Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/ac5926d3-aa48-398b-874f-02d9bca75059.roa
File:                     ac5926d3-aa48-398b-874f-02d9bca75059.roa (raw, json)
Hash identifier:          qvokAWuspQ7M+IEStSuGNxg2b++jAsY3QzNwXfmeoT8=
Subject key identifier:   67:9B:ED:F8:01:5E:A5:F1:C5:84:FE:E8:25:F5:85:37:88:56:6E:38
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584AA160EAC1DF5980ED99C02E80
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/ac5926d3-aa48-398b-874f-02d9bca75059.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     10796
IP address blocks:        98.157.224.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:60:ea:c1:df:59:80:ed:99:c0:2e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=736f80a1-902e-433c-82dc-94b8c5392d22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:13:ef:58:a1:62:89:02:98:13:20:19:8f:1d:
                    f9:70:1a:d3:d0:5d:d4:86:37:4a:66:9d:4c:37:a2:
                    96:f5:4d:fe:32:58:2d:48:05:70:6d:39:ef:eb:8e:
                    bc:5f:a6:03:22:e8:7c:fc:54:d6:85:26:6d:41:b1:
                    1d:cf:10:2c:ea:c3:74:06:12:d5:b7:67:7c:bc:a1:
                    b6:45:dc:85:4c:0c:a9:6c:2b:8b:83:de:40:36:87:
                    1e:4d:17:da:cb:c1:23:7f:ed:71:d5:c5:05:4e:24:
                    65:af:88:34:13:94:b3:48:fc:d6:47:00:5b:af:35:
                    48:a8:8a:2b:dd:65:1f:0e:38:06:1c:9f:82:a0:22:
                    3f:02:51:87:db:aa:95:1a:68:ef:bb:a1:bd:49:4b:
                    21:cc:4c:af:b4:bd:54:d8:d3:50:aa:29:75:b6:13:
                    76:d7:8c:bc:07:c1:ec:bd:5b:4c:40:b8:39:b5:17:
                    d1:6d:94:6b:ca:a8:39:9a:6d:b9:45:44:a6:d9:0a:
                    7c:51:18:b7:94:a1:77:a3:e9:33:19:22:df:d1:8c:
                    89:8a:19:b2:c5:7e:6c:90:f5:db:85:b3:19:50:af:
                    20:06:7b:5b:2c:a8:ff:1b:19:19:94:bf:1c:bc:2d:
                    ed:b6:63:6b:a6:09:2f:c2:05:b7:5e:75:37:f3:20:
                    59:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:9B:ED:F8:01:5E:A5:F1:C5:84:FE:E8:25:F5:85:37:88:56:6E:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/ac5926d3-aa48-398b-874f-02d9bca75059.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.157.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:ab:01:ad:f2:fe:d9:5b:6d:be:9b:be:a4:bf:81:18:ac:27:
         dd:53:03:6d:13:9e:ea:4a:4d:a4:67:fb:89:78:39:f2:46:65:
         66:0e:b4:54:47:9c:bf:5e:90:aa:72:73:95:96:f3:78:21:62:
         c3:72:a1:d3:03:d6:d2:31:b9:c6:cf:d9:b0:61:15:47:84:73:
         f6:4c:60:ba:6a:18:f4:fe:cd:fc:d9:f6:53:1f:50:5a:61:68:
         ca:63:be:67:46:c9:7c:80:a2:31:e7:b7:44:c9:0e:ac:9c:d7:
         02:cf:ae:c4:dc:50:5e:76:5b:c9:aa:af:ec:9d:cd:5b:25:77:
         ed:79:d4:e7:9f:97:bf:ec:ae:3e:85:07:de:19:86:c5:48:ca:
         b8:12:81:8e:8d:ae:7f:8b:bc:ee:64:01:19:da:9e:81:84:0f:
         11:cb:96:5e:2d:44:8e:d7:80:34:7d:da:63:f0:9b:b0:e8:6a:
         89:75:25:be:e9:87:ea:09:98:48:3a:18:d9:bb:2b:20:ce:db:
         cd:0e:cb:77:45:ec:d0:01:1f:4d:a8:d5:cf:f5:1e:5c:fe:5d:
         63:34:b6:b6:2b:a3:8d:92:45:f6:78:e1:13:ec:dd:80:66:3c:
         1c:04:67:bd:19:33:fd:e4:55:79:fb:6d:51:59:58:3a:22:1b:
         89:79:a2:22
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqhYOrB31mA7ZnALoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTI1MDcyNTAxMDA1MFoXDTI1MTAyMzAxMDA1MFowLzEtMCsGA1UEAxMk
NzM2ZjgwYTEtOTAyZS00MzNjLTgyZGMtOTRiOGM1MzkyZDIyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAghPvWKFiiQKYEyAZjx35cBrT0F3UhjdKZp1M
N6KW9U3+MlgtSAVwbTnv6468X6YDIuh8/FTWhSZtQbEdzxAs6sN0BhLVt2d8vKG2
RdyFTAypbCuLg95ANoceTRfay8Ejf+1x1cUFTiRlr4g0E5SzSPzWRwBbrzVIqIor
3WUfDjgGHJ+CoCI/AlGH26qVGmjvu6G9SUshzEyvtL1U2NNQqil1thN214y8B8Hs
vVtMQLg5tRfRbZRryqg5mm25RUSm2Qp8URi3lKF3o+kzGSLf0YyJihmyxX5skPXb
hbMZUK8gBntbLKj/GxkZlL8cvC3ttmNrpgkvwgW3XnU38yBZYwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGeb7fgBXqXxxYT+6CX1hTeIVm44MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvYWM1OTI2ZDMtYWE0OC0z
OThiLTg3NGYtMDJkOWJjYTc1MDU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFYp3gMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEqrAa3y/tlbbb6bvqS/gRisJ91TA20TnupKTaRn+4l4OfJGZWYOtFRH
nL9ekKpyc5WW83ghYsNyodMD1tIxucbP2bBhFUeEc/ZMYLpqGPT+zfzZ9lMfUFph
aMpjvmdGyXyAojHnt0TJDqyc1wLPrsTcUF52W8mqr+ydzVsld+151Oefl7/srj6F
B94ZhsVIyrgSgY6Nrn+LvO5kARnanoGEDxHLll4tRI7XgDR92mPwm7Doaol1Jb7p
h+oJmEg6GNm7KyDO280Oy3dF7NABH02o1c/1Hlz+XWM0trYro42SRfZ44RPs3YBm
PBwEZ70ZM/3kVXn7bVFZWDoiG4l5oiI=
-----END CERTIFICATE-----
Generated at Fri Jul 25 06:27:08 2025 by rpki-client