Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b7912e51-6fa9-3e44-9e6c-13ba9c3076bb.roa
File:                     b7912e51-6fa9-3e44-9e6c-13ba9c3076bb.roa (raw, json)
Hash identifier:          m6u+ZaNdpPX2h53qhjWByWavhULm/uf8l26meyt5lBc=
Subject key identifier:   3B:B7:1D:CA:98:27:5C:E4:11:BA:CE:00:D2:B7:25:AB:A0:05:9A:0E
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584E5084AC26023A501EC3223480
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b7912e51-6fa9-3e44-9e6c-13ba9c3076bb.roa
Signing time:             Sat 27 Jun 2026 21:00:12 +0000
ROA not before:           Sat 27 Jun 2026 21:00:12 +0000
ROA not after:            Fri 25 Sep 2026 21:00:12 +0000
asID:                     7029
IP address blocks:        98.20.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:50:84:ac:26:02:3a:50:1e:c3:22:34:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Jun 27 21:00:12 2026 GMT
            Not After : Sep 25 21:00:12 2026 GMT
        Subject: CN=9b31d32a-f976-41eb-8992-e1b3209b50ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:09:90:7b:4d:36:bc:a9:a5:e8:18:a8:5e:32:
                    d2:10:be:96:bc:2c:6a:b0:12:15:f9:2d:e9:76:e6:
                    f1:67:0f:a7:6d:be:0c:b8:f1:cd:54:be:65:10:37:
                    ba:4f:97:44:7c:b6:f7:32:00:37:88:2e:f4:34:ff:
                    3d:65:99:94:46:74:b8:4a:87:d7:d1:ad:77:77:49:
                    c4:c3:c4:44:c9:88:6e:12:44:20:84:a6:18:91:af:
                    be:5a:70:3f:45:1e:3f:79:ed:8e:47:18:01:9f:27:
                    45:dd:b2:a8:bc:e8:30:5e:37:63:a8:74:27:32:d0:
                    59:e9:4a:fe:52:5b:58:9e:3b:72:ba:cd:ca:80:63:
                    a8:b8:c4:64:9c:92:57:fb:54:f9:a6:46:3d:53:02:
                    6c:2e:3a:ef:87:b3:0b:13:49:58:75:2c:c6:21:17:
                    dd:67:8f:67:a1:da:92:13:aa:76:b7:ca:68:12:6c:
                    cb:06:3c:5e:61:56:8f:0c:df:50:32:5f:54:e4:b1:
                    72:64:af:12:5e:6c:9e:59:8f:e1:96:01:93:8b:20:
                    62:96:a2:f7:88:c5:7c:d7:00:61:d1:9f:a3:66:27:
                    d9:aa:c6:04:ce:c7:b7:2c:b2:b8:ee:ba:76:14:c2:
                    3d:84:75:82:25:e4:5c:80:6a:ff:ec:70:ef:2e:33:
                    f2:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:B7:1D:CA:98:27:5C:E4:11:BA:CE:00:D2:B7:25:AB:A0:05:9A:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b7912e51-6fa9-3e44-9e6c-13ba9c3076bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.20.247.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:35:84:29:e1:40:32:bb:6a:3f:4c:1c:f6:e0:05:17:c1:d0:
         46:1e:08:47:98:34:b4:50:cf:25:16:ec:f3:35:31:69:b1:e8:
         5b:1a:c8:7f:8e:b2:30:73:d4:bb:03:b7:1f:3b:09:a7:46:ce:
         28:32:13:fe:77:b0:c7:d6:88:7c:86:e6:93:11:25:97:38:5f:
         c8:ec:a4:79:0a:e7:a0:f1:32:f4:57:89:2c:2a:fa:d3:4e:a5:
         b1:cc:2c:27:10:74:eb:4f:54:87:77:b3:e5:f8:cb:e8:29:f8:
         cb:e1:8a:65:67:a4:be:fe:11:5a:d8:1c:81:6d:6e:87:70:3e:
         57:12:27:90:a6:c1:bd:9a:09:97:84:61:13:04:a0:25:4c:e1:
         98:d1:7d:19:db:52:df:43:0f:c0:9f:6e:1b:bf:3a:d6:23:a3:
         9a:85:51:25:b6:fa:97:76:bd:c1:02:0c:f2:7f:dd:67:17:9f:
         d0:97:78:40:bf:37:18:12:00:71:84:9c:53:82:ac:5f:72:c8:
         ab:69:3c:15:53:b2:f3:6d:a0:cb:74:2d:1e:43:a1:5c:f6:41:
         c0:f2:7c:43:b4:fa:ab:5f:cb:b7:fa:02:ce:7e:03:79:1f:94:
         ad:7b:54:33:50:52:b3:37:08:96:3b:67:4f:47:82:26:45:e8:
         69:68:7c:3e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5QhKwmAjpQHsMiNIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTI2MDYyNzIxMDAxMloXDTI2MDkyNTIxMDAxMlowLzEtMCsGA1UEAxMk
OWIzMWQzMmEtZjk3Ni00MWViLTg5OTItZTFiMzIwOWI1MGFjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmAmQe002vKml6BioXjLSEL6WvCxqsBIV+S3p
dubxZw+nbb4MuPHNVL5lEDe6T5dEfLb3MgA3iC70NP89ZZmURnS4SofX0a13d0nE
w8REyYhuEkQghKYYka++WnA/RR4/ee2ORxgBnydF3bKovOgwXjdjqHQnMtBZ6Ur+
UltYnjtyus3KgGOouMRknJJX+1T5pkY9UwJsLjrvh7MLE0lYdSzGIRfdZ49nodqS
E6p2t8poEmzLBjxeYVaPDN9QMl9U5LFyZK8SXmyeWY/hlgGTiyBilqL3iMV81wBh
0Z+jZifZqsYEzse3LLK47rp2FMI9hHWCJeRcgGr/7HDvLjPygQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDu3HcqYJ1zkEbrOANK3JaugBZoOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYjc5MTJlNTEtNmZhOS0z
ZTQ0LTllNmMtMTNiYTljMzA3NmJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYhT3MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC81hCnhQDK7aj9MHPbgBRfB0EYeCEeYNLRQzyUW7PM1MWmx6FsayH+O
sjBz1LsDtx87CadGzigyE/53sMfWiHyG5pMRJZc4X8jspHkK56DxMvRXiSwq+tNO
pbHMLCcQdOtPVId3s+X4y+gp+MvhimVnpL7+EVrYHIFtbodwPlcSJ5Cmwb2aCZeE
YRMEoCVM4ZjRfRnbUt9DD8Cfbhu/OtYjo5qFUSW2+pd2vcECDPJ/3WcXn9CXeEC/
NxgSAHGEnFOCrF9yyKtpPBVTsvNtoMt0LR5DoVz2QcDyfEO0+qtfy7f6As5+A3kf
lK17VDNQUrM3CJY7Z09HgiZF6GlofD4=
-----END CERTIFICATE-----
Generated at Mon Jul 13 05:52:33 2026 by rpki-client