Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/49f4f873-e26d-3c89-be18-a10d45ad89e3.roa
File:                     49f4f873-e26d-3c89-be18-a10d45ad89e3.roa (raw, json)
Hash identifier:          cTG8oLRUH98B4FGiu6zSAmEfmESvhEeEY7Nzn8+99Cs=
Subject key identifier:   34:AB:E0:01:60:18:9B:21:BB:6B:2A:F3:3C:5B:3D:87:9F:1F:1E:CF
Certificate issuer:       /CN=2267c34a-3a60-4747-b909-d82f8824f3ec
Certificate serial:       010D0C9F4328584DBBA04C75112AC46E7CB68F80
Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/49f4f873-e26d-3c89-be18-a10d45ad89e3.roa
Signing time:             Tue 05 May 2026 13:00:31 +0000
ROA not before:           Tue 05 May 2026 13:00:31 +0000
ROA not after:            Mon 03 Aug 2026 13:00:31 +0000
asID:                     55044
IP address blocks:        67.130.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:bb:a0:4c:75:11:2a:c4:6e:7c:b6:8f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec
        Validity
            Not Before: May  5 13:00:31 2026 GMT
            Not After : Aug  3 13:00:31 2026 GMT
        Subject: CN=9410e465-4353-4617-b345-f8021dfad019
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:7f:00:69:5d:c0:0f:c3:de:b7:b6:ba:85:27:
                    e4:8c:a7:1f:5b:cf:75:29:25:56:74:4e:c0:7b:20:
                    72:f2:23:fe:c6:79:14:22:50:80:ec:8e:4a:1a:89:
                    0b:e9:c0:cf:ea:20:23:b4:56:3e:28:22:2a:f5:6a:
                    ba:00:c8:09:3b:9a:e7:d5:f3:38:83:0c:60:83:94:
                    51:f2:2a:b0:24:93:9d:f4:28:cb:ac:83:73:46:a0:
                    4d:da:df:bf:1a:71:a2:73:df:3f:87:19:d1:f6:18:
                    07:00:cb:0d:0c:7a:0b:98:cd:6e:5a:e4:49:ae:f6:
                    27:6e:05:80:50:20:eb:9b:89:48:36:5c:02:92:23:
                    dc:14:e7:be:d5:ab:0e:42:4d:a9:05:80:f8:be:11:
                    9b:40:0c:b2:0e:b8:ea:c6:24:16:98:07:52:44:6a:
                    d6:79:eb:11:d5:52:34:e0:df:b0:61:e0:ef:ac:fe:
                    5b:c6:1b:b2:84:8b:3d:2a:94:32:53:1a:3c:e8:13:
                    a3:d9:3c:b0:dd:17:c2:39:6e:ef:e6:5d:d9:2a:e8:
                    79:41:87:08:99:84:0d:8a:17:d3:3f:a0:9b:0b:3b:
                    0f:1a:e5:54:53:b3:6a:a9:05:1d:8c:8b:06:e9:92:
                    29:1e:cd:3f:bd:29:30:cb:98:6a:47:de:e7:58:e8:
                    9d:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:AB:E0:01:60:18:9B:21:BB:6B:2A:F3:3C:5B:3D:87:9F:1F:1E:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/49f4f873-e26d-3c89-be18-a10d45ad89e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl

            X509v3 Authority Key Identifier:
                keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.130.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:0b:b7:7d:13:d1:44:a5:8f:9c:e3:0a:5a:cc:34:3c:75:53:
