Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/218756c3-af8c-38b1-b072-6e0e113f26f2.roa
File:                     218756c3-af8c-38b1-b072-6e0e113f26f2.roa (raw, json)
Hash identifier:          OrqA1ZQ8HQTyCXIUruvb8THg7jHHf0pqsbmimag8vBc=
Subject key identifier:   3D:54:DF:E5:F8:47:F1:DE:87:3E:73:7C:58:91:7D:1F:92:E4:DA:F8
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584F549D7804A0C07B6549D26980
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/218756c3-af8c-38b1-b072-6e0e113f26f2.roa
Signing time:             Tue 29 Sep 2026 01:00:12 +0000
ROA not before:           Tue 29 Sep 2026 01:00:12 +0000
ROA not after:            Mon 28 Dec 2026 02:00:12 +0000
asID:                     7029
IP address blocks:        204.32.224.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 04 Oct 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:54:9d:78:04:a0:c0:7b:65:49:d2:69:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Sep 29 01:00:12 2026 GMT
            Not After : Dec 28 02:00:12 2026 GMT
        Subject: CN=7a7cea73-f8a0-49a0-ad1e-e5b8b90c39c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:ec:7f:79:d1:78:ab:53:f6:35:40:f6:61:9e:
                    3a:8b:5d:66:7b:b0:ab:53:a8:ff:32:27:76:5e:3c:
                    38:a9:cf:64:f4:d7:73:f9:b6:0f:1d:86:d5:48:0d:
                    0d:50:8b:35:9e:9c:a7:34:b7:7c:ea:f1:fd:71:c6:
                    85:1d:88:36:09:de:26:3d:5b:a4:15:6c:1f:5f:82:
                    74:2c:5b:ac:a6:9d:13:a5:ef:d0:3d:73:b7:48:fb:
                    e0:e6:bc:c5:46:47:1d:ff:03:1e:51:fc:02:63:89:
                    a9:1b:75:da:1c:87:f9:d2:e7:c3:3b:2b:1e:e2:cc:
                    c1:44:1b:7a:2f:88:95:8f:28:82:5c:6f:fe:2f:18:
                    eb:6b:f3:b2:72:b5:84:0f:ea:56:0d:65:38:70:39:
                    e9:0a:79:ad:c6:85:a4:3f:0c:92:d4:79:8f:71:bb:
                    49:c3:be:82:9c:fb:97:00:fb:91:b6:c1:f2:9a:1e:
                    5f:d1:32:70:35:d1:7e:50:b0:0c:13:9e:57:93:6b:
                    ac:28:14:a5:25:b3:f5:a0:0b:f0:7b:66:90:6a:70:
                    8f:26:1c:42:5e:d1:fb:72:ac:ad:51:da:26:f5:ef:
                    fb:77:cd:8b:2f:01:8e:98:a6:fd:b4:5c:a4:ef:a7:
                    e6:84:72:a4:6c:9c:c1:22:65:4c:a7:41:c7:6d:9e:
                    6d:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:54:DF:E5:F8:47:F1:DE:87:3E:73:7C:58:91:7D:1F:92:E4:DA:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/218756c3-af8c-38b1-b072-6e0e113f26f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.32.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:2f:e1:15:bf:6e:79:c5:3f:24:9e:1f:e6:51:9e:a1:c9:c7:
         4b:c4:79:0b:5b:3a:41:ba:0a:aa:c5:9c:f8:a8:cb:37:54:38:
         59:1a:4d:9c:4c:69:13:54:81:5b:33:35:68:da:0a:16:66:f9:
         eb:40:7b:9e:f0:93:0d:a8:a5:eb:e6:1e:4b:95:ba:dd:e1:a5:
         38:9b:49:83:d5:88:c4:42:22:b5:da:ae:6f:ab:52:f8:07:57:
         6c:be:1c:e4:bd:79:a9:1f:f1:f5:ac:6f:7e:c9:02:ac:91:f4:
         1d:13:bf:ae:91:27:6f:b4:b4:27:b5:3f:e0:fa:b8:cc:6f:9f:
         13:85:44:02:a3:06:bd:5b:ca:da:05:6b:6a:1d:a8:b6:5b:a1:
         b2:48:d9:9a:d3:90:12:22:33:01:b6:2b:ad:53:fd:25:eb:29:
         52:e8:2e:12:76:4f:2d:63:c8:07:97:5c:8b:af:40:db:a4:1b:
         8b:c4:12:7b:3b:d9:e0:bb:41:38:94:7f:4f:ca:54:6e:07:36:
         fe:b7:fa:ff:d3:2f:3c:0f:18:68:8a:a3:e9:32:df:a8:df:6b:
         50:9e:1c:3c:94:2b:8a:c7:65:77:48:22:d9:06:d9:1f:2e:e4:
         ab:ed:e6:88:8e:03:60:c0:af:dd:7f:1d:56:e7:9e:8f:2f:d1:
         80:cf:30:c8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9UnXgEoMB7ZUnSaYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk
N2E3Y2VhNzMtZjhhMC00OWEwLWFkMWUtZTViOGI5MGMzOWMyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhOx/edF4q1P2NUD2YZ46i11me7CrU6j/Mid2
Xjw4qc9k9Ndz+bYPHYbVSA0NUIs1npynNLd86vH9ccaFHYg2Cd4mPVukFWwfX4J0
LFuspp0Tpe/QPXO3SPvg5rzFRkcd/wMeUfwCY4mpG3XaHIf50ufDOyse4szBRBt6
L4iVjyiCXG/+Lxjra/OycrWED+pWDWU4cDnpCnmtxoWkPwyS1HmPcbtJw76CnPuX
APuRtsHymh5f0TJwNdF+ULAME55Xk2usKBSlJbP1oAvwe2aQanCPJhxCXtH7cqyt
Udom9e/7d82LLwGOmKb9tFyk76fmhHKkbJzBImVMp0HHbZ5tkwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFD1U3+X4R/Hehz5zfFiRfR+S5Nr4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMjE4NzU2YzMtYWY4Yy0z
OGIxLWIwNzItNmUwZTExM2YyNmYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFzCDgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABov4RW/bnnFPySeH+ZRnqHJx0vEeQtbOkG6CqrFnPioyzdUOFkaTZxM
aRNUgVszNWjaChZm+etAe57wkw2opevmHkuVut3hpTibSYPViMRCIrXarm+rUvgH
V2y+HOS9eakf8fWsb37JAqyR9B0Tv66RJ2+0tCe1P+D6uMxvnxOFRAKjBr1bytoF
a2odqLZbobJI2ZrTkBIiMwG2K61T/SXrKVLoLhJ2Ty1jyAeXXIuvQNukG4vEEns7
2eC7QTiUf0/KVG4HNv63+v/TLzwPGGiKo+ky36jfa1CeHDyUK4rHZXdIItkG2R8u
5Kvt5oiOA2DAr91/HVbnno8v0YDPMMg=
-----END CERTIFICATE-----
Generated at Sat Oct 3 14:23:15 2026 by rpki-client