Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/49acf055-ddbb-3900-b3b8-86ea2749b99f.roa
File:                     49acf055-ddbb-3900-b3b8-86ea2749b99f.roa (raw, json)
Hash identifier:          DxXmB4tFpSNJpFsIDgvSySqwwzP6hnWezAYWWT1lTj8=
Subject key identifier:   0C:C6:AC:6F:78:1C:98:36:C0:F7:0D:B2:80:12:54:D9:3F:D6:12:74
Certificate issuer:       /CN=eb5e041e-98b3-4dff-827b-03e1387393cf
Certificate serial:       010D0C9F4328584D571FA27C0A66B68DCDDC3E90
Authority key identifier: DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/49acf055-ddbb-3900-b3b8-86ea2749b99f.roa
Signing time:             Mon 30 Mar 2026 13:00:30 +0000
ROA not before:           Mon 30 Mar 2026 13:00:30 +0000
ROA not after:            Sun 28 Jun 2026 13:00:30 +0000
asID:                     19437
IP address blocks:        104.244.52.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:57:1f:a2:7c:0a:66:b6:8d:cd:dc:3e:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb5e041e-98b3-4dff-827b-03e1387393cf
        Validity
            Not Before: Mar 30 13:00:30 2026 GMT
            Not After : Jun 28 13:00:30 2026 GMT
        Subject: CN=c3049093-9974-4bf3-9fe9-a3265d615baa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:bc:7e:74:56:0a:4f:b6:85:29:0b:42:f2:1c:
                    98:e9:21:95:36:2d:00:85:78:96:44:c1:07:ab:2d:
                    7d:da:53:81:38:bb:50:b7:77:4a:40:90:14:d9:dd:
                    3d:85:7f:96:d6:f7:97:30:bc:e1:6f:f2:09:24:1f:
                    26:ea:83:69:cb:62:85:c4:2b:6c:25:8c:a9:43:b4:
                    92:16:13:e8:c3:fc:6a:f7:b5:b4:d7:10:04:52:6e:
                    59:36:79:22:08:b4:7b:04:0d:3d:03:4a:d4:2f:cc:
                    ad:7f:26:ad:45:3e:52:82:a1:6c:86:b5:3c:8d:6c:
                    fc:3c:85:ca:01:32:8f:97:52:f6:61:39:7c:bb:f3:
                    73:cb:54:24:ad:90:e3:43:af:eb:94:27:11:95:d2:
                    3f:86:f5:4e:17:67:f9:0e:2d:5f:fc:ed:37:71:3d:
                    bb:7d:90:06:4a:4b:99:e1:b7:d1:07:d9:9f:8c:eb:
                    08:3c:cd:14:ba:fe:e8:c8:dc:c1:c3:cd:d6:a1:a5:
                    29:75:6b:2b:16:ae:6b:4e:aa:29:16:83:5b:13:c4:
                    bc:2d:0d:08:e5:56:da:26:fb:9d:ab:81:ae:84:30:
                    ab:5b:cc:53:ee:50:83:c5:a6:ce:53:3a:89:b8:a7:
                    bb:e2:b3:79:74:ee:44:76:61:7f:2a:2f:82:e2:f2:
                    fc:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:C6:AC:6F:78:1C:98:36:C0:F7:0D:B2:80:12:54:D9:3F:D6:12:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/49acf055-ddbb-3900-b3b8-86ea2749b99f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl

            X509v3 Authority Key Identifier:
