Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/49a07cb7-883d-4863-97b1-047ae5e20018/07dfce0b-1f4d-3b4d-aa41-71e9a19d7745.roa
File:                     07dfce0b-1f4d-3b4d-aa41-71e9a19d7745.roa (raw, json)
Hash identifier:          EWtl7ed0Xh0XNU4BNpHw49S11Jsfm95aJ1asyyfVdZA=
Subject key identifier:   28:DD:D0:33:D6:74:07:15:3B:93:18:19:07:E4:C4:55:B3:95:EF:8B
Certificate issuer:       /CN=49a07cb7-883d-4863-97b1-047ae5e20018
Certificate serial:       010D0C9F4328584FD7F139A65E5B025D8D106120
Authority key identifier: F6:71:1F:A7:40:80:05:5D:27:4D:3B:F7:40:03:CA:10:CE:2D:64:24
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/49a07cb7-883d-4863-97b1-047ae5e20018.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/49a07cb7-883d-4863-97b1-047ae5e20018/07dfce0b-1f4d-3b4d-aa41-71e9a19d7745.roa
Signing time:             Sun 15 Nov 2026 02:00:12 +0000
ROA not before:           Sun 15 Nov 2026 02:00:12 +0000
ROA not after:            Sat 13 Feb 2027 02:00:12 +0000
asID:                     202
IP address blocks:        199.242.26.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/49a07cb7-883d-4863-97b1-047ae5e20018/49a07cb7-883d-4863-97b1-047ae5e20018.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/49a07cb7-883d-4863-97b1-047ae5e20018/49a07cb7-883d-4863-97b1-047ae5e20018.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/49a07cb7-883d-4863-97b1-047ae5e20018.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:d7:f1:39:a6:5e:5b:02:5d:8d:10:61:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49a07cb7-883d-4863-97b1-047ae5e20018
        Validity
            Not Before: Nov 15 02:00:12 2026 GMT
            Not After : Feb 13 02:00:12 2027 GMT
        Subject: CN=3d26f1ec-3ffc-4f44-b1d6-64b5643141fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:83:93:97:71:c5:7b:d1:48:32:72:72:6f:ad:
                    76:f7:7a:66:13:03:5b:98:c8:8f:89:7b:58:c8:69:
                    6c:58:b8:9f:d8:a9:18:aa:ff:32:0d:e2:77:81:89:
                    1f:1c:80:df:9a:0a:9c:5f:6c:92:40:d1:3c:26:a4:
                    12:4d:a2:14:07:89:0a:55:b7:62:1b:ae:29:74:e3:
                    5c:37:ac:86:b3:67:ed:b3:a4:df:8e:fd:e8:61:b9:
                    ff:02:3b:04:a6:1f:41:0c:28:21:24:ce:58:a0:70:
                    45:b5:60:09:9c:f4:a7:3e:9f:0c:1e:a7:75:15:04:
                    69:a1:ac:90:e8:f5:8c:eb:9c:3d:ea:b4:8f:0a:12:
                    76:11:3c:ef:f0:d5:d6:08:28:2b:3b:ca:ec:c2:04:
                    8b:22:b4:19:4d:9b:23:03:09:b7:6f:09:ed:40:05:
                    b0:cf:8d:fe:49:47:82:7c:5c:69:21:fe:51:72:68:
                    28:57:1f:55:40:2b:c3:3b:60:4a:ba:ba:b7:df:55:
                    f1:05:75:6c:42:10:9b:b3:f7:5a:b9:44:92:e9:70:
                    41:04:38:75:1a:5a:21:ad:50:4d:8a:ab:9c:c7:9e:
                    36:85:29:ce:0f:47:fb:6e:72:6b:d4:7c:3e:4c:cc:
                    36:53:41:13:89:01:67:3c:b8:c2:d1:3c:18:38:eb:
                    7a:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:DD:D0:33:D6:74:07:15:3B:93:18:19:07:E4:C4:55:B3:95:EF:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/49a07cb7-883d-4863-97b1-047ae5e20018/07dfce0b-1f4d-3b4d-aa41-71e9a19d7745.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/49a07cb7-883d-4863-97b1-047ae5e20018/49a07cb7-883d-4863-97b1-047ae5e20018.crl

