Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/49ddedec-016b-34d5-986c-e2759d2fbdbd.roa
File:                     49ddedec-016b-34d5-986c-e2759d2fbdbd.roa (raw, json)
Hash identifier:          gJ99mBzNDDO9Hc4OpOhZY25/yh9ZHJ7WomGNpL++tTs=
Subject key identifier:   2F:F7:5E:20:CC:67:DE:76:C9:A7:19:3C:94:D0:85:23:80:43:00:E5
Certificate issuer:       /CN=7ba79988-80bc-4fcb-8faf-624400d5f1ce
Certificate serial:       010D0C9F4328584D55BA4674C3703AFC74EF4D40
Authority key identifier: 34:17:BC:BF:6B:4A:63:0A:CA:A3:C5:88:BC:45:0F:E5:94:79:C4:5A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/49ddedec-016b-34d5-986c-e2759d2fbdbd.roa
Signing time:             Mon 30 Mar 2026 01:00:23 +0000
ROA not before:           Mon 30 Mar 2026 01:00:23 +0000
ROA not after:            Sun 28 Jun 2026 01:00:23 +0000
asID:                     8560
IP address blocks:        198.71.48.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/7ba79988-80bc-4fcb-8faf-624400d5f1ce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/7ba79988-80bc-4fcb-8faf-624400d5f1ce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:55:ba:46:74:c3:70:3a:fc:74:ef:4d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ba79988-80bc-4fcb-8faf-624400d5f1ce
        Validity
            Not Before: Mar 30 01:00:23 2026 GMT
            Not After : Jun 28 01:00:23 2026 GMT
        Subject: CN=f761ac97-9548-4a9d-b3cf-50905380af5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:86:5f:51:16:cb:69:a0:9b:8e:54:0e:b9:51:
                    c5:64:76:fa:9c:4a:3a:92:c2:a2:75:68:e4:53:af:
                    1a:6d:db:77:81:b1:8b:b3:e6:87:c5:a7:cc:9e:4b:
                    64:7b:aa:b3:71:69:7c:6c:07:50:dc:cd:7d:bc:af:
                    86:e0:0b:d3:fe:53:a4:e7:2f:78:43:50:31:66:82:
                    ec:12:02:36:b0:2d:0c:ee:32:50:8c:c1:d0:7d:22:
                    5a:97:96:f1:27:1e:0d:05:ed:a2:cc:6d:ce:66:1b:
                    a1:8e:29:37:20:10:e2:1e:d3:26:ee:0b:3d:f0:6e:
                    4d:cc:2e:e8:9b:71:40:45:d3:6e:da:ec:78:d5:9b:
                    9b:70:16:42:a0:26:5d:f1:20:fc:20:59:93:cd:ca:
                    b3:f7:c5:df:e7:ac:92:71:7c:20:c2:aa:e2:7b:54:
                    e4:fc:39:b6:a0:18:a4:ef:69:a7:35:f0:9f:96:85:
                    c3:92:8e:4a:0d:0e:17:5c:d1:e0:55:41:50:38:b0:
                    b1:73:d8:06:1d:d4:24:37:33:58:8a:70:de:bf:44:
                    27:92:bd:6e:04:7d:aa:11:8e:a5:66:1c:7e:25:68:
                    47:2a:2e:3e:26:02:62:c2:a8:7a:38:e3:05:6c:3b:
                    01:ec:90:ed:c5:60:6a:5b:ff:06:13:17:c5:19:31:
                    89:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:F7:5E:20:CC:67:DE:76:C9:A7:19:3C:94:D0:85:23:80:43:00:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/49ddedec-016b-34d5-986c-e2759d2fbdbd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/7ba79988-80bc-4fcb-8faf-624400d5f1ce.crl

