Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/7c33a304-1a62-32e5-90c8-e6647ca6d200.roa
File:                     7c33a304-1a62-32e5-90c8-e6647ca6d200.roa (raw, json)
Hash identifier:          KBxD0+uCD2ngsqG9w897cFiMJbdywyROsHXth7NKdCY=
Subject key identifier:   44:DB:B8:D9:7B:91:6E:F6:01:B2:28:E4:5B:E5:EA:1A:36:85:80:E8
Certificate issuer:       /CN=98161ef7-249b-450b-ba6a-5819e613ed63
Certificate serial:       010D0C9F4328584A9D30DC4CD8F4277F5094EE00
Authority key identifier: D4:19:D4:44:4B:11:89:5C:8C:6D:68:65:FD:EB:4B:4F:F2:AC:1A:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/7c33a304-1a62-32e5-90c8-e6647ca6d200.roa
Signing time:             Wed 23 Jul 2025 13:01:02 +0000
ROA not before:           Wed 23 Jul 2025 13:01:02 +0000
ROA not after:            Tue 21 Oct 2025 13:01:02 +0000
asID:                     21738
IP address blocks:        2602:2b7:40::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/98161ef7-249b-450b-ba6a-5819e613ed63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/98161ef7-249b-450b-ba6a-5819e613ed63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9d:30:dc:4c:d8:f4:27:7f:50:94:ee:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98161ef7-249b-450b-ba6a-5819e613ed63
        Validity
            Not Before: Jul 23 13:01:02 2025 GMT
            Not After : Oct 21 13:01:02 2025 GMT
        Subject: CN=76d27ee4-9f11-46da-be32-cd313e9f374c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:b4:51:25:6b:04:21:fd:6d:ac:95:9b:74:6f:
                    d9:50:60:3b:61:12:68:72:3b:f8:bc:eb:77:73:f0:
                    11:05:73:03:7c:4d:ec:a4:82:84:44:39:b2:2f:f8:
                    6d:a6:0e:09:0e:9f:44:0c:e0:59:52:5c:49:02:fe:
                    86:1b:f1:f0:7f:a6:d4:23:d9:44:5c:cb:5d:5b:7a:
                    7b:d5:fb:9f:a6:58:11:0b:bc:10:cb:4a:44:ef:fe:
                    89:f1:4f:f1:b0:63:b8:0f:6c:4f:5d:ab:e0:d5:01:
                    64:2d:a3:5a:9f:da:38:aa:4a:8c:ef:c4:e4:76:44:
                    30:c3:d5:83:38:24:af:c2:7a:6f:a0:0f:3b:67:88:
                    b1:9b:ad:ed:44:59:69:8e:dc:47:db:09:68:a8:3f:
                    a7:c9:7e:3c:ee:a4:d0:02:1e:8f:69:a9:f2:43:ec:
                    a6:c4:38:50:bf:3a:82:78:10:c0:37:3b:64:d2:ff:
                    c6:43:2a:b4:84:82:81:41:5d:33:e2:f2:3d:84:df:
                    b3:cc:ef:3b:5a:65:5e:1a:d2:86:7e:69:51:39:5f:
                    2c:04:0a:8a:ac:ac:34:0e:91:4b:e5:f5:89:e8:fd:
                    dc:7a:db:7f:67:44:60:b5:cd:5e:92:3e:4d:82:9b:
                    9b:bb:f9:39:e1:4e:da:7b:12:d4:2d:a4:74:3b:e8:
                    bd:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:DB:B8:D9:7B:91:6E:F6:01:B2:28:E4:5B:E5:EA:1A:36:85:80:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/7c33a304-1a62-32e5-90c8-e6647ca6d200.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/98161ef7-249b-450b-ba6a-5819e613ed63.crl

