Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a1a547d4-28fc-3190-bca1-f7a673bee6ee.roa
File:                     a1a547d4-28fc-3190-bca1-f7a673bee6ee.roa (raw, json)
Hash identifier:          lqBy3ecp/GX/x7B6/S+aLAwpCNTvhG4GmgVwA+AqRAI=
Subject key identifier:   DC:27:02:DD:99:C0:AA:64:F8:68:B3:06:C8:16:AB:9B:4E:4B:00:CE
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584D2D3F89DB3E2D614BA1AE2A00
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a1a547d4-28fc-3190-bca1-f7a673bee6ee.roa
Signing time:             Sun 15 Mar 2026 13:00:41 +0000
ROA not before:           Sun 15 Mar 2026 13:00:41 +0000
ROA not after:            Sat 13 Jun 2026 13:00:41 +0000
asID:                     7029
IP address blocks:        173.187.190.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:2d:3f:89:db:3e:2d:61:4b:a1:ae:2a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Mar 15 13:00:41 2026 GMT
            Not After : Jun 13 13:00:41 2026 GMT
        Subject: CN=eb13ffcd-5cfa-4c95-a0b9-4b65bd1b6dd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:a5:08:41:59:71:01:53:60:ee:92:7e:08:c5:
                    e8:f9:fa:5e:82:53:0b:c1:60:b6:57:20:20:5a:64:
                    c7:74:33:79:fd:8e:f6:62:43:02:a7:eb:22:b3:93:
                    fd:b5:6b:23:60:61:ac:cd:db:3a:2f:13:6a:53:2f:
                    4d:7f:2a:6b:b1:b0:ec:33:b3:07:7b:63:f1:99:56:
                    e3:1c:9e:2c:5b:0e:48:25:ce:40:4a:44:e6:eb:5c:
                    4b:21:10:ca:00:a8:7e:0f:78:9c:90:f3:30:51:f3:
                    b8:af:a7:2a:2a:4e:10:43:bd:e7:42:42:d9:9e:87:
                    52:c0:f1:1f:62:e8:0f:e4:98:27:aa:ea:f6:2e:7d:
                    6f:0c:4f:3a:3d:69:2e:7f:d4:46:db:b6:ce:aa:20:
                    fa:ab:f6:81:be:c7:65:83:d7:f7:f9:02:d4:5a:14:
                    0d:e6:9c:92:91:e3:fb:aa:7e:55:28:fd:91:5e:b9:
                    9d:d1:52:b9:af:12:7c:01:34:19:8e:4c:c3:62:75:
                    a7:74:92:7c:8f:74:c9:00:57:49:20:f9:e3:4b:08:
                    ae:9c:a7:0d:dc:fd:86:35:76:bb:23:86:1f:42:77:
                    e8:71:ea:a4:b9:4e:53:6d:56:28:12:33:b4:68:b6:
                    0d:63:a2:e0:5f:50:4d:30:9a:46:a4:82:d6:99:80:
                    16:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:27:02:DD:99:C0:AA:64:F8:68:B3:06:C8:16:AB:9B:4E:4B:00:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a1a547d4-28fc-3190-bca1-f7a673bee6ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.187.190.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:79:73:28:9d:1a:40:a3:a1:e8:c6:b5:f0:e7:ab:0a:4c:44:
         4c:1c:99:69:9e:27:75:f3:7e:f7:0c:01:44:15:b7:05:32:0e:
         ed:b7:37:ce:9e:f2:4a:5d:f2:7e:49:ad:2f:cb:08:9b:75:37:
         2b:6a:86:63:c0:55:01:cc:a7:fd:9d:2f:a1:2d:a7:c6:f1:de:
         90:9a:d7:31:bf:8f:12:b7:29:cf:ab:9e:13:b4:42:db:bc:d3:
         79:65:4e:41:33:d5:7e:f8:5f:3d:c3:c1:c0:73:76:71:5a:d3:
         10:9a:99:7f:55:0b:46:9f:dc:83:62:c0:c9:20:d8:12:0f:b9:
         f5:f6:60:ab:95:c1:b0:8d:0a:6b:5a:b3:ff:a2:b3:14:d0:9c:
         2e:9f:33:b9:18:91:be:ba:fa:8e:3e:c2:89:84:7f:9c:16:89:
         9e:7e:1f:e9:71:bf:e1:d4:bf:0f:7c:5d:4c:5b:ec:e6:80:48:
         b0:e6:0c:0f:64:c5:a4:3a:13:0b:63:e2:88:e5:b4:2b:83:56:
         9b:9c:45:9b:59:e7:45:c9:f9:fb:ff:cc:80:9e:fe:99:a2:78:
         f5:e9:a0:ae:1e:6d:13:98:86:60:fc:26:4d:fd:99:f6:19:d2:
         fe:fe:a8:f6:c0:23:f3:f2:af:2e:8f:fa:ba:eb:3d:d2:43:b4:
         cb:41:e6:e5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0tP4nbPi1hS6GuKgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTI2MDMxNTEzMDA0MVoXDTI2MDYxMzEzMDA0MVowLzEtMCsGA1UEAxMk
ZWIxM2ZmY2QtNWNmYS00Yzk1LWEwYjktNGI2NWJkMWI2ZGQwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoKUIQVlxAVNg7pJ+CMXo+fpeglMLwWC2VyAg
WmTHdDN5/Y72YkMCp+sis5P9tWsjYGGszds6LxNqUy9NfyprsbDsM7MHe2PxmVbj
HJ4sWw5IJc5ASkTm61xLIRDKAKh+D3ickPMwUfO4r6cqKk4QQ73nQkLZnodSwPEf
YugP5Jgnqur2Ln1vDE86PWkuf9RG27bOqiD6q/aBvsdlg9f3+QLUWhQN5pySkeP7
qn5VKP2RXrmd0VK5rxJ8ATQZjkzDYnWndJJ8j3TJAFdJIPnjSwiunKcN3P2GNXa7
I4YfQnfoceqkuU5TbVYoEjO0aLYNY6LgX1BNMJpGpILWmYAWgwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNwnAt2ZwKpk+GizBsgWq5tOSwDOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTFhNTQ3ZDQtMjhmYy0z
MTkwLWJjYTEtZjdhNjczYmVlNmVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArbu+MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFV5cyidGkCjoejGtfDnqwpMREwcmWmeJ3XzfvcMAUQVtwUyDu23N86e
8kpd8n5JrS/LCJt1NytqhmPAVQHMp/2dL6Etp8bx3pCa1zG/jxK3Kc+rnhO0Qtu8
03llTkEz1X74Xz3DwcBzdnFa0xCamX9VC0af3INiwMkg2BIPufX2YKuVwbCNCmta
s/+isxTQnC6fM7kYkb66+o4+womEf5wWiZ5+H+lxv+HUvw98XUxb7OaASLDmDA9k
xaQ6Ewtj4ojltCuDVpucRZtZ50XJ+fv/zICe/pmiePXpoK4ebROYhmD8Jk39mfYZ
0v7+qPbAI/Pyry6P+rrrPdJDtMtB5uU=
-----END CERTIFICATE-----
Generated at Thu Mar 26 19:34:15 2026 by rpki-client