Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/51e994a9-e1dd-3a4f-bda4-ccb399cea329.roa
File:                     51e994a9-e1dd-3a4f-bda4-ccb399cea329.roa (raw, json)
Hash identifier:          sNfxMX/nF/jYzw0JbW0k5BFiug1QW9j9YBwaiJEIDAI=
Subject key identifier:   49:CC:16:46:21:79:9E:17:30:8B:96:1C:16:3E:99:9E:A8:DE:EC:74
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584ED861E342209BBEA99CB76E00
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/51e994a9-e1dd-3a4f-bda4-ccb399cea329.roa
Signing time:             Sat 15 Aug 2026 13:00:11 +0000
ROA not before:           Sat 15 Aug 2026 13:00:11 +0000
ROA not after:            Fri 13 Nov 2026 14:00:11 +0000
asID:                     7029
IP address blocks:        98.19.188.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d8:61:e3:42:20:9b:be:a9:9c:b7:6e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Aug 15 13:00:11 2026 GMT
            Not After : Nov 13 14:00:11 2026 GMT
        Subject: CN=f88c61b5-bf49-4d97-8717-866f9c504559
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:84:0a:64:fe:41:6d:db:04:3f:3b:71:9e:4a:
                    02:55:59:57:fc:da:d1:36:27:f9:e5:5a:2d:6a:aa:
                    71:8c:f6:f4:32:0b:46:02:4e:02:fc:22:db:98:d4:
                    a9:3c:36:51:85:a3:66:32:59:73:75:12:5f:d3:c1:
                    9b:7a:37:e9:85:0a:a1:95:09:7b:a6:7a:5e:40:65:
                    cf:d9:58:6e:5e:bd:12:a5:b4:a3:76:6c:ff:2e:e2:
                    f5:db:ba:1b:b9:91:58:c1:16:32:d7:60:1f:7b:46:
                    bd:a6:3e:41:e6:25:cf:f7:81:d3:32:fc:8b:52:ee:
                    26:d3:89:e8:80:43:00:fe:2a:f1:7f:a9:5b:88:69:
                    06:db:d7:4d:58:c1:71:44:6a:16:fc:be:5c:44:26:
                    82:5b:08:1d:fd:2c:27:8b:64:40:83:bf:22:4a:d5:
                    c6:17:84:23:42:3c:00:a1:3a:e0:6c:00:99:13:59:
                    41:e6:61:70:31:4f:e2:1e:c2:6a:2c:61:60:6d:4d:
                    98:05:88:21:48:3f:3f:7e:83:43:5c:41:03:16:c7:
                    c3:56:25:ce:0e:18:76:1b:b6:61:cb:d4:2d:02:55:
                    31:90:3a:8f:f7:d3:05:d5:22:41:b9:e4:fd:95:f4:
                    6a:08:8b:f5:a2:fa:37:8a:7b:19:59:63:03:fc:ba:
                    96:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:CC:16:46:21:79:9E:17:30:8B:96:1C:16:3E:99:9E:A8:DE:EC:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/51e994a9-e1dd-3a4f-bda4-ccb399cea329.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.19.188.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:b1:db:b8:64:c0:69:db:5d:f6:d3:6e:33:fa:ba:d5:af:b6:
         a8:78:1e:7b:28:da:63:35:a1:1a:d7:e3:1e:8d:ef:a1:d6:3c:
         3e:79:17:cf:b5:b1:6e:5c:5a:02:bb:5e:b4:5e:f7:77:c7:5f:
         72:6c:2e:ae:90:db:4c:b3:bd:7a:f5:a6:52:5b:ea:07:e5:3e:
         39:70:ff:d5:41:a7:17:35:1a:79:5f:ca:08:bc:f9:0f:a4:4c:
         d9:b5:c1:e7:28:d2:af:0f:b4:1c:3c:67:12:0f:e6:a8:49:e6:
         51:1a:65:f1:c6:33:f2:20:ec:1a:15:a6:73:dc:7c:44:9f:cc:
         61:3a:91:a8:55:69:b4:95:25:89:b1:a9:1d:89:c1:28:42:45:
         60:30:20:5b:82:0a:9a:29:c6:c1:06:06:b9:b7:fc:ce:64:1d:
         30:01:38:0f:92:45:bb:54:72:a3:a3:93:bb:51:27:aa:c8:76:
         16:14:ff:4c:f4:5d:dd:47:ac:c6:35:c7:82:30:13:c3:f4:9a:
         72:81:63:ab:a3:6f:99:7d:46:b3:7c:8d:bd:8a:07:18:a8:9d:
         98:dd:e2:2f:cc:7c:b3:11:7b:59:89:f6:59:c6:6f:69:df:d6:
         49:61:14:40:51:6b:8b:19:fb:7e:50:0d:29:1f:b5:f5:d9:f5:
         6c:dc:27:78
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7YYeNCIJu+qZy3bgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTI2MDgxNTEzMDAxMVoXDTI2MTExMzE0MDAxMVowLzEtMCsGA1UEAxMk
Zjg4YzYxYjUtYmY0OS00ZDk3LTg3MTctODY2ZjljNTA0NTU5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAroQKZP5BbdsEPztxnkoCVVlX/NrRNif55Vot
aqpxjPb0MgtGAk4C/CLbmNSpPDZRhaNmMllzdRJf08GbejfphQqhlQl7pnpeQGXP
2VhuXr0SpbSjdmz/LuL127obuZFYwRYy12Afe0a9pj5B5iXP94HTMvyLUu4m04no
gEMA/irxf6lbiGkG29dNWMFxRGoW/L5cRCaCWwgd/Swni2RAg78iStXGF4QjQjwA
oTrgbACZE1lB5mFwMU/iHsJqLGFgbU2YBYghSD8/foNDXEEDFsfDViXODhh2G7Zh
y9QtAlUxkDqP99MF1SJBueT9lfRqCIv1ovo3insZWWMD/LqWuwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEnMFkYheZ4XMIuWHBY+mZ6o3ux0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNTFlOTk0YTktZTFkZC0z
YTRmLWJkYTQtY2NiMzk5Y2VhMzI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYhO8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADCx27hkwGnbXfbTbjP6utWvtqh4Hnso2mM1oRrX4x6N76HWPD55F8+1
sW5cWgK7XrRe93fHX3JsLq6Q20yzvXr1plJb6gflPjlw/9VBpxc1Gnlfygi8+Q+k
TNm1weco0q8PtBw8ZxIP5qhJ5lEaZfHGM/Ig7BoVpnPcfESfzGE6kahVabSVJYmx
qR2JwShCRWAwIFuCCpopxsEGBrm3/M5kHTABOA+SRbtUcqOjk7tRJ6rIdhYU/0z0
Xd1HrMY1x4IwE8P0mnKBY6ujb5l9RrN8jb2KBxionZjd4i/MfLMRe1mJ9lnGb2nf
1klhFEBRa4sZ+35QDSkftfXZ9WzcJ3g=
-----END CERTIFICATE-----
Generated at Thu Aug 27 14:15:36 2026 by rpki-client