Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d4451ca6-15ac-3eb1-9841-62f0a217632f.roa
File:                     d4451ca6-15ac-3eb1-9841-62f0a217632f.roa (raw, json)
Hash identifier:          8G09yeVfU7056iX79vidQehcuGgj5J8VJ5NrLLuJ2Io=
Subject key identifier:   33:B5:62:95:92:91:B0:95:5D:51:07:1E:ED:45:21:91:5F:76:26:D1
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584A6825DFE599BFC2A46F46C400
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d4451ca6-15ac-3eb1-9841-62f0a217632f.roa
Signing time:             Fri 04 Jul 2025 13:01:06 +0000
ROA not before:           Fri 04 Jul 2025 13:01:06 +0000
ROA not after:            Thu 02 Oct 2025 13:01:06 +0000
asID:                     7029
IP address blocks:        98.18.74.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:68:25:df:e5:99:bf:c2:a4:6f:46:c4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Jul  4 13:01:06 2025 GMT
            Not After : Oct  2 13:01:06 2025 GMT
        Subject: CN=9cfe51f0-ec87-4ee9-812e-6e9e42edaac7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:59:5c:bc:5d:6f:0a:3f:25:50:4b:7c:75:42:
                    bb:1b:0a:ec:b1:e0:bc:7c:ae:35:9c:82:3b:f3:fe:
                    1a:97:8f:cb:0c:2c:05:a7:03:0a:4e:c0:bf:50:92:
                    24:bf:ec:5f:99:2a:46:c2:2d:d6:f0:69:71:09:45:
                    12:3a:c3:eb:e1:95:70:41:39:81:38:07:61:5f:f5:
                    c0:e8:f6:5e:46:2f:dc:77:ac:cb:14:2d:15:09:7b:
                    76:b2:c1:56:ea:fe:e1:a3:9e:a6:70:9b:cb:a4:d2:
                    b6:ce:63:2f:59:ac:2b:f6:2e:49:36:d9:28:86:48:
                    b6:06:04:87:77:e6:22:01:d5:3e:04:09:63:f6:e0:
                    8a:59:9b:86:39:d5:f1:49:06:db:82:43:b6:dc:56:
                    2b:c7:e7:93:e3:bf:26:88:c5:f2:eb:21:82:c6:c8:
                    39:e4:7a:b0:5d:11:29:d8:58:77:dd:22:8e:97:87:
                    fe:cc:a2:be:d9:26:72:24:18:60:0a:b4:f8:16:ec:
                    9f:5d:22:81:65:b0:13:9f:52:c3:66:2a:75:e3:f4:
                    03:11:63:f7:59:d5:26:30:86:4a:32:d3:71:a1:c7:
                    50:5e:5e:be:ca:2d:85:f3:b5:be:e7:15:f7:25:e4:
                    85:a7:40:78:4c:b6:57:fa:05:0e:ca:3c:90:ed:d3:
                    9f:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:B5:62:95:92:91:B0:95:5D:51:07:1E:ED:45:21:91:5F:76:26:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d4451ca6-15ac-3eb1-9841-62f0a217632f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.18.74.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:ca:ad:07:89:75:99:6a:fe:b7:5c:06:94:5d:41:46:cf:8e:
         87:96:23:60:5e:0d:2c:10:f4:82:28:91:12:68:ed:ec:74:de:
         62:ba:b6:73:19:d0:69:ef:79:91:2e:b3:aa:9d:d7:2d:a1:ae:
         f3:90:e3:77:3a:8f:cb:8b:f0:76:38:ad:9e:ff:3c:44:b4:29:
         59:c5:c4:33:cb:35:51:9b:57:77:7e:be:00:55:65:2f:e7:b6:
         46:ee:df:82:75:63:4b:3d:11:5e:d0:3a:cf:72:a6:a4:5d:cb:
         b9:81:eb:bc:7e:23:3d:59:ad:19:91:48:c0:99:b9:1f:f7:da:
         59:e4:2a:12:07:fd:ce:10:6a:c9:3a:08:a0:6e:a7:f5:ce:5b:
         66:5d:36:9a:91:1d:01:22:40:18:3d:30:a2:00:ab:53:19:40:
         c4:39:09:12:57:a2:b8:de:d6:28:29:5e:ba:bb:8f:38:95:03:
         e5:de:47:ee:fa:a4:a1:1e:df:64:44:f7:d6:fc:4f:8b:f0:c1:
         75:68:80:9a:96:70:38:d3:3b:ef:39:ad:54:eb:57:8e:2e:17:
         f7:83:bd:cf:46:04:2e:91:b6:da:a6:77:c7:59:5a:d3:c4:60:
         78:38:9a:eb:9c:a4:3e:03:6e:8b:8d:d8:ba:4e:af:ac:d0:a4:
         f7:54:3f:b1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpoJd/lmb/CpG9GxAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTI1MDcwNDEzMDEwNloXDTI1MTAwMjEzMDEwNlowLzEtMCsGA1UEAxMk
OWNmZTUxZjAtZWM4Ny00ZWU5LTgxMmUtNmU5ZTQyZWRhYWM3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmllcvF1vCj8lUEt8dUK7GwrsseC8fK41nII7
8/4al4/LDCwFpwMKTsC/UJIkv+xfmSpGwi3W8GlxCUUSOsPr4ZVwQTmBOAdhX/XA
6PZeRi/cd6zLFC0VCXt2ssFW6v7ho56mcJvLpNK2zmMvWawr9i5JNtkohki2BgSH
d+YiAdU+BAlj9uCKWZuGOdXxSQbbgkO23FYrx+eT478miMXy6yGCxsg55HqwXREp
2Fh33SKOl4f+zKK+2SZyJBhgCrT4FuyfXSKBZbATn1LDZip14/QDEWP3WdUmMIZK
MtNxocdQXl6+yi2F87W+5xX3JeSFp0B4TLZX+gUOyjyQ7dOfvQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDO1YpWSkbCVXVEHHu1FIZFfdibRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDQ0NTFjYTYtMTVhYy0z
ZWIxLTk4NDEtNjJmMGEyMTc2MzJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYhJKMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGbKrQeJdZlq/rdcBpRdQUbPjoeWI2BeDSwQ9IIokRJo7ex03mK6tnMZ
0GnveZEus6qd1y2hrvOQ43c6j8uL8HY4rZ7/PES0KVnFxDPLNVGbV3d+vgBVZS/n
tkbu34J1Y0s9EV7QOs9ypqRdy7mB67x+Iz1ZrRmRSMCZuR/32lnkKhIH/c4Qask6
CKBup/XOW2ZdNpqRHQEiQBg9MKIAq1MZQMQ5CRJXorje1igpXrq7jziVA+XeR+76
pKEe32RE99b8T4vwwXVogJqWcDjTO+85rVTrV44uF/eDvc9GBC6Rttqmd8dZWtPE
YHg4muucpD4DbouN2LpOr6zQpPdUP7E=
-----END CERTIFICATE-----
Generated at Wed Jul 9 13:48:59 2025 by rpki-client