Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/77a1f652-62bb-4b22-ac07-0b2b88868297/165e529f-5743-3029-b53b-0c44dcfb96d9.roa
File:                     165e529f-5743-3029-b53b-0c44dcfb96d9.roa (raw, json)
Hash identifier:          Z03XTIRc0uRX4Pg/cO/sGqsw+5WeHrLmDtWn+rz+KLs=
Subject key identifier:   C5:2B:A8:07:63:C3:8C:E0:DF:A6:94:3D:83:A7:3F:41:95:BF:DC:89
Certificate issuer:       /CN=77a1f652-62bb-4b22-ac07-0b2b88868297
Certificate serial:       010D0C9F4328584AB02FB4ED88D3B0CD9B2B8D80
Authority key identifier: B0:40:EA:26:82:DB:B6:69:CA:9C:85:09:9B:7A:1F:47:6D:C6:58:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/77a1f652-62bb-4b22-ac07-0b2b88868297.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/77a1f652-62bb-4b22-ac07-0b2b88868297/165e529f-5743-3029-b53b-0c44dcfb96d9.roa
Signing time:             Tue 24 Jun 2025 13:01:03 +0000
ROA not before:           Tue 24 Jun 2025 13:01:03 +0000
ROA not after:            Mon 22 Sep 2025 13:01:03 +0000
asID:                     7018
IP address blocks:        207.167.98.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/77a1f652-62bb-4b22-ac07-0b2b88868297/77a1f652-62bb-4b22-ac07-0b2b88868297.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/77a1f652-62bb-4b22-ac07-0b2b88868297/77a1f652-62bb-4b22-ac07-0b2b88868297.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/77a1f652-62bb-4b22-ac07-0b2b88868297.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b0:2f:b4:ed:88:d3:b0:cd:9b:2b:8d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77a1f652-62bb-4b22-ac07-0b2b88868297
        Validity
            Not Before: Jun 24 13:01:03 2025 GMT
            Not After : Sep 22 13:01:03 2025 GMT
        Subject: CN=20c986c1-7d32-4f42-81b6-71a010bb50c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:02:a9:61:3a:79:81:4c:6e:0f:c9:3e:26:dd:
                    04:d9:94:3b:fb:c9:0e:e6:d3:fa:04:08:14:c0:34:
                    bc:40:b5:db:ca:08:4e:61:10:ec:24:64:6a:38:36:
                    a9:ea:6d:5d:06:ef:ab:4b:c3:b5:25:47:7e:c7:15:
                    05:34:81:94:59:d5:f3:73:82:86:8b:64:91:d3:06:
                    c3:9d:19:3c:f4:6a:c8:f0:f5:cf:bd:ca:cf:c0:3d:
                    ab:3b:82:ac:c4:23:08:de:23:ef:b1:34:51:a7:82:
                    b8:54:d8:8a:35:a7:e6:06:e3:19:49:9d:df:37:b6:
                    0f:62:d9:e8:a8:eb:3b:fc:99:bf:a9:ca:55:0a:67:
                    64:40:22:86:c6:95:98:fe:cc:cd:70:e8:a5:ff:ac:
                    85:67:1a:57:e0:57:a7:49:29:ca:3e:e7:1b:1a:0f:
                    10:9f:7e:5a:31:cd:b3:b7:fa:44:35:a4:2c:90:3b:
                    0f:59:26:bb:19:77:04:3e:da:03:19:6e:ca:77:38:
                    d4:ff:c4:51:78:f8:4e:df:c2:1d:0c:8c:e5:d3:a0:
                    55:9c:dc:5b:13:7b:4b:35:c6:cf:1c:9d:60:9d:9f:
                    36:1e:f6:12:ab:85:88:49:ce:97:7e:4c:e7:7f:08:
                    4b:bc:7a:18:2f:d8:41:88:73:25:fc:d2:a2:a0:ba:
                    73:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:2B:A8:07:63:C3:8C:E0:DF:A6:94:3D:83:A7:3F:41:95:BF:DC:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/77a1f652-62bb-4b22-ac07-0b2b88868297/165e529f-5743-3029-b53b-0c44dcfb96d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/77a1f652-62bb-4b22-ac07-0b2b88868297/77a1f652-62bb-4b22-ac07-0b2b88868297.crl

