Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/27f24f9e-ef46-4828-9575-be547ae0263d/97092b7d-d414-39ab-83de-0316c81e6aa8.roa
File:                     97092b7d-d414-39ab-83de-0316c81e6aa8.roa (raw, json)
Hash identifier:          gG0JpApqlkuaXbmpP4ZU3vo49GCshCIFvDJmuQIxojE=
Subject key identifier:   FF:BD:6F:7D:2F:A4:44:E3:9A:17:6D:7D:58:A4:78:92:A9:8C:5C:8A
Certificate issuer:       /CN=27f24f9e-ef46-4828-9575-be547ae0263d
Certificate serial:       010D0C9F4328584B08ABEFC2F4C97F3C6E0E6C00
Authority key identifier: 5C:D9:FB:4D:9B:51:64:06:A6:D0:AB:BE:A0:03:92:1D:13:83:FD:88
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/27f24f9e-ef46-4828-9575-be547ae0263d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/27f24f9e-ef46-4828-9575-be547ae0263d/97092b7d-d414-39ab-83de-0316c81e6aa8.roa
Signing time:             Sun 31 Aug 2025 01:00:33 +0000
ROA not before:           Sun 31 Aug 2025 01:00:33 +0000
ROA not after:            Sat 29 Nov 2025 02:00:33 +0000
asID:                     46475
IP address blocks:        2606:aec0:3000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/27f24f9e-ef46-4828-9575-be547ae0263d/27f24f9e-ef46-4828-9575-be547ae0263d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/27f24f9e-ef46-4828-9575-be547ae0263d/27f24f9e-ef46-4828-9575-be547ae0263d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/27f24f9e-ef46-4828-9575-be547ae0263d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:08:ab:ef:c2:f4:c9:7f:3c:6e:0e:6c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27f24f9e-ef46-4828-9575-be547ae0263d
        Validity
            Not Before: Aug 31 01:00:33 2025 GMT
            Not After : Nov 29 02:00:33 2025 GMT
        Subject: CN=94aad819-ba4e-4dc0-ac03-f6a16379bde4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:71:a3:e9:cb:b0:2c:ce:7f:c0:f6:96:39:2f:
                    f5:ce:c0:64:86:0d:80:e3:78:3f:e5:86:1e:5f:01:
                    d0:a7:1a:22:ad:ca:d7:5f:2f:ac:c6:84:c7:0e:66:
                    34:aa:32:9b:d2:69:f2:e3:f8:91:bc:d4:fd:92:8e:
                    b7:0c:63:90:bd:c3:62:03:14:85:2d:86:d3:e6:e2:
                    bc:fe:c0:95:da:a5:38:e9:6a:1c:94:b6:9d:58:a4:
                    5c:67:c1:65:c3:70:c6:7e:07:03:96:1d:e9:2f:65:
                    07:b4:02:5d:09:62:2e:7d:2d:cb:6e:d0:e2:73:0a:
                    e1:30:a6:66:a6:f1:83:4b:12:32:a3:5a:0c:56:61:
                    55:15:c5:68:cd:0f:e2:bd:6f:29:d7:4d:95:7f:d3:
                    0f:56:40:45:f4:6a:18:74:27:21:e1:a4:db:fd:77:
                    3e:de:20:15:7f:d0:43:ab:9e:9b:04:60:bd:f5:2e:
                    20:51:f0:77:d2:6b:c7:f7:96:98:96:4a:1d:9b:4b:
                    12:98:0a:4d:87:25:5d:86:c4:af:1e:5c:67:0d:ee:
                    33:32:a4:c4:71:4e:3d:99:b6:a1:ca:31:96:1b:b4:
                    15:25:5d:b2:1b:e6:38:33:d6:a4:4c:f0:27:9c:90:
                    2e:e9:fa:36:43:0e:ed:d0:0e:4c:80:9b:50:a4:6f:
                    3f:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:BD:6F:7D:2F:A4:44:E3:9A:17:6D:7D:58:A4:78:92:A9:8C:5C:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/27f24f9e-ef46-4828-9575-be547ae0263d/97092b7d-d414-39ab-83de-0316c81e6aa8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/27f24f9e-ef46-4828-9575-be547ae0263d/27f24f9e-ef46-4828-9575-be547ae0263d.crl

