Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/4a9eb50d-2780-3043-b84e-a510d52cdef8.roa
File:                     4a9eb50d-2780-3043-b84e-a510d52cdef8.roa (raw, json)
Hash identifier:          7kRHcq23qnOTJBTXzYy2a4y8XQze+ol7Bl2Evmr96Ac=
Subject key identifier:   16:FF:17:4D:40:C4:5C:9A:57:D0:01:4B:36:80:30:E2:D8:35:92:0F
Certificate issuer:       /CN=98161ef7-249b-450b-ba6a-5819e613ed63
Certificate serial:       010D0C9F4328584A5335AA0DC40C5B89033B1900
Authority key identifier: D4:19:D4:44:4B:11:89:5C:8C:6D:68:65:FD:EB:4B:4F:F2:AC:1A:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/4a9eb50d-2780-3043-b84e-a510d52cdef8.roa
Signing time:             Fri 27 Jun 2025 01:00:50 +0000
ROA not before:           Fri 27 Jun 2025 01:00:50 +0000
ROA not after:            Thu 25 Sep 2025 01:00:50 +0000
asID:                     174
IP address blocks:        2602:2b7:100::/40 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/98161ef7-249b-450b-ba6a-5819e613ed63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/98161ef7-249b-450b-ba6a-5819e613ed63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:53:35:aa:0d:c4:0c:5b:89:03:3b:19:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98161ef7-249b-450b-ba6a-5819e613ed63
        Validity
            Not Before: Jun 27 01:00:50 2025 GMT
            Not After : Sep 25 01:00:50 2025 GMT
        Subject: CN=d77a43cb-df77-4131-874a-559cea48aea6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b4:36:fc:54:ce:2d:bd:69:82:ee:8b:bf:66:
                    01:f2:77:3e:90:09:3f:7d:43:a3:2a:8d:47:e0:61:
                    bb:d1:cb:d1:cd:e2:e0:f5:4a:6c:c3:14:4d:97:b1:
                    7a:41:9e:1f:98:ae:17:28:dd:29:4a:7e:9e:a8:27:
                    a4:5a:1e:a5:15:c8:de:89:d1:7a:ea:3e:20:6f:5e:
                    e7:48:93:51:4d:25:63:d8:2e:89:73:5c:84:8f:b8:
                    41:de:73:bc:66:f7:3e:d8:b9:81:8b:6e:6b:7b:5a:
                    ce:24:d6:97:bf:8a:ed:a9:43:29:10:55:ee:1c:a9:
                    29:39:df:68:45:a8:d5:23:0e:6c:8a:48:3b:52:1e:
                    b3:9d:13:7c:50:65:e1:4b:cf:ab:71:52:23:9c:79:
                    90:b9:f2:fb:5e:20:7b:9f:34:b8:ec:3e:82:95:2a:
                    3b:34:9c:9f:c5:4f:ef:c5:f0:c4:61:e0:9e:6a:ea:
                    c5:db:54:19:46:6e:0d:99:60:23:78:e3:d3:da:3a:
                    9e:f7:6e:02:0f:3e:ca:a3:eb:7d:a8:76:04:af:77:
                    12:20:48:d9:f0:6f:d5:cc:02:d8:4b:00:2b:48:9c:
                    0f:55:aa:87:5e:a5:b2:09:a3:c6:23:af:5a:a7:15:
                    a9:4e:7e:72:fb:f6:ae:0f:ba:5b:6f:bd:68:62:d4:
                    23:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:FF:17:4D:40:C4:5C:9A:57:D0:01:4B:36:80:30:E2:D8:35:92:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/4a9eb50d-2780-3043-b84e-a510d52cdef8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/98161ef7-249b-450b-ba6a-5819e613ed63.crl

