Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/504bb3f9-0f56-318f-a66f-f3a42d95139c.roa
File:                     504bb3f9-0f56-318f-a66f-f3a42d95139c.roa (raw, json)
Hash identifier:          lYh4sSx/ZwPVLDbTznzmqJudLDp1KjtMY3ay8pkaE64=
Subject key identifier:   96:5A:83:0F:DF:08:27:C2:33:9E:2D:15:90:6C:8A:C1:5C:38:E6:61
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584D00B24A99BC860D47D8A2E200
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/504bb3f9-0f56-318f-a66f-f3a42d95139c.roa
Signing time:             Fri 27 Feb 2026 14:00:40 +0000
ROA not before:           Fri 27 Feb 2026 14:00:40 +0000
ROA not after:            Thu 28 May 2026 13:00:40 +0000
asID:                     7029
IP address blocks:        98.19.176.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:00:b2:4a:99:bc:86:0d:47:d8:a2:e2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Feb 27 14:00:40 2026 GMT
            Not After : May 28 13:00:40 2026 GMT
        Subject: CN=ca89b1d8-341b-4b27-a196-893336a5a607
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:f0:8e:71:a8:3d:9f:a1:cf:c3:a2:72:07:7b:
                    09:9b:3e:e0:54:9d:43:7c:87:4c:e6:36:a6:dd:ed:
                    d1:83:0a:39:6a:7d:ba:70:d7:a4:93:86:06:73:a2:
                    46:cf:fd:24:f7:cb:16:a5:29:91:4a:c3:d9:6b:2f:
                    7d:90:dd:58:5c:7e:7e:db:b2:80:ba:23:ee:97:1d:
                    6e:c2:56:c7:29:fb:10:50:61:62:c1:96:72:e9:78:
                    49:ef:0b:69:b2:bb:2c:61:47:fa:96:f2:9d:9e:19:
                    ea:cc:c9:c1:84:b4:4f:53:81:1a:45:ff:a9:55:fe:
                    cc:62:58:5e:16:4a:48:8a:1c:c4:48:d0:d3:c9:95:
                    15:fd:25:6d:f4:4b:e1:a3:44:fb:12:dd:55:1e:35:
                    13:d3:73:c3:65:e0:88:21:cf:4a:f0:e6:c0:f4:8a:
                    dd:80:e9:be:0c:a1:e7:11:9a:31:bb:f8:30:be:88:
                    3e:f9:19:fc:d8:78:1d:9f:4f:b7:ed:b9:9d:42:de:
                    cd:9b:7b:50:61:9a:3e:30:29:e7:9a:50:98:d3:37:
                    4c:fc:09:24:cf:87:ce:3c:65:a8:d1:cf:48:87:13:
                    a3:1e:72:35:33:79:84:c8:5d:1a:0a:53:0a:47:58:
                    ea:00:fe:46:68:b9:7d:7c:e4:17:62:20:1c:a0:aa:
                    f2:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:5A:83:0F:DF:08:27:C2:33:9E:2D:15:90:6C:8A:C1:5C:38:E6:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/504bb3f9-0f56-318f-a66f-f3a42d95139c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.19.176.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:19:4d:52:43:d9:4b:5d:94:99:3c:7b:66:ed:35:7d:f4:f9:
         ee:59:54:54:ae:12:37:ff:60:69:88:9f:d4:a7:3a:48:9e:8f:
         5f:77:bb:88:98:14:6d:f0:b2:58:05:26:56:2a:31:70:91:1e:
         65:79:c0:4d:4c:fe:2a:51:88:b5:71:63:65:21:2b:1b:b5:b3:
         cc:46:db:f4:72:ce:04:62:2d:c0:a5:00:1a:7c:08:85:8e:23:
         0a:2d:68:75:d7:b6:4d:77:ba:37:de:97:5c:54:cf:12:23:2e:
         36:6f:f2:14:a5:b7:72:f9:6a:4e:7c:61:e1:1a:8b:c5:80:52:
         e6:ad:84:e4:11:ac:9c:03:e3:9d:6e:0b:aa:a0:e2:13:08:e5:
         14:d8:19:b7:07:60:2f:8f:aa:56:ef:b8:6e:c7:73:a1:a9:a1:
         73:b5:39:08:78:3e:f4:f9:7e:3f:1c:2c:6a:88:6b:52:40:5f:
         4a:c1:41:05:57:61:fc:fc:14:f8:03:08:d3:dd:38:d4:05:53:
         ba:20:3c:b9:2e:13:23:61:f4:d5:c2:f5:12:af:f9:fc:d4:31:
         10:e2:26:a8:8e:c3:d7:32:9f:32:a4:24:fc:39:c2:e6:96:44:
         78:b9:e6:aa:57:c9:91:5e:46:bf:d1:96:1c:ab:67:68:61:05:
         80:2d:30:73
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0AskqZvIYNR9ii4gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTI2MDIyNzE0MDA0MFoXDTI2MDUyODEzMDA0MFowLzEtMCsGA1UEAxMk
Y2E4OWIxZDgtMzQxYi00YjI3LWExOTYtODkzMzM2YTVhNjA3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyPCOcag9n6HPw6JyB3sJmz7gVJ1DfIdM5jam
3e3Rgwo5an26cNekk4YGc6JGz/0k98sWpSmRSsPZay99kN1YXH5+27KAuiPulx1u
wlbHKfsQUGFiwZZy6XhJ7wtpsrssYUf6lvKdnhnqzMnBhLRPU4EaRf+pVf7MYlhe
FkpIihzESNDTyZUV/SVt9Evho0T7Et1VHjUT03PDZeCIIc9K8ObA9IrdgOm+DKHn
EZoxu/gwvog++Rn82Hgdn0+37bmdQt7Nm3tQYZo+MCnnmlCY0zdM/Akkz4fOPGWo
0c9IhxOjHnI1M3mEyF0aClMKR1jqAP5GaLl9fOQXYiAcoKryHQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJZagw/fCCfCM54tFZBsisFcOOZhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNTA0YmIzZjktMGY1Ni0z
MThmLWE2NmYtZjNhNDJkOTUxMzljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhOwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHsZTVJD2UtdlJk8e2btNX30+e5ZVFSuEjf/YGmIn9SnOkiej193u4iY
FG3wslgFJlYqMXCRHmV5wE1M/ipRiLVxY2UhKxu1s8xG2/RyzgRiLcClABp8CIWO
IwotaHXXtk13ujfel1xUzxIjLjZv8hSlt3L5ak58YeEai8WAUuathOQRrJwD451u
C6qg4hMI5RTYGbcHYC+PqlbvuG7Hc6GpoXO1OQh4PvT5fj8cLGqIa1JAX0rBQQVX
Yfz8FPgDCNPdONQFU7ogPLkuEyNh9NXC9RKv+fzUMRDiJqiOw9cynzKkJPw5wuaW
RHi55qpXyZFeRr/RlhyrZ2hhBYAtMHM=
-----END CERTIFICATE-----
Generated at Sun Mar 1 21:08:39 2026 by rpki-client