Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/8d974757-d4d2-3d3e-98aa-88aa4187535f.roa
File:                     8d974757-d4d2-3d3e-98aa-88aa4187535f.roa (raw, json)
Hash identifier:          CaQv2kIZa12s3JGt3XfVnAlnuosIR0Tp0+0SyXuIHQE=
Subject key identifier:   2F:01:AD:28:EE:A0:85:4A:1D:C5:61:FA:0F:B6:D4:78:C9:2C:F3:D4
Certificate issuer:       /CN=98161ef7-249b-450b-ba6a-5819e613ed63
Certificate serial:       010D0C9F432858497AD9BB1CB970FFFFD1294740
Authority key identifier: D4:19:D4:44:4B:11:89:5C:8C:6D:68:65:FD:EB:4B:4F:F2:AC:1A:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/8d974757-d4d2-3d3e-98aa-88aa4187535f.roa
Signing time:             Thu 10 Apr 2025 13:00:59 +0000
ROA not before:           Thu 10 Apr 2025 13:00:59 +0000
ROA not after:            Wed 09 Jul 2025 13:00:59 +0000
asID:                     21738
IP address blocks:        2602:2b7:d00::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/98161ef7-249b-450b-ba6a-5819e613ed63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/98161ef7-249b-450b-ba6a-5819e613ed63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7a:d9:bb:1c:b9:70:ff:ff:d1:29:47:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98161ef7-249b-450b-ba6a-5819e613ed63
        Validity
            Not Before: Apr 10 13:00:59 2025 GMT
            Not After : Jul  9 13:00:59 2025 GMT
        Subject: CN=8b2d081a-f4ca-468a-aecf-ad46416550a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ab:83:86:f3:0b:32:e7:1c:67:f0:da:f6:bc:
                    e0:7d:13:a0:15:15:02:d2:31:a5:88:51:fe:52:ed:
                    7f:72:56:63:21:23:76:03:0b:09:60:5c:76:10:60:
                    c5:f3:d7:6a:d8:49:0c:50:b0:09:c4:77:12:47:33:
                    a4:98:17:27:d2:9b:f3:28:14:6b:28:53:11:6f:26:
                    b8:9c:8f:3b:fe:c2:97:de:b1:18:0e:49:da:ce:a2:
                    d7:f2:0a:36:c3:df:4a:42:1a:ad:75:eb:dc:58:45:
                    af:c0:f0:44:5e:53:60:57:77:e5:ff:d2:8b:fd:c7:
                    c2:82:7b:5a:c0:8a:42:43:d0:42:dc:b8:50:88:2b:
                    5a:38:6c:f4:39:57:40:ab:1b:c7:4c:88:3a:c5:a5:
                    4a:d3:e0:c6:0b:5b:26:a3:bb:48:66:ae:bd:bb:c0:
                    90:be:1a:b4:21:05:cc:29:ca:ad:1f:62:b2:b1:cd:
                    9c:97:1b:ab:f9:53:b6:ba:17:3e:8d:d1:b0:6b:9a:
                    2e:e5:9c:f8:9d:d8:da:c5:6f:fd:24:51:d0:52:0e:
                    7b:c0:7b:81:5c:5c:e3:8c:ed:ea:45:5a:ed:05:38:
                    dc:c9:df:f2:dc:dd:76:b8:03:ee:f8:a3:22:2d:0f:
                    db:6d:4d:be:f0:c6:87:cf:f7:69:84:7c:c2:b4:2e:
                    66:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:01:AD:28:EE:A0:85:4A:1D:C5:61:FA:0F:B6:D4:78:C9:2C:F3:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/8d974757-d4d2-3d3e-98aa-88aa4187535f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/98161ef7-249b-450b-ba6a-5819e613ed63.crl

