Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/300f284b-a862-3224-8792-73a9f82be269.roa
File:                     300f284b-a862-3224-8792-73a9f82be269.roa (raw, json)
Hash identifier:          QM6luwtrcuG9Yt4SCGVkEqCAKlUPYbX3KDbP/5x95a8=
Subject key identifier:   6E:AB:A4:6A:39:4F:E2:6E:CF:1C:95:4D:DA:F1:F8:71:BD:97:31:33
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584E104F001ADF993664FC6DE880
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/300f284b-a862-3224-8792-73a9f82be269.roa
Signing time:             Thu 04 Jun 2026 21:00:12 +0000
ROA not before:           Thu 04 Jun 2026 21:00:12 +0000
ROA not after:            Wed 02 Sep 2026 21:00:12 +0000
asID:                     22773
IP address blocks:        166.102.168.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:10:4f:00:1a:df:99:36:64:fc:6d:e8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Jun  4 21:00:12 2026 GMT
            Not After : Sep  2 21:00:12 2026 GMT
        Subject: CN=7ef50d4c-c42e-4c97-aac5-83a91533fe4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:16:d8:24:3a:7e:83:58:33:26:0a:97:fb:3d:
                    f2:f9:e2:7f:fc:e6:0f:08:31:ac:52:11:28:0e:9e:
                    3e:4b:91:af:13:e4:98:c9:0a:31:ff:26:42:63:d5:
                    f6:01:76:77:81:90:3a:5b:87:ef:73:e2:03:33:d6:
                    eb:64:a5:f3:57:48:61:c9:3a:dc:73:4e:7c:95:83:
                    af:89:f0:90:ee:ab:58:9d:4d:25:60:da:13:b7:dd:
                    ce:3a:5e:08:24:1c:9e:c2:ea:da:d1:02:7a:e2:b4:
                    ae:17:d1:e5:f8:ff:0a:e9:f8:ee:b5:f0:84:7e:57:
                    bb:83:e1:37:12:72:68:7b:aa:72:2c:b2:91:5a:3d:
                    be:ad:38:92:28:4a:6f:3f:6b:f8:2c:ef:43:d1:3c:
                    49:2c:2f:ed:77:0f:bf:67:82:dd:18:06:74:15:3c:
                    c0:5d:12:e4:d0:83:cb:b7:1f:df:af:00:70:2e:72:
                    35:1e:47:d2:07:98:50:bc:0c:12:2d:59:a9:0f:f9:
                    63:7d:c0:12:a3:40:53:30:fb:25:0e:05:44:9e:eb:
                    a7:bf:23:96:9d:9d:3e:79:d9:c9:43:b4:ca:81:6d:
                    b5:8e:0e:fd:5d:45:25:74:6f:a1:6a:6c:15:54:d1:
                    64:c3:a6:b3:23:ae:c8:0d:7d:ff:4f:54:f9:b9:00:
                    6d:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:AB:A4:6A:39:4F:E2:6E:CF:1C:95:4D:DA:F1:F8:71:BD:97:31:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/300f284b-a862-3224-8792-73a9f82be269.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.102.168.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:0f:da:7b:f8:00:69:07:e6:f5:27:d5:a2:93:6e:fa:90:09:
         a9:e1:c9:d9:f8:53:e9:05:fb:cb:00:71:53:b4:2a:22:75:dd:
         00:67:96:9a:35:14:d4:1d:82:02:e8:55:e5:9e:e9:cf:ef:73:
         b6:bd:76:45:d9:f4:2c:fe:66:68:03:70:73:ce:19:a5:cb:de:
         6e:bc:ce:5c:6d:53:f9:2e:ee:c7:0e:41:e6:9d:2d:d9:76:e8:
         ab:bc:63:fc:4f:3d:aa:8c:77:b2:c8:93:1e:15:74:64:42:f9:
         68:5e:b6:d1:2d:e2:89:a3:70:fc:94:e6:a3:df:7e:fc:5a:10:
         0a:c8:66:2d:b6:6b:a5:ab:e7:c7:e3:00:16:e3:82:f3:af:8c:
         de:54:0f:b7:e9:15:b2:09:a4:83:ca:e4:bb:00:d2:e3:25:ad:
         6e:78:d1:3b:da:fb:48:43:e4:8c:e1:59:f0:16:2d:7c:22:fc:
         11:b2:f6:66:f8:c0:cd:a5:09:60:ee:79:93:8a:07:18:90:e4:
         db:c1:f5:ac:68:4c:78:55:22:6e:2d:11:98:95:cc:2f:23:92:
         d8:b9:9d:2e:be:e6:ec:d2:ae:a1:05:65:bb:52:cb:8a:c9:5c:
         78:e9:d6:96:c6:0d:8c:3c:c2:6c:20:fe:a1:94:12:8c:4b:42:
         d2:86:df:f2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4QTwAa35k2ZPxt6IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTI2MDYwNDIxMDAxMloXDTI2MDkwMjIxMDAxMlowLzEtMCsGA1UEAxMk
N2VmNTBkNGMtYzQyZS00Yzk3LWFhYzUtODNhOTE1MzNmZTRhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyBbYJDp+g1gzJgqX+z3y+eJ//OYPCDGsUhEo
Dp4+S5GvE+SYyQox/yZCY9X2AXZ3gZA6W4fvc+IDM9brZKXzV0hhyTrcc058lYOv
ifCQ7qtYnU0lYNoTt93OOl4IJByewura0QJ64rSuF9Hl+P8K6fjutfCEfle7g+E3
EnJoe6pyLLKRWj2+rTiSKEpvP2v4LO9D0TxJLC/tdw+/Z4LdGAZ0FTzAXRLk0IPL
tx/frwBwLnI1HkfSB5hQvAwSLVmpD/ljfcASo0BTMPslDgVEnuunvyOWnZ0+ednJ
Q7TKgW21jg79XUUldG+hamwVVNFkw6azI67IDX3/T1T5uQBtDwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFG6rpGo5T+JuzxyVTdrx+HG9lzEzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMzAwZjI4NGItYTg2Mi0z
MjI0LTg3OTItNzNhOWY4MmJlMjY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApmaoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABMP2nv4AGkH5vUn1aKTbvqQCanhydn4U+kF+8sAcVO0KiJ13QBnlpo1
FNQdggLoVeWe6c/vc7a9dkXZ9Cz+ZmgDcHPOGaXL3m68zlxtU/ku7scOQeadLdl2
6Ku8Y/xPPaqMd7LIkx4VdGRC+WhettEt4omjcPyU5qPffvxaEArIZi22a6Wr58fj
ABbjgvOvjN5UD7fpFbIJpIPK5LsA0uMlrW540Tva+0hD5IzhWfAWLXwi/BGy9mb4
wM2lCWDueZOKBxiQ5NvB9axoTHhVIm4tEZiVzC8jkti5nS6+5uzSrqEFZbtSy4rJ
XHjp1pbGDYw8wmwg/qGUEoxLQtKG3/I=
-----END CERTIFICATE-----
Generated at Sat Jun 13 22:14:25 2026 by rpki-client