Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0192393b-339b-3f38-9f75-d4f7994dce0e.roa
File:                     0192393b-339b-3f38-9f75-d4f7994dce0e.roa (raw, json)
Hash identifier:          tEX392GJ6fMJTvB0kaTQu4RteQ6+Rp7s4t5jZ9RfEOo=
Subject key identifier:   0C:9D:B9:99:97:88:0C:9B:E0:F9:65:13:99:F1:E2:8B:51:A7:74:E8
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584D00B25A6882022490AAB36000
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0192393b-339b-3f38-9f75-d4f7994dce0e.roa
Signing time:             Fri 27 Feb 2026 14:00:40 +0000
ROA not before:           Fri 27 Feb 2026 14:00:40 +0000
ROA not after:            Thu 28 May 2026 13:00:40 +0000
asID:                     7029
IP address blocks:        173.189.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:00:b2:5a:68:82:02:24:90:aa:b3:60:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Feb 27 14:00:40 2026 GMT
            Not After : May 28 13:00:40 2026 GMT
        Subject: CN=c94b95c1-8781-4940-8d16-47ff9ae7f25b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:74:1f:05:82:30:7b:54:62:59:fa:36:73:40:
                    51:5b:d0:38:52:98:94:02:87:8c:e9:51:fb:42:5a:
                    b6:a7:bc:ce:86:a8:b4:a6:1f:2a:63:70:cb:97:68:
                    17:77:95:5e:87:aa:39:e2:87:92:fa:df:44:48:ea:
                    dd:e8:fe:aa:a4:5b:f0:7d:b5:23:d3:d6:27:bf:ae:
                    d5:4c:5b:a7:32:a9:6f:4d:27:e2:93:6e:5c:6e:1c:
                    b2:eb:82:0e:e4:c6:76:49:e6:84:12:64:94:a3:26:
                    8a:59:15:bb:d4:67:f6:75:f7:e3:74:d9:cb:d8:70:
                    f4:76:75:a6:48:ab:cd:7e:a9:ee:ae:0c:3e:fe:62:
                    ea:c8:68:e1:db:1f:60:80:6b:18:c0:dd:4e:9b:1e:
                    c6:f3:b8:38:f1:17:8d:2d:cf:67:2b:3a:69:83:24:
                    86:3c:eb:9d:a3:7d:4c:63:f8:ce:21:ea:80:8d:dd:
                    12:2b:25:13:42:14:93:8d:2e:ad:00:31:81:10:bc:
                    ce:b1:d3:df:97:ba:13:8e:7c:be:b9:9b:e7:57:d7:
                    06:18:ab:27:da:d7:79:41:d8:23:26:80:ba:c7:e6:
                    67:e2:2a:fa:3f:18:d3:b3:8a:a3:65:ed:51:07:64:
                    ff:12:8f:fe:a0:60:2d:02:b3:49:2d:f9:97:1e:af:
                    23:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:9D:B9:99:97:88:0C:9B:E0:F9:65:13:99:F1:E2:8B:51:A7:74:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0192393b-339b-3f38-9f75-d4f7994dce0e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.189.65.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:89:d2:42:b6:f9:62:e7:63:e2:30:a4:36:8e:53:a2:96:f8:
         de:b6:c9:e8:6a:37:4c:e6:e3:35:e7:d9:19:bc:99:b8:11:a2:
         a1:ca:e9:c5:4f:14:0d:c4:dc:53:4c:e8:ae:97:c9:24:ad:6c:
         f3:8f:bf:92:e1:4e:d2:0e:0a:c2:38:79:82:2c:cd:cf:83:c1:
         53:18:f4:25:26:a5:5e:a8:ce:3e:f7:e3:c9:4f:39:01:fa:54:
         73:3f:d7:7c:c9:ad:80:22:dd:fc:ce:1d:9e:09:5c:66:e6:0d:
         26:45:79:53:be:57:73:f2:9a:c1:5c:7e:3c:70:b7:f4:c7:37:
         f2:0a:b7:4f:04:cf:87:30:83:64:5c:77:a1:27:fe:43:bd:fd:
         8b:cf:ba:81:21:41:32:84:6f:38:cd:82:1c:d5:8c:e3:18:fb:
         ca:5d:1f:49:e4:c2:c6:5c:0c:6c:71:ff:8b:09:3b:11:b6:3e:
         a4:8a:12:62:7d:e1:49:85:54:28:64:75:00:41:24:32:28:54:
         f9:a6:68:c8:a3:2b:83:a9:fb:44:99:a1:9a:ea:ee:2f:ea:d6:
         a7:73:0e:0d:43:97:cf:08:65:91:a5:66:f2:c8:56:52:e6:46:
         40:ae:8f:55:9d:62:ff:94:5d:e4:9a:92:cb:20:77:d9:ee:10:
         b0:b5:81:a0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0AslpoggIkkKqzYAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTI2MDIyNzE0MDA0MFoXDTI2MDUyODEzMDA0MFowLzEtMCsGA1UEAxMk
Yzk0Yjk1YzEtODc4MS00OTQwLThkMTYtNDdmZjlhZTdmMjViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAonQfBYIwe1RiWfo2c0BRW9A4UpiUAoeM6VH7
Qlq2p7zOhqi0ph8qY3DLl2gXd5Veh6o54oeS+t9ESOrd6P6qpFvwfbUj09Ynv67V
TFunMqlvTSfik25cbhyy64IO5MZ2SeaEEmSUoyaKWRW71Gf2dffjdNnL2HD0dnWm
SKvNfqnurgw+/mLqyGjh2x9ggGsYwN1Omx7G87g48ReNLc9nKzppgySGPOudo31M
Y/jOIeqAjd0SKyUTQhSTjS6tADGBELzOsdPfl7oTjny+uZvnV9cGGKsn2td5Qdgj
JoC6x+Zn4ir6PxjTs4qjZe1RB2T/Eo/+oGAtArNJLfmXHq8jywIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAyduZmXiAyb4PllE5nx4otRp3ToMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMDE5MjM5M2ItMzM5Yi0z
ZjM4LTlmNzUtZDRmNzk5NGRjZTBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArb1BMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGiJ0kK2+WLnY+IwpDaOU6KW+N62yehqN0zm4zXn2Rm8mbgRoqHK6cVP
FA3E3FNM6K6XySStbPOPv5LhTtIOCsI4eYIszc+DwVMY9CUmpV6ozj7348lPOQH6
VHM/13zJrYAi3fzOHZ4JXGbmDSZFeVO+V3PymsFcfjxwt/THN/IKt08Ez4cwg2Rc
d6En/kO9/YvPuoEhQTKEbzjNghzVjOMY+8pdH0nkwsZcDGxx/4sJOxG2PqSKEmJ9
4UmFVChkdQBBJDIoVPmmaMijK4Op+0SZoZrq7i/q1qdzDg1Dl88IZZGlZvLIVlLm
RkCuj1WdYv+UXeSakssgd9nuELC1gaA=
-----END CERTIFICATE-----
Generated at Sun Mar 1 18:52:13 2026 by rpki-client