Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/49b876c3-2c45-48fd-9b06-9930edf118fa/6c64e825-16bf-3331-8877-9a759754bd51.roa
File:                     6c64e825-16bf-3331-8877-9a759754bd51.roa (raw, json)
Hash identifier:          AGoKJQsZX75mseSauURKOTmAV/xfLviKwiK8jF7NNo8=
Subject key identifier:   FA:03:71:F5:D6:2E:09:7B:CD:6C:E7:2A:15:34:48:0F:F1:DA:FD:66
Certificate issuer:       /CN=49b876c3-2c45-48fd-9b06-9930edf118fa
Certificate serial:       010D0C9F4328584D4D5A7A94FB4CF8820D2F9600
Authority key identifier: EE:E2:29:5C:7C:0B:88:A3:24:EB:14:04:AB:80:4F:A1:52:41:83:69
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/49b876c3-2c45-48fd-9b06-9930edf118fa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/49b876c3-2c45-48fd-9b06-9930edf118fa/6c64e825-16bf-3331-8877-9a759754bd51.roa
Signing time:             Fri 27 Mar 2026 01:00:31 +0000
ROA not before:           Fri 27 Mar 2026 01:00:31 +0000
ROA not after:            Thu 25 Jun 2026 01:00:31 +0000
asID:                     46626
IP address blocks:        142.20.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/49b876c3-2c45-48fd-9b06-9930edf118fa/49b876c3-2c45-48fd-9b06-9930edf118fa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/49b876c3-2c45-48fd-9b06-9930edf118fa/49b876c3-2c45-48fd-9b06-9930edf118fa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/49b876c3-2c45-48fd-9b06-9930edf118fa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:4d:5a:7a:94:fb:4c:f8:82:0d:2f:96:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49b876c3-2c45-48fd-9b06-9930edf118fa
        Validity
            Not Before: Mar 27 01:00:31 2026 GMT
            Not After : Jun 25 01:00:31 2026 GMT
        Subject: CN=a7a6073b-c019-4c6f-938d-11507449d750
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:1d:b0:76:b8:df:a1:f6:7d:78:3c:cd:db:43:
                    47:da:b2:20:10:b2:4b:39:49:f8:cc:f3:e6:1b:34:
                    d7:fa:5b:ed:43:1f:f0:48:c7:7a:af:79:65:26:94:
                    b0:da:be:43:8f:4d:87:93:66:1a:22:06:8d:bf:87:
                    f5:f1:9a:49:45:b8:aa:db:a2:41:29:c8:76:5a:74:
                    fb:56:bd:3b:c3:2f:3e:7f:41:a3:de:84:b7:c3:2f:
                    b3:ab:c3:37:53:64:82:13:8c:b3:9b:c1:ab:6f:ae:
                    01:70:2f:10:66:40:5b:a1:1e:c8:a4:4e:02:22:0a:
                    2f:63:ef:17:31:fa:c8:20:aa:ef:23:35:4d:ef:be:
                    36:62:91:76:7f:03:a6:d6:bf:ea:a2:a7:6a:98:57:
                    ae:ab:cf:88:f1:ab:82:e6:20:6d:9b:ec:e3:0e:31:
                    f7:db:98:c0:39:1b:5f:38:f1:2d:34:6a:a2:ae:bf:
                    ae:4b:92:14:ff:d8:b4:95:47:ac:75:5d:b8:c0:c0:
                    64:07:37:44:38:f8:d8:1b:04:07:c1:9b:87:ac:9e:
                    ac:02:d2:2e:97:86:7c:75:fd:40:34:1f:be:90:db:
                    67:42:66:9b:ab:8c:ed:85:d4:bb:56:bd:ab:fc:7b:
                    a0:f8:b6:b3:84:66:52:93:59:29:1c:ea:4c:2c:91:
                    07:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:03:71:F5:D6:2E:09:7B:CD:6C:E7:2A:15:34:48:0F:F1:DA:FD:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/49b876c3-2c45-48fd-9b06-9930edf118fa/6c64e825-16bf-3331-8877-9a759754bd51.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/49b876c3-2c45-48fd-9b06-9930edf118fa/49b876c3-2c45-48fd-9b06-9930edf118fa.crl