            X509v3 Authority Key Identifier:
                keyid:34:17:BC:BF:6B:4A:63:0A:CA:A3:C5:88:BC:45:0F:E5:94:79:C4:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.71.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:07:35:0e:df:54:46:fe:8f:ff:17:2a:ca:8a:81:dc:cf:1d:
         ca:44:74:60:61:30:73:e1:b1:b5:f6:c7:59:15:ce:75:f2:b6:
         cd:ab:87:05:a5:2b:3d:59:c6:94:46:cf:5d:a5:cb:d8:0b:c4:
         dc:4b:be:67:a4:7e:d9:d3:85:1f:48:53:7b:ab:4d:17:e9:c5:
         25:0f:cc:fc:87:3f:a4:ef:40:d3:2e:39:40:a9:10:26:d7:dc:
         20:c1:56:71:3f:1f:10:0f:75:1b:d2:04:a2:80:a2:c7:f1:95:
         96:ed:b9:0e:96:25:1d:27:7d:1e:3c:19:2d:60:cb:52:0d:8c:
         5c:a8:39:2d:4f:0a:54:d6:72:7f:dd:d5:cf:23:b9:2d:c3:65:
         f5:46:71:ec:79:41:ed:e0:48:a1:8e:fe:11:e2:7a:05:7f:0f:
         72:b7:2b:d7:01:e3:2b:70:3c:d9:fc:fa:8a:86:8d:47:56:0a:
         56:29:6d:a5:1c:0e:27:5a:3d:09:4d:30:97:1a:d9:03:fb:60:
         15:26:76:3f:3e:37:01:0e:42:17:e3:44:0c:27:f6:ce:f4:d1:
         f0:c3:eb:78:43:21:a0:80:2c:ec:50:e2:77:4e:81:d5:ea:73:
         e5:bb:be:a3:d8:44:61:21:c1:8d:c5:a5:6b:48:93:18:82:c5:
         f7:4d:fc:4e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1VukZ0w3A6/HTvTUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2JhNzk5ODgtODBiYy00ZmNiLThmYWYtNjI0NDAwZDVm
MWNlMB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk
Zjc2MWFjOTctOTU0OC00YTlkLWIzY2YtNTA5MDUzODBhZjVjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjoZfURbLaaCbjlQOuVHFZHb6nEo6ksKidWjk
U68abdt3gbGLs+aHxafMnktke6qzcWl8bAdQ3M19vK+G4AvT/lOk5y94Q1AxZoLs
EgI2sC0M7jJQjMHQfSJal5bxJx4NBe2izG3OZhuhjik3IBDiHtMm7gs98G5NzC7o
m3FARdNu2ux41ZubcBZCoCZd8SD8IFmTzcqz98Xf56yScXwgwqrie1Tk/Dm2oBik
72mnNfCfloXDko5KDQ4XXNHgVUFQOLCxc9gGHdQkNzNYinDev0Qnkr1uBH2qEY6l
Zhx+JWhHKi4+JgJiwqh6OOMFbDsB7JDtxWBqW/8GExfFGTGJSQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFC/3XiDMZ952yacZPJTQhSOAQwDlMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83YmE3
OTk4OC04MGJjLTRmY2ItOGZhZi02MjQ0MDBkNWYxY2UvNDlkZGVkZWMtMDE2Yi0z
NGQ1LTk4NmMtZTI3NTlkMmZiZGJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvN2JhNzk5ODgtODBiYy00ZmNiLThm
YWYtNjI0NDAwZDVmMWNlLzdiYTc5OTg4LTgwYmMtNGZjYi04ZmFmLTYyNDQwMGQ1
ZjFjZS5jcmwwHwYDVR0jBBgwFoAUNBe8v2tKYwrKo8WIvEUP5ZR5xFowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC83YmE3OTk4OC04MGJjLTRmY2ItOGZhZi02MjQ0
MDBkNWYxY2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQExkcwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABsHNQ7fVEb+j/8XKsqKgdzPHcpEdGBhMHPhsbX2x1kVznXyts2rhwWl
Kz1ZxpRGz12ly9gLxNxLvmekftnThR9IU3urTRfpxSUPzPyHP6TvQNMuOUCpECbX
3CDBVnE/HxAPdRvSBKKAosfxlZbtuQ6WJR0nfR48GS1gy1INjFyoOS1PClTWcn/d
1c8juS3DZfVGcex5Qe3gSKGO/hHiegV/D3K3K9cB4ytwPNn8+oqGjUdWClYpbaUc
DidaPQlNMJca2QP7YBUmdj8+NwEOQhfjRAwn9s700fDD63hDIaCALOxQ4ndOgdXq
c+W7vqPYRGEhwY3FpWtIkxiCxfdN/E4=
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:47:19 2026 by rpki-client