Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/44c35f76-193b-34b1-84b0-2c9c461e9abe.roa
File:                     44c35f76-193b-34b1-84b0-2c9c461e9abe.roa (raw, json)
Hash identifier:          mmGgdi/UHalLTaMJxN9AlzxOjOzzY09oDESI9FXZWNw=
Subject key identifier:   B5:0D:3D:05:0C:6D:70:8A:43:2A:E0:83:5A:88:F5:E8:C8:96:7B:EF
Certificate issuer:       /CN=98161ef7-249b-450b-ba6a-5819e613ed63
Certificate serial:       010D0C9F4328584AD9365C8A96F5F52A08FB3100
Authority key identifier: D4:19:D4:44:4B:11:89:5C:8C:6D:68:65:FD:EB:4B:4F:F2:AC:1A:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/44c35f76-193b-34b1-84b0-2c9c461e9abe.roa
Signing time:             Thu 14 Aug 2025 01:00:33 +0000
ROA not before:           Thu 14 Aug 2025 01:00:33 +0000
ROA not after:            Wed 12 Nov 2025 02:00:33 +0000
asID:                     211380
IP address blocks:        2602:2b7:69::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/98161ef7-249b-450b-ba6a-5819e613ed63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/98161ef7-249b-450b-ba6a-5819e613ed63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d9:36:5c:8a:96:f5:f5:2a:08:fb:31:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98161ef7-249b-450b-ba6a-5819e613ed63
        Validity
            Not Before: Aug 14 01:00:33 2025 GMT
            Not After : Nov 12 02:00:33 2025 GMT
        Subject: CN=e6fa8f9a-9d21-497a-ab72-63972844cbc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:18:5d:bf:7e:36:db:98:b4:fb:89:16:eb:97:
                    80:96:b0:dd:22:f1:60:10:05:17:c8:d9:3b:c2:28:
                    37:3c:91:59:d3:4d:95:09:57:8a:4d:a4:d0:fe:8d:
                    c7:ec:77:3e:f2:3f:80:30:b6:ec:4f:dd:2a:e9:2e:
                    13:ae:ad:04:50:aa:3a:be:07:d4:26:e2:7c:62:89:
                    95:69:b9:03:04:3b:d9:ff:c7:82:71:02:30:8d:12:
                    b2:8f:6a:40:8b:76:f2:a2:b1:ee:45:5e:37:30:c2:
                    b7:9d:19:e5:1c:72:e4:ae:f0:33:7d:20:80:9e:a9:
                    b0:f4:8e:5f:76:1d:d3:bb:79:d9:e5:84:e3:5c:b9:
                    d8:34:48:1e:54:94:fd:a1:45:10:0a:c6:0a:4c:cf:
                    32:0f:da:e7:e0:c4:c4:f6:09:cf:a8:42:e9:c1:48:
                    b1:84:ef:d4:d2:51:2b:09:d9:03:0d:96:de:47:1e:
                    8f:4a:04:9c:49:8f:ae:56:de:cf:d1:a2:21:50:07:
                    62:b0:bf:95:61:5b:a9:68:4d:b7:97:5e:d4:a4:35:
                    f9:d9:a2:37:6c:c9:34:e3:9b:50:a6:28:ee:87:e8:
                    a2:0c:48:1a:98:a9:af:3b:e0:68:c8:eb:21:0a:02:
                    12:da:88:1d:5b:91:fa:87:f1:26:95:63:c2:ee:78:
                    7f:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:0D:3D:05:0C:6D:70:8A:43:2A:E0:83:5A:88:F5:E8:C8:96:7B:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/44c35f76-193b-34b1-84b0-2c9c461e9abe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/98161ef7-249b-450b-ba6a-5819e613ed63.crl