                keyid:DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.244.52.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:6e:f7:ed:aa:da:9a:e8:08:18:30:9d:17:87:51:06:b8:1a:
         21:bf:37:7a:5c:03:e7:71:45:09:94:3d:30:16:da:37:77:d6:
         43:a3:88:63:d2:ab:92:f2:f1:fc:e8:c6:9c:b4:d6:1a:2a:d1:
         6f:69:68:7a:f6:18:4e:5a:73:5f:27:04:a0:63:bd:56:89:fd:
         8d:21:b3:2b:f5:e4:d8:72:63:50:ba:e3:db:af:d1:a9:c5:5f:
         f8:30:45:b1:50:0f:96:8a:13:9d:16:ca:6e:d9:62:b4:1c:70:
         cd:49:84:5c:fb:41:57:df:e6:f5:f8:b5:52:e8:ed:6b:ff:2e:
         ad:8e:ec:25:ef:f6:dd:c8:85:3c:8d:a3:28:02:56:22:cc:25:
         73:6d:a1:89:90:c4:5d:32:55:36:30:02:14:db:24:30:2a:f8:
         e7:3e:bc:41:2c:a5:a7:cd:81:22:d9:9d:61:5e:5b:0f:8a:0f:
         09:2c:f6:5b:fb:27:5f:9e:99:d7:4a:ce:99:18:8b:ee:cf:a0:
         c9:62:76:36:7b:65:f4:bb:8b:9c:9f:33:0a:f6:45:be:b7:b5:
         c2:5b:12:60:7c:46:af:68:2e:80:5d:c0:77:ab:ea:12:cd:5f:
         9e:b8:48:e2:1a:45:dc:25:be:19:49:16:dc:4e:5f:06:c0:46:
         e9:b8:4a:bc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1XH6J8Cma2jc3cPpAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWI1ZTA0MWUtOThiMy00ZGZmLTgyN2ItMDNlMTM4NzM5
M2NmMB4XDTI2MDMzMDEzMDAzMFoXDTI2MDYyODEzMDAzMFowLzEtMCsGA1UEAxMk
YzMwNDkwOTMtOTk3NC00YmYzLTlmZTktYTMyNjVkNjE1YmFhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnrx+dFYKT7aFKQtC8hyY6SGVNi0AhXiWRMEH
qy192lOBOLtQt3dKQJAU2d09hX+W1veXMLzhb/IJJB8m6oNpy2KFxCtsJYypQ7SS
FhPow/xq97W01xAEUm5ZNnkiCLR7BA09A0rUL8ytfyatRT5SgqFshrU8jWz8PIXK
ATKPl1L2YTl8u/Nzy1QkrZDjQ6/rlCcRldI/hvVOF2f5Di1f/O03cT27fZAGSkuZ
4bfRB9mfjOsIPM0Uuv7oyNzBw83WoaUpdWsrFq5rTqopFoNbE8S8LQ0I5VbaJvud
q4GuhDCrW8xT7lCDxabOUzqJuKe74rN5dO5EdmF/Ki+C4vL8NwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAzGrG94HJg2wPcNsoASVNk/1hJ0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9lYjVl
MDQxZS05OGIzLTRkZmYtODI3Yi0wM2UxMzg3MzkzY2YvNDlhY2YwNTUtZGRiYi0z
OTAwLWIzYjgtODZlYTI3NDliOTlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZWI1ZTA0MWUtOThiMy00ZGZmLTgy
N2ItMDNlMTM4NzM5M2NmL2ViNWUwNDFlLTk4YjMtNGRmZi04MjdiLTAzZTEzODcz
OTNjZi5jcmwwHwYDVR0jBBgwFoAU2+LolNpQKt3AF0M2x/1QnHoMEb4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9lYjVlMDQxZS05OGIzLTRkZmYtODI3Yi0wM2Ux
Mzg3MzkzY2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaPQ0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHJu9+2q2proCBgwnReHUQa4GiG/N3pcA+dxRQmUPTAW2jd31kOjiGPS
q5Ly8fzoxpy01hoq0W9paHr2GE5ac18nBKBjvVaJ/Y0hsyv15NhyY1C649uv0anF
X/gwRbFQD5aKE50Wym7ZYrQccM1JhFz7QVff5vX4tVLo7Wv/Lq2O7CXv9t3IhTyN
oygCViLMJXNtoYmQxF0yVTYwAhTbJDAq+Oc+vEEspafNgSLZnWFeWw+KDwks9lv7
J1+emddKzpkYi+7PoMlidjZ7ZfS7i5yfMwr2Rb63tcJbEmB8Rq9oLoBdwHer6hLN
X564SOIaRdwlvhlJFtxOXwbARum4Srw=
-----END CERTIFICATE-----
Generated at Fri Apr 17 12:50:27 2026 by rpki-client