Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/722e17cc-e2c0-35fe-a478-1f0b708c99cc.roa
File:                     722e17cc-e2c0-35fe-a478-1f0b708c99cc.roa (raw, json)
Hash identifier:          1cLmLX0djVBcphUEzUlbN28oz14K2YFHNWDO9at8hTU=
Subject key identifier:   FC:19:82:4A:E6:D6:71:45:93:13:92:B4:9C:49:06:2E:B0:EF:EB:B9
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584CA491B2F3AADE554A24E2B1D0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/722e17cc-e2c0-35fe-a478-1f0b708c99cc.roa
Signing time:             Sun 25 Jan 2026 14:00:40 +0000
ROA not before:           Sun 25 Jan 2026 14:00:40 +0000
ROA not after:            Sat 25 Apr 2026 13:00:40 +0000
asID:                     7029
IP address blocks:        98.20.246.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Feb 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:a4:91:b2:f3:aa:de:55:4a:24:e2:b1:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Jan 25 14:00:40 2026 GMT
            Not After : Apr 25 13:00:40 2026 GMT
        Subject: CN=dd93a869-5799-43f2-8baf-3b9c38fef06f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:cc:59:55:d9:0a:69:68:85:69:48:82:5b:ae:
                    18:c0:a6:01:29:fc:a2:d0:cc:d4:94:59:ae:03:7f:
                    b9:36:2b:b7:38:17:ed:6b:66:da:57:a8:f7:c7:76:
                    da:92:ec:16:d8:f5:56:17:2a:6a:59:34:79:68:58:
                    39:91:11:6f:a2:71:ac:c1:57:03:f1:f9:e5:d2:d1:
                    c9:26:83:14:36:86:f7:7b:fd:11:1a:0a:03:cc:d3:
                    87:00:4e:41:97:5e:98:2e:67:37:af:c1:02:1f:e6:
                    c4:e0:7c:de:8c:77:32:2b:a0:7f:f3:fb:72:d1:77:
                    66:fb:9b:96:68:f0:10:53:21:0e:72:f4:33:60:a9:
                    77:48:b4:90:3e:e5:b6:f0:36:02:09:2f:08:65:90:
                    f1:e9:71:38:c9:bc:19:70:d9:10:3d:03:f3:c0:5f:
                    7c:7e:81:43:0b:a8:95:2a:98:e5:59:8d:6d:c7:87:
                    d6:17:95:3a:26:b5:7d:bd:71:e1:d3:7f:75:61:cf:
                    99:4a:3b:86:e0:a8:bf:dc:f5:ee:a0:c7:67:6c:38:
                    6a:c4:92:5e:8e:35:5a:8e:65:02:18:d2:4b:ed:17:
                    17:5a:1d:55:17:ef:f7:89:ce:a9:c1:ff:ef:33:b7:
                    f9:5b:66:45:8c:3a:65:ab:c6:fe:b6:9b:60:d0:3e:
                    33:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:19:82:4A:E6:D6:71:45:93:13:92:B4:9C:49:06:2E:B0:EF:EB:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/722e17cc-e2c0-35fe-a478-1f0b708c99cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.20.246.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:24:5e:d4:74:18:3b:cc:ff:4f:b4:81:ab:7b:de:c1:e0:da:
         4e:32:51:d0:77:90:52:1c:ee:92:fb:18:cb:3a:af:99:1b:80:
         3b:57:a5:47:13:30:1c:b3:e0:01:2d:0c:49:75:86:37:93:c3:
         53:7c:62:ab:02:83:a7:87:92:b0:3d:ef:bb:fb:20:1a:d9:5f:
         0f:f0:96:d2:80:d9:17:cf:ba:76:3f:91:0f:ec:1b:fc:8f:a3:
         50:7f:4e:8f:51:e7:6d:6f:45:16:b4:8b:f7:7f:14:e4:ff:83:
         61:d2:ff:b6:bf:1c:8b:f2:04:47:b3:40:61:75:ac:7b:c1:47:
         a5:e6:f5:ba:4b:86:8a:18:6d:a2:81:5f:e6:c4:2d:78:f4:d1:
         e3:22:bc:7f:cd:b1:a8:77:a2:39:1b:cc:d9:e7:7d:6e:ce:6c:
         b5:9c:84:88:84:97:ac:16:cd:39:3c:a7:ee:32:e4:01:7e:84:
         fa:38:70:3c:65:95:a9:8c:be:4d:a3:18:be:53:4b:43:8f:50:
         16:bc:9b:e3:1f:83:8c:62:a9:c6:bd:85:7b:26:77:db:13:bd:
         d0:03:64:99:5d:84:aa:8e:3b:5a:f0:87:94:1f:d6:87:df:2e:
         fd:26:06:67:9f:93:b5:f8:0d:af:61:bc:e6:4d:fc:08:1b:80:
         79:ab:03:35
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEykkbLzqt5VSiTisdAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTI2MDEyNTE0MDA0MFoXDTI2MDQyNTEzMDA0MFowLzEtMCsGA1UEAxMk
ZGQ5M2E4NjktNTc5OS00M2YyLThiYWYtM2I5YzM4ZmVmMDZmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApMxZVdkKaWiFaUiCW64YwKYBKfyi0MzUlFmu
A3+5Niu3OBfta2baV6j3x3bakuwW2PVWFypqWTR5aFg5kRFvonGswVcD8fnl0tHJ
JoMUNob3e/0RGgoDzNOHAE5Bl16YLmc3r8ECH+bE4HzejHcyK6B/8/ty0Xdm+5uW
aPAQUyEOcvQzYKl3SLSQPuW28DYCCS8IZZDx6XE4ybwZcNkQPQPzwF98foFDC6iV
KpjlWY1tx4fWF5U6JrV9vXHh0391Yc+ZSjuG4Ki/3PXuoMdnbDhqxJJejjVajmUC
GNJL7RcXWh1VF+/3ic6pwf/vM7f5W2ZFjDplq8b+tptg0D4zRwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPwZgkrm1nFFkxOStJxJBi6w7+u5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNzIyZTE3Y2MtZTJjMC0z
NWZlLWE0NzgtMWYwYjcwOGM5OWNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYhT2MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIEkXtR0GDvM/0+0gat73sHg2k4yUdB3kFIc7pL7GMs6r5kbgDtXpUcT
MByz4AEtDEl1hjeTw1N8YqsCg6eHkrA977v7IBrZXw/wltKA2RfPunY/kQ/sG/yP
o1B/To9R521vRRa0i/d/FOT/g2HS/7a/HIvyBEezQGF1rHvBR6Xm9bpLhooYbaKB
X+bELXj00eMivH/Nsah3ojkbzNnnfW7ObLWchIiEl6wWzTk8p+4y5AF+hPo4cDxl
lamMvk2jGL5TS0OPUBa8m+Mfg4xiqca9hXsmd9sTvdADZJldhKqOO1rwh5Qf1off
Lv0mBmefk7X4Da9hvOZN/AgbgHmrAzU=
-----END CERTIFICATE-----
Generated at Thu Feb 26 06:28:58 2026 by rpki-client