            X509v3 Authority Key Identifier:
                keyid:D4:19:D4:44:4B:11:89:5C:8C:6D:68:65:FD:EB:4B:4F:F2:AC:1A:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2b7:69::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:71:7f:cd:3f:ce:ed:f7:45:d5:52:45:9a:22:f0:df:ae:1f:
         4f:58:a8:ac:8d:51:83:4e:e1:18:3a:aa:70:90:f5:f2:40:cd:
         7c:c6:9b:ec:dc:a6:af:1b:c7:11:7e:3f:3c:03:f6:a4:d1:0c:
         f6:a4:97:16:7f:eb:32:8f:2f:94:37:18:47:18:0e:17:6e:f8:
         4b:60:ae:4e:c3:b2:4f:c7:33:69:a2:ee:0c:9c:fe:f8:ac:77:
         70:51:8c:c1:49:c5:a7:f2:0e:40:b3:7a:cf:6d:84:25:07:1f:
         08:56:dc:9c:86:8c:c1:85:60:aa:ea:92:3f:d4:91:52:8f:87:
         01:4d:e5:20:6a:ee:bf:aa:2b:b9:44:0c:73:9c:8e:41:d5:ab:
         b1:46:fc:96:d1:47:a0:78:60:97:f8:f3:a6:d3:a5:96:e1:7f:
         f1:e0:8a:d0:0c:9c:18:b5:c7:b0:2d:5b:b3:c5:f3:ce:8a:3e:
         5a:8b:93:54:94:a9:3f:45:11:e4:05:dd:e8:90:d4:ed:a0:56:
         5d:13:1c:dc:cc:e4:16:b1:11:6f:76:42:65:ac:74:b9:87:98:
         47:f6:b0:a1:f6:94:2f:f6:bd:85:aa:c0:86:ef:d7:d6:c5:cf:
         e6:6c:9e:7d:55:ee:7c:f2:03:aa:d2:45:d6:78:ef:bf:10:4d:
         51:33:4f:7c
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErZNlyKlvX1Kgj7MQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTgxNjFlZjctMjQ5Yi00NTBiLWJhNmEtNTgxOWU2MTNl
ZDYzMB4XDTI1MDgxNDAxMDAzM1oXDTI1MTExMjAyMDAzM1owLzEtMCsGA1UEAxMk
ZTZmYThmOWEtOWQyMS00OTdhLWFiNzItNjM5NzI4NDRjYmM0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwhhdv34225i0+4kW65eAlrDdIvFgEAUXyNk7
wig3PJFZ002VCVeKTaTQ/o3H7Hc+8j+AMLbsT90q6S4Trq0EUKo6vgfUJuJ8YomV
abkDBDvZ/8eCcQIwjRKyj2pAi3byorHuRV43MMK3nRnlHHLkrvAzfSCAnqmw9I5f
dh3Tu3nZ5YTjXLnYNEgeVJT9oUUQCsYKTM8yD9rn4MTE9gnPqELpwUixhO/U0lEr
CdkDDZbeRx6PSgScSY+uVt7P0aIhUAdisL+VYVupaE23l17UpDX52aI3bMk045tQ
pijuh+iiDEgamKmvO+BoyOshCgIS2ogdW5H6h/EmlWPC7nh/bwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFLUNPQUMbXCKQyrgg1qI9ejIlnvvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85ODE2
MWVmNy0yNDliLTQ1MGItYmE2YS01ODE5ZTYxM2VkNjMvNDRjMzVmNzYtMTkzYi0z
NGIxLTg0YjAtMmM5YzQ2MWU5YWJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOTgxNjFlZjctMjQ5Yi00NTBiLWJh
NmEtNTgxOWU2MTNlZDYzLzk4MTYxZWY3LTI0OWItNDUwYi1iYTZhLTU4MTllNjEz
ZWQ2My5jcmwwHwYDVR0jBBgwFoAU1BnUREsRiVyMbWhl/etLT/KsGnYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS85ODE2MWVmNy0yNDliLTQ1MGItYmE2YS01ODE5
ZTYxM2VkNjMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgICtwBp
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAB1xf80/zu33RdVSRZoi8N+uH09YqKyNUYNO4Rg6qnCQ9fJAzXzG
m+zcpq8bxxF+PzwD9qTRDPaklxZ/6zKPL5Q3GEcYDhdu+Etgrk7Dsk/HM2mi7gyc
/visd3BRjMFJxafyDkCzes9thCUHHwhW3JyGjMGFYKrqkj/UkVKPhwFN5SBq7r+q
K7lEDHOcjkHVq7FG/JbRR6B4YJf486bTpZbhf/HgitAMnBi1x7AtW7PF886KPlqL
k1SUqT9FEeQF3eiQ1O2gVl0THNzM5BaxEW92QmWsdLmHmEf2sKH2lC/2vYWqwIbv
19bFz+Zsnn1V7nzyA6rSRdZ4778QTVEzT3w=
-----END CERTIFICATE-----
Generated at Sun Aug 24 04:51:41 2025 by rpki-client