            X509v3 Authority Key Identifier:
                keyid:D4:19:D4:44:4B:11:89:5C:8C:6D:68:65:FD:EB:4B:4F:F2:AC:1A:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2b7:d00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:2f:b3:62:f6:65:66:ec:81:fd:18:b1:09:3b:22:7a:9a:da:
         0c:bf:26:cf:c3:36:2a:04:6e:8d:53:c8:8f:81:68:61:bc:1c:
         51:23:a7:8c:14:e7:c0:09:24:b5:2b:29:4e:a5:2f:d6:c7:a1:
         91:51:fc:f4:48:1a:25:d6:75:6c:d0:58:b5:ea:08:1f:12:c1:
         03:fb:3d:af:d4:80:e7:a9:64:c8:b6:a0:a8:1f:0f:e0:3d:7f:
         5a:43:1d:f4:6a:84:d2:73:1b:67:be:81:f9:83:58:0d:c6:eb:
         1b:da:05:ce:76:23:ed:23:1b:13:1a:ea:3a:a6:e0:37:2d:25:
         08:31:81:96:39:fd:f5:98:7e:b6:7f:15:6f:f7:9a:6d:2e:c5:
         b1:c5:04:fb:4b:fa:b0:60:e8:d2:fb:14:24:e9:88:9d:80:de:
         bb:41:17:76:dc:89:43:fe:cf:82:77:66:42:b4:94:84:40:cc:
         14:39:63:2a:bb:80:81:88:f0:e2:72:ca:94:35:28:fe:a2:c2:
         d2:a8:a3:ab:85:1a:f6:82:c0:77:bd:c3:43:48:ff:e8:be:bb:
         f9:3f:6a:da:b9:3a:24:8d:42:18:4a:c3:91:f9:ba:dc:17:d8:
         7c:92:11:4b:4b:e3:f8:a4:4c:25:36:2b:21:66:99:1f:9f:67:
         1c:7b:63:23
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEl62bscuXD//9EpR0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTgxNjFlZjctMjQ5Yi00NTBiLWJhNmEtNTgxOWU2MTNl
ZDYzMB4XDTI1MDQxMDEzMDA1OVoXDTI1MDcwOTEzMDA1OVowLzEtMCsGA1UEAxMk
OGIyZDA4MWEtZjRjYS00NjhhLWFlY2YtYWQ0NjQxNjU1MGExMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApquDhvMLMuccZ/Da9rzgfROgFRUC0jGliFH+
Uu1/clZjISN2AwsJYFx2EGDF89dq2EkMULAJxHcSRzOkmBcn0pvzKBRrKFMRbya4
nI87/sKX3rEYDknazqLX8go2w99KQhqtdevcWEWvwPBEXlNgV3fl/9KL/cfCgnta
wIpCQ9BC3LhQiCtaOGz0OVdAqxvHTIg6xaVK0+DGC1smo7tIZq69u8CQvhq0IQXM
KcqtH2Kysc2clxur+VO2uhc+jdGwa5ou5Zz4ndjaxW/9JFHQUg57wHuBXFzjjO3q
RVrtBTjcyd/y3N12uAPu+KMiLQ/bbU2+8MaHz/dphHzCtC5mjQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFC8BrSjuoIVKHcVh+g+21HjJLPPUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85ODE2
MWVmNy0yNDliLTQ1MGItYmE2YS01ODE5ZTYxM2VkNjMvOGQ5NzQ3NTctZDRkMi0z
ZDNlLTk4YWEtODhhYTQxODc1MzVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOTgxNjFlZjctMjQ5Yi00NTBiLWJh
NmEtNTgxOWU2MTNlZDYzLzk4MTYxZWY3LTI0OWItNDUwYi1iYTZhLTU4MTllNjEz
ZWQ2My5jcmwwHwYDVR0jBBgwFoAU1BnUREsRiVyMbWhl/etLT/KsGnYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS85ODE2MWVmNy0yNDliLTQ1MGItYmE2YS01ODE5
ZTYxM2VkNjMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgICtw0w
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAcC+zYvZlZuyB/RixCTsiepraDL8mz8M2KgRujVPIj4FoYbwcUSOn
jBTnwAkktSspTqUv1sehkVH89EgaJdZ1bNBYteoIHxLBA/s9r9SA56lkyLagqB8P
4D1/WkMd9GqE0nMbZ76B+YNYDcbrG9oFznYj7SMbExrqOqbgNy0lCDGBljn99Zh+
tn8Vb/eabS7FscUE+0v6sGDo0vsUJOmInYDeu0EXdtyJQ/7PgndmQrSUhEDMFDlj
KruAgYjw4nLKlDUo/qLC0qijq4Ua9oLAd73DQ0j/6L67+T9q2rk6JI1CGErDkfm6
3BfYfJIRS0vj+KRMJTYrIWaZH59nHHtjIw==
-----END CERTIFICATE-----
Generated at Sun Apr 27 04:15:17 2025 by rpki-client