            X509v3 Authority Key Identifier:
                keyid:B0:40:EA:26:82:DB:B6:69:CA:9C:85:09:9B:7A:1F:47:6D:C6:58:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/77a1f652-62bb-4b22-ac07-0b2b88868297.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.167.98.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:8b:c9:4c:e7:89:1b:97:d5:86:92:3e:a3:ad:a4:d5:8d:27:
         99:71:8b:34:8f:9f:37:e6:80:94:02:72:18:52:06:c1:54:15:
         1b:be:5d:f5:e6:ea:32:35:f6:f2:d9:e5:e8:fa:67:62:f3:06:
         5c:d5:4e:ec:00:7d:80:3a:0d:14:66:0f:9c:04:53:74:2f:2a:
         f9:6e:64:09:4d:4f:52:4e:7f:7d:cf:02:90:c6:54:9b:68:b6:
         2d:d1:b6:b3:51:c6:48:88:a3:b6:a1:1e:6f:eb:d2:3e:fc:50:
         79:87:54:26:b8:97:cb:61:d6:ed:0e:14:ef:af:80:52:6a:4b:
         80:59:a9:4a:57:92:81:4a:15:fd:ec:c0:69:77:03:f1:fb:9d:
         3a:fe:54:a9:a6:d8:4c:c1:00:16:4b:4f:5d:1a:8a:fc:8b:01:
         b6:62:e0:06:07:74:6c:9e:f0:87:fa:a4:0f:27:39:79:05:a4:
         08:34:eb:70:87:48:64:9c:f3:66:41:b2:48:84:8c:01:df:a0:
         7c:a5:6c:5b:40:22:4a:e0:e3:21:5b:bb:43:43:de:a4:17:51:
         84:fe:96:92:f4:e7:6d:45:6e:92:ec:e2:9f:6d:26:e0:a3:f3:
         cd:df:5e:05:44:37:18:d1:03:28:ff:b1:e9:7f:f7:53:23:39:
         18:d5:42:60
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqwL7TtiNOwzZsrjYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzdhMWY2NTItNjJiYi00YjIyLWFjMDctMGIyYjg4ODY4
Mjk3MB4XDTI1MDYyNDEzMDEwM1oXDTI1MDkyMjEzMDEwM1owLzEtMCsGA1UEAxMk
MjBjOTg2YzEtN2QzMi00ZjQyLTgxYjYtNzFhMDEwYmI1MGM2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqgKpYTp5gUxuD8k+Jt0E2ZQ7+8kO5tP6BAgU
wDS8QLXbyghOYRDsJGRqODap6m1dBu+rS8O1JUd+xxUFNIGUWdXzc4KGi2SR0wbD
nRk89GrI8PXPvcrPwD2rO4KsxCMI3iPvsTRRp4K4VNiKNafmBuMZSZ3fN7YPYtno
qOs7/Jm/qcpVCmdkQCKGxpWY/szNcOil/6yFZxpX4FenSSnKPucbGg8Qn35aMc2z
t/pENaQskDsPWSa7GXcEPtoDGW7KdzjU/8RRePhO38IdDIzl06BVnNxbE3tLNcbP
HJ1gnZ82HvYSq4WISc6XfkznfwhLvHoYL9hBiHMl/NKioLpzLwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMUrqAdjw4zg36aUPYOnP0GVv9yJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi83N2Ex
ZjY1Mi02MmJiLTRiMjItYWMwNy0wYjJiODg4NjgyOTcvMTY1ZTUyOWYtNTc0My0z
MDI5LWI1M2ItMGM0NGRjZmI5NmQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNzdhMWY2NTItNjJiYi00YjIyLWFj
MDctMGIyYjg4ODY4Mjk3Lzc3YTFmNjUyLTYyYmItNGIyMi1hYzA3LTBiMmI4ODg2
ODI5Ny5jcmwwHwYDVR0jBBgwFoAUsEDqJoLbtmnKnIUJm3ofR23GWLswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi83N2ExZjY1Mi02MmJiLTRiMjItYWMwNy0wYjJi
ODg4NjgyOTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBz6diMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADyLyUzniRuX1YaSPqOtpNWNJ5lxizSPnzfmgJQCchhSBsFUFRu+XfXm
6jI19vLZ5ej6Z2LzBlzVTuwAfYA6DRRmD5wEU3QvKvluZAlNT1JOf33PApDGVJto
ti3RtrNRxkiIo7ahHm/r0j78UHmHVCa4l8th1u0OFO+vgFJqS4BZqUpXkoFKFf3s
wGl3A/H7nTr+VKmm2EzBABZLT10aivyLAbZi4AYHdGye8If6pA8nOXkFpAg063CH
SGSc82ZBskiEjAHfoHylbFtAIkrg4yFbu0ND3qQXUYT+lpL0521FbpLs4p9tJuCj
883fXgVENxjRAyj/sel/91MjORjVQmA=
-----END CERTIFICATE-----
Generated at Wed Aug 6 13:07:33 2025 by rpki-client