLWJhNmMtNGQyZmQ0YzViZWI1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhQTBWVd7iIk+3qt0qsFUSQAhRXmJ984iLz4q
+M5/dV8yo7wCK7Z+iq8T9IfDWB38A9pLoxGDMLLQv0PJzDSYZH0y5OtZTguIzDi+
uMftujECF/NvebMieYcGF8Q3Ic7OzI7nx7IzU0TbYiWyn/GQomgpnOkzv7lAEJT/
Lm9q0J1GfNgYByohHjHZnqCUH6VH2G3C9XSwKVtwMr/Ays0aDsXrrhHMrYkZTmTZ
YgGx7xFfb6nWXnDobtL8RBytathaRaQLqvq7VCBsS+FRHQ7D7XMs7cwH7sIVpXMN
DMj1dHGfnPhvGKGgCvw0qwXJly/nnOd4vIrfRgoeKD9JeINi5wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDLllA9PbxXT/ExF9UeKOmLdSvssMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNDkxODFmNjgtMDViMy0z
ZWM5LTkyYjItMmFlMzljMzdmODgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwdHMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACPXQQ7gXXALSUBFH2DI8ztKJ5xgmS/EIgBKUJ8k/BJibyHoK4ikiOcB
thWvpc1/pm9TQG+3k3Zek83sdZ2vDklVlJOh8FPvrTe4GaDEpmTYBq4UriXhtID8
7NTdU1u86eFHDtar9mIXpXE1P+S6sOaLJ8llw0XGdlv967oGRKWrB9uTFbjGTkp0
84xzsGgy5fSlNUR76raS5GNvZOr6541T1Psd/5w6EEYgXGN+6TjBjh3MRHZuyQaM
J+OmIOABLEDUKMujn6peHfcepdsPOubbd5xLmxtIvCORrkR55iDL6JUgZHmcExpP
mZa2RkxwqemJUcDYdlDHFaFzD7812EU=
-----END CERTIFICATE-----
Generated at Fri Apr 17 12:20:38 2026 by rpki-client