Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/511f7154-9a50-3aaf-ab86-c994982c6b96.roa
File:                     511f7154-9a50-3aaf-ab86-c994982c6b96.roa (raw, json)
Hash identifier:          60pEGHA2UJnJwAPLHlpaiyR3J2Rvs7SgiVXlhAdCs7E=
Subject key identifier:   F7:CC:D2:07:A9:89:4E:03:BE:74:C0:8D:F9:DC:38:49:4A:96:27:28
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584A8C70DB510571A61169FCB600
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/511f7154-9a50-3aaf-ab86-c994982c6b96.roa
Signing time:             Thu 17 Jul 2025 13:01:04 +0000
ROA not before:           Thu 17 Jul 2025 13:01:04 +0000
ROA not after:            Wed 15 Oct 2025 13:01:04 +0000
asID:                     7029
IP address blocks:        98.22.232.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:8c:70:db:51:05:71:a6:11:69:fc:b6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Jul 17 13:01:04 2025 GMT
            Not After : Oct 15 13:01:04 2025 GMT
        Subject: CN=86337e9b-b8e1-4d6a-a941-099e19062fdc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:71:f8:1f:c8:b8:38:41:84:0a:85:2f:ec:3e:
                    98:f7:51:c3:c1:eb:93:01:5a:50:71:60:81:50:91:
                    16:51:88:f5:a5:f8:4e:00:1f:d1:ce:65:18:b8:d1:
                    ef:d1:10:e6:ac:98:3a:5c:80:c1:2a:f4:8e:c3:fa:
                    9c:14:ca:17:fe:3c:12:c0:ae:9e:7e:16:27:10:54:
                    d5:6a:e4:26:56:c2:4f:87:77:3a:cd:41:67:44:04:
                    ae:0f:5c:79:8f:4c:0b:82:83:dd:1f:15:73:4d:54:
                    ad:c7:ac:29:de:76:a1:d8:a4:b5:a1:57:de:ca:a3:
                    7c:32:da:48:27:7f:c1:9a:ff:d5:fd:3c:1b:ff:a7:
                    c0:59:86:44:7c:8a:a0:dd:c0:0b:22:3f:54:ab:87:
                    4e:4f:aa:5a:40:30:23:bd:57:df:d4:4a:d6:4f:86:
                    d3:4a:99:ee:12:a4:16:f5:fd:e6:ed:16:dc:75:7c:
                    42:56:a5:bb:58:a5:70:d9:a1:c7:c8:54:02:a7:01:
                    57:ef:ac:09:28:3c:9f:55:68:d2:3e:58:55:6b:5b:
                    38:e9:f1:ae:f9:45:2e:b1:b1:1f:c5:e6:42:f1:11:
                    fe:50:28:c0:d3:7b:24:cf:55:c2:54:f3:87:08:5d:
                    96:25:48:4b:24:06:c7:db:0b:56:ec:42:e6:24:05:
                    4e:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:CC:D2:07:A9:89:4E:03:BE:74:C0:8D:F9:DC:38:49:4A:96:27:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/511f7154-9a50-3aaf-ab86-c994982c6b96.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.22.232.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:63:49:fa:fa:b3:30:bc:40:4b:10:23:1b:91:19:93:68:3c:
         27:5f:f8:da:d8:8f:e9:17:c1:23:82:9f:5c:aa:ca:9f:b4:ed:
         76:df:5e:48:ea:4c:a4:3d:6d:1e:62:ab:eb:d6:bf:09:22:3f:
         74:33:ea:af:97:2c:62:dc:89:1d:4b:ee:eb:6b:9b:ce:9e:94:
         d7:be:5e:05:d7:96:0a:68:85:e5:a6:e3:a8:f1:e2:ff:b5:a2:
         22:e9:b9:9a:d4:23:96:19:96:13:8f:22:c8:ed:99:53:d7:b6:
         9c:a6:86:fd:39:c6:ed:8b:85:da:49:ae:ce:d6:d3:bb:90:7d:
         ce:14:e5:66:0d:23:30:bd:9f:bc:0e:f2:a0:a5:0c:73:c6:f1:
         58:81:6f:92:4a:d9:b7:2e:70:30:92:ac:b2:9d:ff:d6:52:30:
         8c:6b:a2:66:7a:11:bb:8b:60:91:8f:66:ea:3c:6a:ba:aa:87:
         fa:e9:52:72:e8:55:6d:d2:1c:29:f8:9c:b7:3d:86:8d:73:d5:
         18:95:af:7b:b6:f7:7f:5a:27:32:35:a2:56:17:a2:57:ef:8e:
         91:40:4a:61:95:fa:36:d2:6f:81:a6:e9:d0:f1:6d:8b:95:9d:
         53:a0:2b:e1:85:b5:43:8a:76:eb:a2:f2:23:68:5d:b0:b0:f7:
         5a:a4:c3:1b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqMcNtRBXGmEWn8tgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTI1MDcxNzEzMDEwNFoXDTI1MTAxNTEzMDEwNFowLzEtMCsGA1UEAxMk
ODYzMzdlOWItYjhlMS00ZDZhLWE5NDEtMDk5ZTE5MDYyZmRjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoHH4H8i4OEGECoUv7D6Y91HDweuTAVpQcWCB
UJEWUYj1pfhOAB/RzmUYuNHv0RDmrJg6XIDBKvSOw/qcFMoX/jwSwK6efhYnEFTV
auQmVsJPh3c6zUFnRASuD1x5j0wLgoPdHxVzTVStx6wp3nah2KS1oVfeyqN8MtpI
J3/Bmv/V/Twb/6fAWYZEfIqg3cALIj9Uq4dOT6paQDAjvVff1ErWT4bTSpnuEqQW
9f3m7RbcdXxCVqW7WKVw2aHHyFQCpwFX76wJKDyfVWjSPlhVa1s46fGu+UUusbEf
xeZC8RH+UCjA03skz1XCVPOHCF2WJUhLJAbH2wtW7ELmJAVOAQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPfM0gepiU4DvnTAjfncOElKlicoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNTExZjcxNTQtOWE1MC0z
YWFmLWFiODYtYzk5NDk4MmM2Yjk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhboMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAABjSfr6szC8QEsQIxuRGZNoPCdf+NrYj+kXwSOCn1yqyp+07XbfXkjq
TKQ9bR5iq+vWvwkiP3Qz6q+XLGLciR1L7utrm86elNe+XgXXlgpoheWm46jx4v+1
oiLpuZrUI5YZlhOPIsjtmVPXtpymhv05xu2LhdpJrs7W07uQfc4U5WYNIzC9n7wO
8qClDHPG8ViBb5JK2bcucDCSrLKd/9ZSMIxromZ6EbuLYJGPZuo8arqqh/rpUnLo
VW3SHCn4nLc9ho1z1RiVr3u2939aJzI1olYXolfvjpFASmGV+jbSb4Gm6dDxbYuV
nVOgK+GFtUOKduui8iNoXbCw91qkwxs=
-----END CERTIFICATE-----
Generated at Wed Aug 6 13:17:09 2025 by rpki-client