            X509v3 Authority Key Identifier:
                keyid:EE:E2:29:5C:7C:0B:88:A3:24:EB:14:04:AB:80:4F:A1:52:41:83:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/49b876c3-2c45-48fd-9b06-9930edf118fa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.20.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:57:7a:5d:6e:1f:5a:18:8a:52:b0:dc:32:91:81:bf:62:de:
         86:55:04:69:26:cb:bc:d1:82:16:e8:ac:97:52:46:2b:91:c5:
         6d:be:32:c9:e9:db:af:8b:ad:a4:fe:fd:23:46:c8:c6:19:ae:
         22:12:50:a6:83:97:06:8d:bb:99:b3:e5:a6:86:4d:cb:19:b2:
         b6:cc:be:9b:84:96:ec:99:f0:dd:7f:0f:e6:5d:78:01:84:35:
         23:b6:2c:cb:a9:91:7c:69:db:6c:93:e4:92:83:15:bb:c4:79:
         54:92:53:3f:42:4d:a7:2c:52:50:bf:dd:fc:c9:eb:4a:4d:3c:
         b2:d4:ae:2e:82:71:d1:3a:bf:39:c7:8b:0d:a7:61:c7:a4:38:
         55:53:29:34:9c:09:2e:1d:93:10:98:d6:30:ce:35:31:d1:ea:
         9c:1a:20:9d:8d:02:7e:a1:fe:f7:dd:44:6d:e8:8c:6d:33:b6:
         10:45:48:7d:f7:88:c3:7c:df:4c:78:6b:35:0f:b0:1e:d2:af:
         0d:2d:33:58:47:bf:03:13:fe:19:e5:97:fc:6f:ac:65:f1:cb:
         32:3d:30:89:df:18:a7:d8:1b:dc:ba:ac:d8:ab:fb:c9:f5:8e:
         dd:4e:27:0d:ee:c9:42:32:56:04:76:7b:ad:53:84:29:99:1d:
         b7:5f:4d:4f
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE1NWnqU+0z4gg0vlgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliODc2YzMtMmM0NS00OGZkLTliMDYtOTkzMGVkZjEx
OGZhMB4XDTI2MDMyNzAxMDAzMVoXDTI2MDYyNTAxMDAzMVowLzEtMCsGA1UEAxMk
YTdhNjA3M2ItYzAxOS00YzZmLTkzOGQtMTE1MDc0NDlkNzUwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAph2wdrjfofZ9eDzN20NH2rIgELJLOUn4zPPm
GzTX+lvtQx/wSMd6r3llJpSw2r5Dj02Hk2YaIgaNv4f18ZpJRbiq26JBKch2WnT7
Vr07wy8+f0Gj3oS3wy+zq8M3U2SCE4yzm8Grb64BcC8QZkBboR7IpE4CIgovY+8X
MfrIIKrvIzVN7742YpF2fwOm1r/qoqdqmFeuq8+I8auC5iBtm+zjDjH325jAORtf
OPEtNGqirr+uS5IU/9i0lUesdV24wMBkBzdEOPjYGwQHwZuHrJ6sAtIul4Z8df1A
NB++kNtnQmabq4zthdS7Vr2r/Hug+LazhGZSk1kpHOpMLJEHjQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFPoDcfXWLgl7zWznKhU0SA/x2v1mMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80OWI4
NzZjMy0yYzQ1LTQ4ZmQtOWIwNi05OTMwZWRmMTE4ZmEvNmM2NGU4MjUtMTZiZi0z
MzMxLTg4NzctOWE3NTk3NTRiZDUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNDliODc2YzMtMmM0NS00OGZkLTli
MDYtOTkzMGVkZjExOGZhLzQ5Yjg3NmMzLTJjNDUtNDhmZC05YjA2LTk5MzBlZGYx
MThmYS5jcmwwHwYDVR0jBBgwFoAU7uIpXHwLiKMk6xQEq4BPoVJBg2kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS80OWI4NzZjMy0yYzQ1LTQ4ZmQtOWIwNi05OTMw
ZWRmMTE4ZmEuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAjhQwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAYFd6XW4fWhiKUrDcMpGBv2LehlUEaSbLvNGCFuisl1JGK5HFbb4yyenb
r4utpP79I0bIxhmuIhJQpoOXBo27mbPlpoZNyxmytsy+m4SW7Jnw3X8P5l14AYQ1
I7Ysy6mRfGnbbJPkkoMVu8R5VJJTP0JNpyxSUL/d/MnrSk08stSuLoJx0Tq/OceL
Dadhx6Q4VVMpNJwJLh2TEJjWMM41MdHqnBognY0CfqH+991EbeiMbTO2EEVIffeI
w3zfTHhrNQ+wHtKvDS0zWEe/AxP+GeWX/G+sZfHLMj0wid8Yp9gb3Lqs2Kv7yfWO
3U4nDe7JQjJWBHZ7rVOEKZkdt19NTw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 22:02:53 2026 by rpki-client