            X509v3 Authority Key Identifier:
                keyid:D4:19:D4:44:4B:11:89:5C:8C:6D:68:65:FD:EB:4B:4F:F2:AC:1A:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2b7:100::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:21:bb:06:87:da:d5:d9:7c:cc:d6:ec:bb:91:15:65:81:db:
         0b:ea:e8:c1:21:05:ca:24:b4:88:fb:73:39:95:15:17:87:6f:
         c3:ee:61:cd:ec:56:df:f8:91:f3:af:11:94:00:8c:99:39:d7:
         a4:2d:87:82:d0:83:cb:b4:b2:e0:5d:9e:53:7e:5c:f5:13:5f:
         69:d5:79:03:3a:ae:6a:8a:b2:00:eb:b4:91:e8:39:7f:e7:c5:
         2e:81:62:a6:bd:18:ee:95:4b:1f:05:be:4b:8b:9e:4f:70:bf:
         98:b4:3e:22:81:7b:2f:6d:67:09:ff:d0:82:5d:52:35:f6:eb:
         f5:96:33:0e:a5:87:7a:af:a2:56:46:74:ee:d5:8c:97:6a:3e:
         18:47:ad:ec:02:d7:6e:e7:5e:76:42:7f:61:a9:72:2f:94:d8:
         71:99:c9:1f:56:ec:fa:a4:be:63:b3:78:b3:45:c0:7e:0b:f5:
         ce:db:12:e6:13:a3:50:01:4f:29:b7:92:dd:c5:e7:b1:51:b6:
         e5:9b:86:7a:41:42:97:05:37:8a:c5:06:92:7d:e5:2e:1a:3a:
         57:9c:8a:5f:62:06:23:6c:80:4b:ea:a9:65:36:36:95:33:94:
         c8:3a:c5:ee:25:4e:5d:11:3b:e8:cc:78:ee:4e:38:d1:23:da:
         1c:0d:97:6a
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEpTNaoNxAxbiQM7GQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTgxNjFlZjctMjQ5Yi00NTBiLWJhNmEtNTgxOWU2MTNl
ZDYzMB4XDTI1MDYyNzAxMDA1MFoXDTI1MDkyNTAxMDA1MFowLzEtMCsGA1UEAxMk
ZDc3YTQzY2ItZGY3Ny00MTMxLTg3NGEtNTU5Y2VhNDhhZWE2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubQ2/FTOLb1pgu6Lv2YB8nc+kAk/fUOjKo1H
4GG70cvRzeLg9UpswxRNl7F6QZ4fmK4XKN0pSn6eqCekWh6lFcjeidF66j4gb17n
SJNRTSVj2C6Jc1yEj7hB3nO8Zvc+2LmBi25re1rOJNaXv4rtqUMpEFXuHKkpOd9o
RajVIw5sikg7Uh6znRN8UGXhS8+rcVIjnHmQufL7XiB7nzS47D6ClSo7NJyfxU/v
xfDEYeCeaurF21QZRm4NmWAjeOPT2jqe924CDz7Ko+t9qHYEr3cSIEjZ8G/VzALY
SwArSJwPVaqHXqWyCaPGI69apxWpTn5y+/auD7pbb71oYtQjWwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFBb/F01AxFyaV9ABSzaAMOLYNZIPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85ODE2
MWVmNy0yNDliLTQ1MGItYmE2YS01ODE5ZTYxM2VkNjMvNGE5ZWI1MGQtMjc4MC0z
MDQzLWI4NGUtYTUxMGQ1MmNkZWY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOTgxNjFlZjctMjQ5Yi00NTBiLWJh
NmEtNTgxOWU2MTNlZDYzLzk4MTYxZWY3LTI0OWItNDUwYi1iYTZhLTU4MTllNjEz
ZWQ2My5jcmwwHwYDVR0jBBgwFoAU1BnUREsRiVyMbWhl/etLT/KsGnYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS85ODE2MWVmNy0yNDliLTQ1MGItYmE2YS01ODE5
ZTYxM2VkNjMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgICtwEw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAByG7Bofa1dl8zNbsu5EVZYHbC+rowSEFyiS0iPtzOZUVF4dvw+5h
zexW3/iR868RlACMmTnXpC2HgtCDy7Sy4F2eU35c9RNfadV5AzquaoqyAOu0keg5
f+fFLoFipr0Y7pVLHwW+S4ueT3C/mLQ+IoF7L21nCf/Qgl1SNfbr9ZYzDqWHeq+i
VkZ07tWMl2o+GEet7ALXbudedkJ/YalyL5TYcZnJH1bs+qS+Y7N4s0XAfgv1ztsS
5hOjUAFPKbeS3cXnsVG25ZuGekFClwU3isUGkn3lLho6V5yKX2IGI2yAS+qpZTY2
lTOUyDrF7iVOXRE76Mx47k440SPaHA2Xag==
-----END CERTIFICATE-----
Generated at Wed Jul 2 01:23:25 2025 by rpki-client