            X509v3 Authority Key Identifier:
                keyid:F6:71:1F:A7:40:80:05:5D:27:4D:3B:F7:40:03:CA:10:CE:2D:64:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/49a07cb7-883d-4863-97b1-047ae5e20018.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.242.26.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:9d:c3:30:71:ca:ab:85:d4:78:38:6d:c5:fd:32:b7:38:de:
         fb:d3:9a:cb:88:a1:8f:78:74:09:3c:51:9d:44:6a:62:df:23:
         26:69:29:20:92:02:ae:93:a1:c8:3b:b8:9e:15:bb:a5:01:0c:
         f0:d9:29:da:2c:59:1f:ae:3a:c4:59:c1:9e:dd:75:e8:e2:93:
         1e:59:e4:d8:6f:22:67:28:bf:26:4e:3e:ad:d3:db:9a:0a:1f:
         a3:53:e5:9a:dd:5c:1a:8f:06:09:b3:bc:8f:77:f8:7f:49:fc:
         43:3e:75:48:01:bf:9d:05:4d:b6:57:5e:a1:d6:8a:c7:7c:73:
         4e:a1:f0:30:94:3e:38:74:81:6f:ce:7a:6f:ee:39:2f:24:6f:
         79:26:69:d8:a4:0f:ca:b1:74:f9:20:23:6c:a9:4f:f4:a1:2b:
         b6:87:50:76:55:cc:d1:7d:bc:e0:d8:b1:f4:7e:41:b4:ba:5b:
         f8:9a:44:07:be:c9:1f:1b:79:b0:dd:50:b3:30:ac:d3:69:eb:
         8c:3f:19:56:ad:2b:eb:b5:f4:e4:ab:f2:87:04:1d:c7:93:fb:
         67:7e:09:5f:cb:7e:4b:43:b3:e4:dd:f3:b0:ca:3d:80:92:e2:
         83:66:18:61:ac:50:b1:6b:61:ae:ea:f3:51:63:de:8d:52:0a:
         c9:b6:01:11
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE/X8TmmXlsCXY0QYSAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDlhMDdjYjctODgzZC00ODYzLTk3YjEtMDQ3YWU1ZTIw
MDE4MB4XDTI2MTExNTAyMDAxMloXDTI3MDIxMzAyMDAxMlowLzEtMCsGA1UEAxMk
M2QyNmYxZWMtM2ZmYy00ZjQ0LWIxZDYtNjRiNTY0MzE0MWZhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgYOTl3HFe9FIMnJyb61293pmEwNbmMiPiXtY
yGlsWLif2KkYqv8yDeJ3gYkfHIDfmgqcX2ySQNE8JqQSTaIUB4kKVbdiG64pdONc
N6yGs2fts6Tfjv3oYbn/AjsEph9BDCghJM5YoHBFtWAJnPSnPp8MHqd1FQRpoayQ
6PWM65w96rSPChJ2ETzv8NXWCCgrO8rswgSLIrQZTZsjAwm3bwntQAWwz43+SUeC
fFxpIf5RcmgoVx9VQCvDO2BKurq331XxBXVsQhCbs/dauUSS6XBBBDh1GlohrVBN
iqucx542hSnOD0f7bnJr1Hw+TMw2U0ETiQFnPLjC0TwYOOt6uQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCjd0DPWdAcVO5MYGQfkxFWzle+LMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi80OWEw
N2NiNy04ODNkLTQ4NjMtOTdiMS0wNDdhZTVlMjAwMTgvMDdkZmNlMGItMWY0ZC0z
YjRkLWFhNDEtNzFlOWExOWQ3NzQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z
N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvNDlhMDdjYjctODgzZC00ODYzLTk3
YjEtMDQ3YWU1ZTIwMDE4LzQ5YTA3Y2I3LTg4M2QtNDg2My05N2IxLTA0N2FlNWUy
MDAxOC5jcmwwHwYDVR0jBBgwFoAU9nEfp0CABV0nTTv3QAPKEM4tZCQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4
OC1hYmVhLWU0OTA5ZWYxYjRlMi80OWEwN2NiNy04ODNkLTQ4NjMtOTdiMS0wNDdh
ZTVlMjAwMTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx/IaMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG2dwzBxyquF1Hg4bcX9Mrc43vvTmsuIoY94dAk8UZ1EamLfIyZpKSCS
Aq6Tocg7uJ4Vu6UBDPDZKdosWR+uOsRZwZ7ddejikx5Z5NhvImcovyZOPq3T25oK
H6NT5ZrdXBqPBgmzvI93+H9J/EM+dUgBv50FTbZXXqHWisd8c06h8DCUPjh0gW/O
em/uOS8kb3kmadikD8qxdPkgI2ypT/ShK7aHUHZVzNF9vODYsfR+QbS6W/iaRAe+
yR8bebDdULMwrNNp64w/GVatK+u19OSr8ocEHceT+2d+CV/LfktDs+Td87DKPYCS
4oNmGGGsULFrYa7q81Fj3o1SCsm2ARE=
-----END CERTIFICATE-----
Generated at Sun Nov 15 17:00:54 2026 by rpki-client