Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0/4ea1dfd8-de9d-3f58-a7d9-e3eb11768aad.roa
File:                     4ea1dfd8-de9d-3f58-a7d9-e3eb11768aad.roa (raw, json)
Hash identifier:          bWwOAXKw1TU/04gRuEkJkFjZDKDeqJpJ5hynBRJBZzc=
Subject key identifier:   2E:02:A2:5E:E8:B6:C9:10:1C:4F:AA:CB:43:F3:0B:A2:6D:28:9B:7A
Certificate issuer:       /CN=e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0
Certificate serial:       010D0C9F4328584ED001F3CF8910E63196A2F770
Authority key identifier: 0D:39:5C:E3:0D:1F:BD:B6:79:8A:1D:50:60:EC:FC:62:57:43:80:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0/4ea1dfd8-de9d-3f58-a7d9-e3eb11768aad.roa
Signing time:             Wed 12 Aug 2026 13:00:12 +0000
ROA not before:           Wed 12 Aug 2026 13:00:12 +0000
ROA not after:            Tue 10 Nov 2026 14:00:12 +0000
asID:                     46632
IP address blocks:        199.47.112.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d0:01:f3:cf:89:10:e6:31:96:a2:f7:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0
        Validity
            Not Before: Aug 12 13:00:12 2026 GMT
            Not After : Nov 10 14:00:12 2026 GMT
        Subject: CN=454a520a-cf9d-4484-8090-30d69e5a8e97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:b2:77:ee:77:e7:2b:2b:ca:c6:5f:e8:3a:2b:
                    24:0e:ce:a8:bd:81:33:77:d0:6d:b7:b6:e8:54:15:
                    34:ee:f7:12:fb:92:b3:08:b4:e2:83:1a:a1:d1:04:
                    67:79:0c:72:eb:cb:27:1b:cb:5d:1e:98:2d:9f:8a:
                    f7:74:b2:44:01:9d:42:dc:0f:d3:cc:07:97:24:8f:
                    d7:8a:87:4d:02:67:60:f2:06:58:02:21:49:dc:3b:
                    0b:a7:5f:c0:84:ed:75:24:9a:3f:8a:6e:92:39:99:
                    68:ef:07:04:22:1d:40:1f:99:f4:39:59:1a:da:c5:
                    6d:4b:41:1f:7c:e6:44:fb:d3:c8:60:24:8f:e1:85:
                    66:12:7a:fe:08:7b:bd:bc:4b:18:08:42:f7:c0:cd:
                    9f:16:63:2a:e6:4b:38:cc:f3:df:1d:d7:97:31:0a:
                    b8:5f:ab:fa:22:7c:5c:a7:a6:21:8c:ae:c2:fb:88:
                    5c:86:65:2c:87:88:9f:1f:3b:f9:ab:5b:89:67:db:
                    5e:02:7f:2f:15:67:f8:ca:90:ad:40:8c:d0:91:78:
                    ac:68:e9:5b:4c:b3:50:e5:c1:c3:9a:33:33:be:8a:
                    c9:28:08:da:17:68:84:9f:ec:52:92:2f:71:b9:1f:
                    0b:cd:3e:49:3a:54:0c:d0:f9:53:44:80:31:4d:d5:
                    81:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:02:A2:5E:E8:B6:C9:10:1C:4F:AA:CB:43:F3:0B:A2:6D:28:9B:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0/4ea1dfd8-de9d-3f58-a7d9-e3eb11768aad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0.crl

            X509v3 Authority Key Identifier:
                keyid:0D:39:5C:E3:0D:1F:BD:B6:79:8A:1D:50:60:EC:FC:62:57:43:80:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e49eaa07-93bd-4f2b-b9c6-ac1d4106c5b0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.47.112.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:b2:dc:a5:48:ae:24:11:73:a7:cd:7b:7e:47:15:94:b9:b6:
         61:9c:72:b4:36:0e:b1:50:6b:fe:27:4c:4a:ff:e8:15:d9:9c:
         75:42:80:8d:ef:87:4a:f0:83:2e:4e:ad:8b:15:d5:16:aa:62:
         9e:b1:15:e4:9d:a1:c0:08:73:e2:c8:9a:08:1e:cb:71:f6:61:
         ee:2d:a1:fa:f4:04:4e:9b:25:77:d6:fb:b1:c3:e1:be:b8:27:
         22:b1:21:c3:65:be:44:e7:0d:15:17:b8:38:81:0a:29:28:67:
         24:dc:90:ff:01:9f:6c:8e:92:5c:4d:27:42:15:ec:bc:82:6a:
         0a:4e:f8:6e:89:5a:c1:9d:d6:ce:15:11:e1:6b:f3:26:50:6e:
         95:78:d9:24:44:b7:5a:9e:1f:c8:e1:c8:1b:aa:99:c9:d3:4e:
         30:8f:b1:e5:d8:8f:89:5a:4d:8b:6c:b1:1f:88:6a:b7:17:bd:
         8d:4b:d1:0e:07:1c:78:e2:40:d1:be:9c:18:2b:b1:f9:be:44:
         e3:86:de:97:32:5f:50:2b:15:b9:d2:b7:99:ab:49:6f:c1:b3:
         6e:f8:84:ad:1e:97:95:61:3d:dd:58:a4:09:5a:5a:61:7b:b7:
         68:bd:48:7f:f2:14:86:2f:5a:70:f8:87:5e:27:6b:af:3b:78:
         16:4b:a5:20
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7QAfPPiRDmMZai93AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTQ5ZWFhMDctOTNiZC00ZjJiLWI5YzYtYWMxZDQxMDZj
NWIwMB4XDTI2MDgxMjEzMDAxMloXDTI2MTExMDE0MDAxMlowLzEtMCsGA1UEAxMk
NDU0YTUyMGEtY2Y5ZC00NDg0LTgwOTAtMzBkNjllNWE4ZTk3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnLJ37nfnKyvKxl/oOiskDs6ovYEzd9Btt7bo
VBU07vcS+5KzCLTigxqh0QRneQxy68snG8tdHpgtn4r3dLJEAZ1C3A/TzAeXJI/X
iodNAmdg8gZYAiFJ3DsLp1/AhO11JJo/im6SOZlo7wcEIh1AH5n0OVka2sVtS0Ef
fOZE+9PIYCSP4YVmEnr+CHu9vEsYCEL3wM2fFmMq5ks4zPPfHdeXMQq4X6v6Inxc
p6YhjK7C+4hchmUsh4ifHzv5q1uJZ9teAn8vFWf4ypCtQIzQkXisaOlbTLNQ5cHD
mjMzvorJKAjaF2iEn+xSki9xuR8LzT5JOlQM0PlTRIAxTdWBqQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFC4Col7otskQHE+qy0PzC6JtKJt6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNDll
YWEwNy05M2JkLTRmMmItYjljNi1hYzFkNDEwNmM1YjAvNGVhMWRmZDgtZGU5ZC0z
ZjU4LWE3ZDktZTNlYjExNzY4YWFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTQ5ZWFhMDctOTNiZC00ZjJiLWI5
YzYtYWMxZDQxMDZjNWIwL2U0OWVhYTA3LTkzYmQtNGYyYi1iOWM2LWFjMWQ0MTA2
YzViMC5jcmwwHwYDVR0jBBgwFoAUDTlc4w0fvbZ5ih1QYOz8YldDgDUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9lNDllYWEwNy05M2JkLTRmMmItYjljNi1hYzFk
NDEwNmM1YjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxy9wMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKWy3KVIriQRc6fNe35HFZS5tmGccrQ2DrFQa/4nTEr/6BXZnHVCgI3v
h0rwgy5OrYsV1RaqYp6xFeSdocAIc+LImggey3H2Ye4tofr0BE6bJXfW+7HD4b64
JyKxIcNlvkTnDRUXuDiBCikoZyTckP8Bn2yOklxNJ0IV7LyCagpO+G6JWsGd1s4V
EeFr8yZQbpV42SREt1qeH8jhyBuqmcnTTjCPseXYj4laTYtssR+IarcXvY1L0Q4H
HHjiQNG+nBgrsfm+ROOG3pcyX1ArFbnSt5mrSW/Bs274hK0el5VhPd1YpAlaWmF7
t2i9SH/yFIYvWnD4h14na687eBZLpSA=
-----END CERTIFICATE-----
Generated at Wed Sep 23 12:45:13 2026 by rpki-client