Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/56588bee-0151-3526-84ef-5faf988bdba3.roa
File:                     56588bee-0151-3526-84ef-5faf988bdba3.roa (raw, json)
Hash identifier:          edP/w3sIqRbjxnzZ/05zUfyG81b5+fOZgtc8AfYKBt0=
Subject key identifier:   52:90:7A:DE:DC:71:7A:AF:B0:84:41:F0:DA:FA:5B:38:7C:E3:8A:05
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584F62930BFBC76DADAAB4026A00
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/56588bee-0151-3526-84ef-5faf988bdba3.roa
Signing time:             Sun 04 Oct 2026 01:00:13 +0000
ROA not before:           Sun 04 Oct 2026 01:00:13 +0000
ROA not after:            Sat 02 Jan 2027 02:00:13 +0000
asID:                     7029
IP address blocks:        67.214.16.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 05 Oct 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:62:93:0b:fb:c7:6d:ad:aa:b4:02:6a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Oct  4 01:00:13 2026 GMT
            Not After : Jan  2 02:00:13 2027 GMT
        Subject: CN=0aad4de7-047a-4a49-8d74-967950d1bff6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:47:53:74:e7:a6:22:b0:da:b2:f1:9f:5d:c7:
                    61:16:55:b7:97:bc:08:9e:a8:04:b8:19:cf:cc:a1:
                    3a:ee:38:0b:52:0a:b1:cc:25:91:84:cd:74:d5:07:
                    09:8f:ef:29:51:e6:bf:33:64:fc:89:65:76:3c:e4:
                    ba:de:75:74:cc:24:ae:27:f1:4f:c0:26:22:e0:f7:
                    07:84:55:7c:70:cb:1c:cb:12:4a:4c:a3:57:82:eb:
                    24:32:9f:12:49:06:01:a5:20:df:40:46:44:90:67:
                    5f:66:3b:92:6f:ac:00:00:ec:a0:76:69:25:f8:88:
                    47:40:9b:91:c0:89:1a:ba:ef:9f:4c:54:d1:df:66:
                    d5:14:c8:a4:18:a2:60:a5:6b:71:5f:26:aa:68:38:
                    af:dd:58:5b:96:10:00:a8:08:b3:70:4b:d4:5e:20:
                    50:9f:4c:1f:7a:ff:c5:43:18:cc:0a:79:a5:17:22:
                    a6:6d:7a:3c:1c:cd:23:f1:f3:29:3a:68:a5:bb:4a:
                    4c:c7:8e:f5:30:27:fa:aa:02:03:17:15:43:e9:ad:
                    18:e9:e4:8d:43:9f:65:9f:c4:ce:36:0e:5a:f6:ff:
                    c1:2d:fb:d0:39:27:7a:d7:e1:b5:74:b4:e9:ec:dd:
                    1d:7d:7b:ea:9a:13:e5:5e:52:cd:04:36:44:42:c1:
                    88:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:90:7A:DE:DC:71:7A:AF:B0:84:41:F0:DA:FA:5B:38:7C:E3:8A:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/56588bee-0151-3526-84ef-5faf988bdba3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.214.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:29:9b:0c:d6:b2:db:a5:c6:b6:72:48:3a:de:26:21:df:6e:
         39:b0:12:b4:86:55:ed:bb:f8:3e:ff:04:02:41:22:b0:08:b0:
         2b:15:7b:0f:4f:28:76:ed:5e:84:96:a5:e7:9f:62:a0:d2:ed:
         24:6c:f8:47:50:98:93:23:e1:be:50:66:69:4f:c9:33:dc:07:
         b4:1a:58:d9:f0:f3:32:ee:de:08:87:f7:80:7c:c8:22:7d:5d:
         a1:c0:00:d5:9b:9e:0b:a6:a7:b3:d5:11:c2:4e:b5:ae:24:b8:
         38:ef:05:95:94:ab:c2:11:fd:82:57:18:1b:f8:a9:d6:54:b8:
         33:f1:1a:2d:97:f5:41:e1:72:7e:de:fe:2b:1b:d6:7a:0f:2f:
         11:b6:e1:a4:64:7d:cd:29:21:64:5b:73:8d:d9:27:27:c7:98:
         20:d1:92:49:0c:7c:66:94:db:4f:a6:72:da:8f:0b:70:c5:95:
         ff:7b:e8:f1:24:99:08:11:26:21:3a:a5:59:7b:13:b3:ba:8e:
         f4:4b:d7:47:7b:cc:08:ae:86:18:00:65:84:7e:43:a8:f9:ea:
         07:26:9f:ef:7f:74:69:31:2c:9b:c0:ff:01:c9:08:ee:b2:ad:
         2f:ad:a8:fa:43:01:9f:67:c8:a1:28:57:c5:76:44:39:16:fa:
         98:68:28:9a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9ikwv7x22tqrQCagAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk
MGFhZDRkZTctMDQ3YS00YTQ5LThkNzQtOTY3OTUwZDFiZmY2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAykdTdOemIrDasvGfXcdhFlW3l7wInqgEuBnP
zKE67jgLUgqxzCWRhM101QcJj+8pUea/M2T8iWV2POS63nV0zCSuJ/FPwCYi4PcH
hFV8cMscyxJKTKNXguskMp8SSQYBpSDfQEZEkGdfZjuSb6wAAOygdmkl+IhHQJuR
wIkauu+fTFTR32bVFMikGKJgpWtxXyaqaDiv3VhblhAAqAizcEvUXiBQn0wfev/F
QxjMCnmlFyKmbXo8HM0j8fMpOmilu0pMx471MCf6qgIDFxVD6a0Y6eSNQ59ln8TO
Ng5a9v/BLfvQOSd61+G1dLTp7N0dfXvqmhPlXlLNBDZEQsGIeQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFKQet7ccXqvsIRB8Nr6Wzh844oFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNTY1ODhiZWUtMDE1MS0z
NTI2LTg0ZWYtNWZhZjk4OGJkYmEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQ9YQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABIpmwzWstulxrZySDreJiHfbjmwErSGVe27+D7/BAJBIrAIsCsVew9P
KHbtXoSWpeefYqDS7SRs+EdQmJMj4b5QZmlPyTPcB7QaWNnw8zLu3giH94B8yCJ9
XaHAANWbngump7PVEcJOta4kuDjvBZWUq8IR/YJXGBv4qdZUuDPxGi2X9UHhcn7e
/isb1noPLxG24aRkfc0pIWRbc43ZJyfHmCDRkkkMfGaU20+mctqPC3DFlf976PEk
mQgRJiE6pVl7E7O6jvRL10d7zAiuhhgAZYR+Q6j56gcmn+9/dGkxLJvA/wHJCO6y
rS+tqPpDAZ9nyKEoV8V2RDkW+phoKJo=
-----END CERTIFICATE-----
Generated at Sun Oct 4 21:48:53 2026 by rpki-client