Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6d3fb0ec-63d5-342c-8c81-bdcd51af9818.roa
File:                     6d3fb0ec-63d5-342c-8c81-bdcd51af9818.roa (raw, json)
Hash identifier:          VyFpFsrCXiWL8PX9c8Bvsu0FkJcB7e3JybyISW8KRQY=
Subject key identifier:   44:6D:01:33:CB:08:AD:58:23:DB:34:58:CE:33:29:D4:97:7E:9A:79
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584D300A6E93CE2C2D9144265420
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6d3fb0ec-63d5-342c-8c81-bdcd51af9818.roa
Signing time:             Mon 16 Mar 2026 13:00:40 +0000
ROA not before:           Mon 16 Mar 2026 13:00:40 +0000
ROA not after:            Sun 14 Jun 2026 13:00:40 +0000
asID:                     7029
IP address blocks:        174.130.60.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:30:0a:6e:93:ce:2c:2d:91:44:26:54:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Mar 16 13:00:40 2026 GMT
            Not After : Jun 14 13:00:40 2026 GMT
        Subject: CN=f0226c06-013f-43f5-8fbf-46a8a2d88844
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:e9:91:b5:27:68:df:30:c8:02:23:b0:dd:61:
                    ca:d1:93:f8:d0:25:7f:04:88:3d:39:90:ce:54:88:
                    23:b0:22:ce:b8:fd:87:3a:ab:f7:3d:1b:5c:c7:b3:
                    16:36:c0:c7:a4:73:21:0f:5c:f2:5f:2b:d1:51:98:
                    1d:ed:eb:35:3f:fa:71:54:cd:f4:49:10:4c:4c:cf:
                    b9:02:80:dc:76:76:b2:71:e0:65:41:ea:2d:6c:7d:
                    f3:39:fd:64:4e:06:46:17:8d:47:8e:b9:a2:9c:a0:
                    bc:51:b2:94:ec:5d:6c:aa:29:64:3f:a2:e7:5f:fa:
                    d3:2c:47:d5:98:3a:85:e4:b6:92:31:76:06:6b:b0:
                    56:f9:fb:c5:03:c9:6f:88:db:52:27:ee:b7:b7:d0:
                    ea:41:93:31:c7:f2:5f:03:46:ad:c2:09:f0:49:c0:
                    2d:75:79:ac:20:20:b4:c0:1f:e9:aa:9d:df:e1:80:
                    ae:3a:72:ec:fa:cd:1f:62:b8:a6:f1:10:18:24:38:
                    65:0d:46:70:7a:35:55:d6:61:b6:ce:c1:27:ae:dd:
                    ea:de:be:9a:d9:a8:38:fe:33:a3:8f:bb:2c:7e:d9:
                    75:85:5e:56:86:b9:82:90:57:ed:73:75:48:fe:0f:
                    71:e7:18:de:da:85:8a:06:7f:f0:6a:00:ff:4c:0b:
                    6b:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:6D:01:33:CB:08:AD:58:23:DB:34:58:CE:33:29:D4:97:7E:9A:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6d3fb0ec-63d5-342c-8c81-bdcd51af9818.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.130.60.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:e0:f6:49:b2:c8:2c:06:63:69:6f:c8:1f:45:08:6a:59:d6:
         5f:d8:9d:a5:49:fd:c3:86:7a:88:74:b7:06:a0:f4:93:99:0f:
         de:16:b5:bb:48:a2:23:f0:f0:e1:73:d6:c4:80:96:6e:ae:18:
         61:d7:17:48:48:de:78:20:26:b6:b9:e4:9c:0d:8b:04:77:16:
         3e:6d:d3:d7:ef:31:2d:54:22:67:33:7d:1a:c4:62:11:b1:b0:
         ae:84:64:a3:6e:4e:03:2f:c3:4a:b4:7e:aa:26:93:b7:6e:65:
         0c:0c:15:f0:aa:dd:45:b0:96:4b:7d:c0:88:45:9a:2f:6b:d1:
         5d:27:d5:14:f6:1d:a1:ad:79:7c:23:4f:a1:a6:5d:7a:74:7a:
         d0:60:04:d1:ab:b9:ec:d7:6b:d9:ce:67:0f:fb:5d:56:9b:ac:
         a7:05:e6:fa:c6:e4:78:ef:92:a2:bd:39:02:6b:d4:43:6c:63:
         f2:97:30:cb:1f:99:31:56:1c:88:1d:18:ed:eb:e1:fd:b1:d0:
         db:e1:20:fe:a6:bc:5b:f9:58:a3:02:d6:8d:34:60:76:67:50:
         f4:39:b8:3c:89:db:42:70:22:79:4f:63:bc:df:25:81:f8:b5:
         2f:fc:bc:24:7b:e7:1f:e1:ee:aa:c2:79:5d:b1:f7:5d:cc:3f:
         b7:9d:97:1b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCm6TziwtkUQmVCAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk
ZjAyMjZjMDYtMDEzZi00M2Y1LThmYmYtNDZhOGEyZDg4ODQ0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi+mRtSdo3zDIAiOw3WHK0ZP40CV/BIg9OZDO
VIgjsCLOuP2HOqv3PRtcx7MWNsDHpHMhD1zyXyvRUZgd7es1P/pxVM30SRBMTM+5
AoDcdnayceBlQeotbH3zOf1kTgZGF41HjrminKC8UbKU7F1sqilkP6LnX/rTLEfV
mDqF5LaSMXYGa7BW+fvFA8lviNtSJ+63t9DqQZMxx/JfA0atwgnwScAtdXmsICC0
wB/pqp3f4YCuOnLs+s0fYrim8RAYJDhlDUZwejVV1mG2zsEnrt3q3r6a2ag4/jOj
j7ssftl1hV5WhrmCkFftc3VI/g9x5xje2oWKBn/wagD/TAtr1wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFERtATPLCK1YI9s0WM4zKdSXfpp5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNmQzZmIwZWMtNjNkNS0z
NDJjLThjODEtYmRjZDUxYWY5ODE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCroI8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG/g9kmyyCwGY2lvyB9FCGpZ1l/YnaVJ/cOGeoh0twag9JOZD94WtbtI
oiPw8OFz1sSAlm6uGGHXF0hI3nggJra55JwNiwR3Fj5t09fvMS1UImczfRrEYhGx
sK6EZKNuTgMvw0q0fqomk7duZQwMFfCq3UWwlkt9wIhFmi9r0V0n1RT2HaGteXwj
T6GmXXp0etBgBNGruezXa9nOZw/7XVabrKcF5vrG5HjvkqK9OQJr1ENsY/KXMMsf
mTFWHIgdGO3r4f2x0NvhIP6mvFv5WKMC1o00YHZnUPQ5uDyJ20JwInlPY7zfJYH4
tS/8vCR75x/h7qrCeV2x913MP7edlxs=
-----END CERTIFICATE-----
Generated at Thu Mar 26 16:46:02 2026 by rpki-client