         3a:29:f3:d7:9b:5f:52:22:34:a1:7d:e0:67:6f:4e:6a:b2:f7:
         5b:b2:15:06:91:e8:6d:06:9e:9c:d3:54:cc:da:fd:52:35:49:
         73:ac:88:4c:a5:29:62:1b:fc:eb:08:18:b3:4e:cc:ae:d0:50:
         b9:84:38:35:a8:8f:ee:14:c0:fc:a1:cb:e8:8b:0b:d3:cc:cd:
         68:fc:30:45:3b:68:8e:cf:77:df:2d:6c:59:e4:f0:69:9d:f6:
         a9:2c:f8:f8:e0:02:75:95:ea:a4:7a:0a:f3:8a:7d:e6:65:49:
         87:5d:1c:24:86:16:ea:c8:bf:c0:ac:a4:a3:f7:10:ee:57:fd:
         e4:da:5f:ca:40:31:b4:68:b1:ee:fc:04:75:c7:01:5e:14:82:
         53:27:8a:1b:ac:6b:2b:24:25:16:99:33:b7:80:2d:b0:80:0d:
         d1:2c:e3:d5:d7:90:93:4b:98:7e:5f:8f:2a:1b:7d:b1:70:82:
         66:ab:9c:b9:a2:84:e4:38:eb:16:5e:70:ec:ca:2e:ac:52:4d:
         79:21:2a:6f:51:b4:13:5c:3e:d4:ad:8b:9e:c2:b3:ac:7b:8b:
         a6:5e:f2:87:a3:cd:a8:87:7f:4d:6f:9f:51:62:44:73:f6:f3:
         55:ed:1b:ba
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE27oEx1ESrEbny2j4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjI2N2MzNGEtM2E2MC00NzQ3LWI5MDktZDgyZjg4MjRm
M2VjMB4XDTI2MDUwNTEzMDAzMVoXDTI2MDgwMzEzMDAzMVowLzEtMCsGA1UEAxMk
OTQxMGU0NjUtNDM1My00NjE3LWIzNDUtZjgwMjFkZmFkMDE5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArn8AaV3AD8Pet7a6hSfkjKcfW891KSVWdE7A
eyBy8iP+xnkUIlCA7I5KGokL6cDP6iAjtFY+KCIq9Wq6AMgJO5rn1fM4gwxgg5RR
8iqwJJOd9CjLrINzRqBN2t+/GnGic98/hxnR9hgHAMsNDHoLmM1uWuRJrvYnbgWA
UCDrm4lINlwCkiPcFOe+1asOQk2pBYD4vhGbQAyyDrjqxiQWmAdSRGrWeesR1VI0
4N+wYeDvrP5bxhuyhIs9KpQyUxo86BOj2Tyw3RfCOW7v5l3ZKuh5QYcImYQNihfT
P6CbCzsPGuVUU7NqqQUdjIsG6ZIpHs0/vSkwy5hqR97nWOidOQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDSr4AFgGJshu2sq8zxbPYefHx7PMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3
YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJmODgyNGYzZWMvNDlmNGY4NzMtZTI2ZC0z
Yzg5LWJlMTgtYTEwZDQ1YWQ4OWUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjI2N2MzNGEtM2E2MC00NzQ3LWI5
MDktZDgyZjg4MjRmM2VjLzIyNjdjMzRhLTNhNjAtNDc0Ny1iOTA5LWQ4MmY4ODI0
ZjNlYy5jcmwwHwYDVR0jBBgwFoAUll9eidK7KUDgotBf+EMpgrjtfSUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJm
ODgyNGYzZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ4JHMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGoLt30T0USlj5zjClrMNDx1Uzop89ebX1IiNKF94GdvTmqy91uyFQaR
6G0GnpzTVMza/VI1SXOsiEylKWIb/OsIGLNOzK7QULmEODWoj+4UwPyhy+iLC9PM
zWj8MEU7aI7Pd98tbFnk8Gmd9qks+PjgAnWV6qR6CvOKfeZlSYddHCSGFurIv8Cs
pKP3EO5X/eTaX8pAMbRose78BHXHAV4UglMnihusayskJRaZM7eALbCADdEs49XX
kJNLmH5fjyobfbFwgmarnLmihOQ46xZecOzKLqxSTXkhKm9RtBNcPtSti57Cs6x7
i6Ze8oejzaiHf01vn1FiRHP281XtG7o=
-----END CERTIFICATE-----
Generated at Wed May 13 14:20:50 2026 by rpki-client