            X509v3 Authority Key Identifier:
                keyid:5C:D9:FB:4D:9B:51:64:06:A6:D0:AB:BE:A0:03:92:1D:13:83:FD:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/27f24f9e-ef46-4828-9575-be547ae0263d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:aec0:3000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:ea:a0:96:ec:1a:ef:75:6a:f8:c6:2a:57:28:d1:51:a2:a9:
         56:c5:2a:f1:e2:ee:74:e9:6e:3b:0d:3a:bc:21:1e:e4:29:2b:
         10:ae:86:9c:4a:75:ff:ff:47:e9:48:ca:e4:f3:6f:4f:5e:3f:
         ae:ac:87:08:c7:a6:07:41:cb:cc:f5:23:2b:70:76:3a:c5:9b:
         53:3d:da:70:49:41:65:22:c0:01:c9:11:9f:31:77:e1:4a:25:
         79:c7:d6:02:4b:4f:e9:e1:a3:dc:1d:83:ff:09:b3:d0:f5:7f:
         3f:90:e1:d2:cb:5a:9f:dd:da:ec:9c:b6:e4:86:a0:24:98:05:
         d0:3f:02:b4:44:60:a1:44:ee:e3:5e:4b:6a:92:62:04:97:8c:
         87:f6:92:5c:85:6d:17:34:27:24:cb:a1:0a:2e:a0:9d:1a:e6:
         43:8f:9e:f3:74:9a:c0:b8:94:3d:d3:a3:e2:50:49:e8:50:8f:
         57:9f:b4:17:00:15:96:ab:d5:f9:47:20:37:78:86:bd:e7:2d:
         10:b0:62:04:9a:78:60:ad:7c:da:fd:bd:5c:8a:dc:fb:8d:00:
         64:19:05:ac:31:14:a4:6e:ca:49:e8:22:b4:8d:dd:37:29:c3:
         84:d6:8a:8f:f2:28:dd:d4:bd:c9:35:98:28:4d:a0:af:05:6e:
         b0:81:b2:80
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEsIq+/C9Ml/PG4ObAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjdmMjRmOWUtZWY0Ni00ODI4LTk1NzUtYmU1NDdhZTAy
NjNkMB4XDTI1MDgzMTAxMDAzM1oXDTI1MTEyOTAyMDAzM1owLzEtMCsGA1UEAxMk
OTRhYWQ4MTktYmE0ZS00ZGMwLWFjMDMtZjZhMTYzNzliZGU0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3HGj6cuwLM5/wPaWOS/1zsBkhg2A43g/5YYe
XwHQpxoircrXXy+sxoTHDmY0qjKb0mny4/iRvNT9ko63DGOQvcNiAxSFLYbT5uK8
/sCV2qU46WoclLadWKRcZ8Flw3DGfgcDlh3pL2UHtAJdCWIufS3LbtDicwrhMKZm
pvGDSxIyo1oMVmFVFcVozQ/ivW8p102Vf9MPVkBF9GoYdCch4aTb/Xc+3iAVf9BD
q56bBGC99S4gUfB30mvH95aYlkodm0sSmApNhyVdhsSvHlxnDe4zMqTEcU49mbah
yjGWG7QVJV2yG+Y4M9akTPAnnJAu6fo2Qw7t0A5MgJtQpG8/QQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFP+9b30vpETjmhdtfVikeJKpjFyKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yN2Yy
NGY5ZS1lZjQ2LTQ4MjgtOTU3NS1iZTU0N2FlMDI2M2QvOTcwOTJiN2QtZDQxNC0z
OWFiLTgzZGUtMDMxNmM4MWU2YWE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjdmMjRmOWUtZWY0Ni00ODI4LTk1
NzUtYmU1NDdhZTAyNjNkLzI3ZjI0ZjllLWVmNDYtNDgyOC05NTc1LWJlNTQ3YWUw
MjYzZC5jcmwwHwYDVR0jBBgwFoAUXNn7TZtRZAam0Ku+oAOSHROD/YgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8yN2YyNGY5ZS1lZjQ2LTQ4MjgtOTU3NS1iZTU0
N2FlMDI2M2QuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgauwDAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAKOqgluwa73Vq+MYqVyjRUaKpVsUq8eLudOluOw06vCEe5CkrEK6G
nEp1//9H6UjK5PNvT14/rqyHCMemB0HLzPUjK3B2OsWbUz3acElBZSLAAckRnzF3
4UolecfWAktP6eGj3B2D/wmz0PV/P5Dh0stan93a7Jy25IagJJgF0D8CtERgoUTu
415LapJiBJeMh/aSXIVtFzQnJMuhCi6gnRrmQ4+e83SawLiUPdOj4lBJ6FCPV5+0
FwAVlqvV+UcgN3iGvectELBiBJp4YK182v29XIrc+40AZBkFrDEUpG7KSegitI3d
NynDhNaKj/Io3dS9yTWYKE2grwVusIGygA==
-----END CERTIFICATE-----
Generated at Fri Oct 10 23:46:50 2025 by rpki-client