            X509v3 Authority Key Identifier:
                keyid:D4:19:D4:44:4B:11:89:5C:8C:6D:68:65:FD:EB:4B:4F:F2:AC:1A:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2b7:40::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:b1:a1:86:94:ac:32:c4:64:10:1f:87:6b:d3:50:78:b9:10:
         1d:b2:e5:49:eb:6d:b6:68:4a:ab:f4:5b:fc:b6:db:80:83:d4:
         01:cf:f2:fe:d6:7e:27:32:49:0e:fb:dd:2e:8e:48:36:97:64:
         7c:f9:e8:67:c1:86:ef:07:4c:57:4f:61:8f:b8:14:59:17:27:
         2e:9d:2d:a8:59:5f:07:95:1b:7b:08:a3:63:df:f1:19:73:53:
         d1:48:ce:01:67:a9:4b:1d:96:23:13:28:63:76:b0:e7:f7:c2:
         30:cc:c6:d4:b9:bc:5f:d2:0a:f6:2f:6e:bc:8b:f9:f9:fc:47:
         0e:91:4e:d5:27:7d:80:11:9d:ae:e6:29:fb:bb:8b:10:46:01:
         35:6a:fd:c2:59:dc:47:92:d9:dc:d5:c0:c1:24:81:59:7f:fc:
         27:f4:6d:91:fd:71:c0:ae:d6:af:65:db:cf:a8:a1:7b:1c:be:
         cd:b0:20:be:a3:9e:2e:e1:9b:da:30:8c:94:15:34:cf:7c:23:
         59:06:a4:a9:c3:c6:9d:1e:68:22:35:b6:43:71:c9:16:75:05:
         e3:1e:39:8b:75:9f:f0:8a:b0:4d:14:db:52:94:a7:ea:e0:75:
         fe:18:74:90:54:55:f7:ce:0a:3d:72:b6:e2:45:2e:ce:8f:80:
         4a:69:05:fe
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqdMNxM2PQnf1CU7gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTgxNjFlZjctMjQ5Yi00NTBiLWJhNmEtNTgxOWU2MTNl
ZDYzMB4XDTI1MDcyMzEzMDEwMloXDTI1MTAyMTEzMDEwMlowLzEtMCsGA1UEAxMk
NzZkMjdlZTQtOWYxMS00NmRhLWJlMzItY2QzMTNlOWYzNzRjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA17RRJWsEIf1trJWbdG/ZUGA7YRJocjv4vOt3
c/ARBXMDfE3spIKERDmyL/htpg4JDp9EDOBZUlxJAv6GG/Hwf6bUI9lEXMtdW3p7
1fufplgRC7wQy0pE7/6J8U/xsGO4D2xPXavg1QFkLaNan9o4qkqM78TkdkQww9WD
OCSvwnpvoA87Z4ixm63tRFlpjtxH2wloqD+nyX487qTQAh6PaanyQ+ymxDhQvzqC
eBDANztk0v/GQyq0hIKBQV0z4vI9hN+zzO87WmVeGtKGfmlROV8sBAqKrKw0DpFL
5fWJ6P3cett/Z0Rgtc1ekj5Ngpubu/k54U7aexLULaR0O+i9jwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFETbuNl7kW72AbIo5Fvl6ho2hYDoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85ODE2
MWVmNy0yNDliLTQ1MGItYmE2YS01ODE5ZTYxM2VkNjMvN2MzM2EzMDQtMWE2Mi0z
MmU1LTkwYzgtZTY2NDdjYTZkMjAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOTgxNjFlZjctMjQ5Yi00NTBiLWJh
NmEtNTgxOWU2MTNlZDYzLzk4MTYxZWY3LTI0OWItNDUwYi1iYTZhLTU4MTllNjEz
ZWQ2My5jcmwwHwYDVR0jBBgwFoAU1BnUREsRiVyMbWhl/etLT/KsGnYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS85ODE2MWVmNy0yNDliLTQ1MGItYmE2YS01ODE5
ZTYxM2VkNjMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgICtwBA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADWxoYaUrDLEZBAfh2vTUHi5EB2y5UnrbbZoSqv0W/y224CD1AHP
8v7WficySQ773S6OSDaXZHz56GfBhu8HTFdPYY+4FFkXJy6dLahZXweVG3sIo2Pf
8RlzU9FIzgFnqUsdliMTKGN2sOf3wjDMxtS5vF/SCvYvbryL+fn8Rw6RTtUnfYAR
na7mKfu7ixBGATVq/cJZ3EeS2dzVwMEkgVl//Cf0bZH9ccCu1q9l28+ooXscvs2w
IL6jni7hm9owjJQVNM98I1kGpKnDxp0eaCI1tkNxyRZ1BeMeOYt1n/CKsE0U21KU
p+rgdf4YdJBUVffOCj1ytuJFLs6PgEppBf4=
-----END CERTIFICATE-----
Generated at Wed Aug 6 09:37:25 2025 by rpki-client