Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9ae61efc-a402-4975-bfe7-f7ddda75a628/27b77248-5611-3c97-9303-22c76126751c.roa
File:                     27b77248-5611-3c97-9303-22c76126751c.roa (raw, json)
Hash identifier:          ml26iUo3uffxiLZ5KsPd4ELQPnXPGeNE/ZBRNKoR0cc=
Subject key identifier:   89:27:67:C0:3E:39:2A:39:29:58:99:F9:99:C8:E8:6A:19:48:EB:E3
Certificate issuer:       /CN=9ae61efc-a402-4975-bfe7-f7ddda75a628
Certificate serial:       010D0C9F4328584A90A0C5DD0B404D958B7ABAF0
Authority key identifier: 57:FC:76:D2:36:2F:CA:A9:90:CD:DA:FB:B7:BF:EE:7B:B6:80:9A:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9ae61efc-a402-4975-bfe7-f7ddda75a628.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9ae61efc-a402-4975-bfe7-f7ddda75a628/27b77248-5611-3c97-9303-22c76126751c.roa
Signing time:             Sat 19 Jul 2025 01:00:49 +0000
ROA not before:           Sat 19 Jul 2025 01:00:49 +0000
ROA not after:            Fri 17 Oct 2025 01:00:49 +0000
asID:                     273143
IP address blocks:        209.135.178.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9ae61efc-a402-4975-bfe7-f7ddda75a628/9ae61efc-a402-4975-bfe7-f7ddda75a628.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9ae61efc-a402-4975-bfe7-f7ddda75a628/9ae61efc-a402-4975-bfe7-f7ddda75a628.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9ae61efc-a402-4975-bfe7-f7ddda75a628.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:90:a0:c5:dd:0b:40:4d:95:8b:7a:ba:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ae61efc-a402-4975-bfe7-f7ddda75a628
        Validity
            Not Before: Jul 19 01:00:49 2025 GMT
            Not After : Oct 17 01:00:49 2025 GMT
        Subject: CN=658ba275-8b84-4a01-b331-1047520c6556
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:c6:59:b7:16:21:5a:36:2e:a6:50:3d:3a:ec:
                    bd:f5:ef:03:7d:d1:4b:3e:f1:9f:ac:30:cb:9c:06:
                    cb:6c:ff:df:c8:4c:28:9e:5e:5c:f4:c8:50:06:e1:
                    e8:52:f8:5d:80:a7:b6:25:34:47:e9:cc:a1:38:59:
                    53:be:c4:f3:bb:b1:cc:6d:88:59:f6:87:4a:c2:6a:
                    ff:e3:62:83:87:3e:30:99:2d:2e:3b:54:92:95:9a:
                    03:50:9e:b5:1d:bf:7d:09:76:e6:92:46:ec:98:be:
                    76:92:8c:a2:6d:b1:0a:45:2c:48:69:43:43:6b:ad:
                    03:7e:eb:1e:aa:30:bb:7d:7c:10:7f:bd:38:15:7d:
                    ae:28:14:1a:c9:8b:2c:4e:31:33:39:66:3c:27:4d:
                    49:59:90:9b:99:8c:3f:c6:7c:72:0c:ff:c4:63:f0:
                    04:4f:62:17:a6:94:8d:91:bf:d4:4c:e0:10:7f:88:
                    5c:6d:10:97:3b:4f:3d:e9:ae:4f:ce:49:33:1c:54:
                    7a:3b:21:69:09:12:fb:37:ea:e1:80:a9:ba:9b:5b:
                    11:d5:af:2a:d1:02:79:fc:38:00:3a:4f:5d:9e:c5:
                    97:99:97:75:ff:10:92:ee:a3:e5:f7:67:2a:23:7d:
                    08:0a:2f:ad:c4:c5:58:63:be:00:df:f0:09:ca:e0:
                    07:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:27:67:C0:3E:39:2A:39:29:58:99:F9:99:C8:E8:6A:19:48:EB:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9ae61efc-a402-4975-bfe7-f7ddda75a628/27b77248-5611-3c97-9303-22c76126751c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9ae61efc-a402-4975-bfe7-f7ddda75a628/9ae61efc-a402-4975-bfe7-f7ddda75a628.crl

            X509v3 Authority Key Identifier:
                keyid:57:FC:76:D2:36:2F:CA:A9:90:CD:DA:FB:B7:BF:EE:7B:B6:80:9A:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9ae61efc-a402-4975-bfe7-f7ddda75a628.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.135.178.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:3d:2a:81:fd:6b:12:8f:2b:b0:b8:28:c9:74:da:09:d3:9b:
         fb:26:87:20:36:f5:44:73:48:3b:ec:50:6d:ea:70:7c:b3:9d:
         7d:4d:38:8d:6f:43:92:99:07:73:ef:7e:31:3c:9d:02:04:27:
         ae:fa:da:0d:da:7e:bc:91:f7:5c:50:93:0b:84:7f:63:24:ea:
         49:c1:94:23:d3:ed:27:8e:1b:5e:3b:19:db:22:3e:b8:2e:04:
         e4:ff:56:13:fd:c5:12:67:fb:ad:3a:4f:09:e1:9a:ca:06:f2:
         85:de:e0:e5:53:79:90:9a:4b:66:24:8d:48:aa:ed:36:db:fb:
         8e:e5:19:b6:97:5f:90:28:1b:16:33:00:5d:4d:eb:bb:7d:d1:
         f3:55:9d:6b:c4:f8:e2:b2:40:61:f2:24:a7:a1:fb:f6:9c:d5:
         c4:f6:3a:7a:b5:be:1f:73:f8:ac:89:56:38:4f:32:06:c2:d0:
         5f:ba:71:63:d7:79:fc:09:81:94:d2:81:71:18:3a:11:5e:43:
         08:54:98:ac:ed:4a:4e:b3:9d:11:02:73:a2:72:6d:b9:a5:1c:
         c6:c8:56:c8:04:15:fb:42:1b:ed:ab:10:63:f0:2f:23:1d:a7:
         e2:40:07:d7:df:35:75:82:36:fa:ad:ab:9b:ba:16:e6:c6:03:
         7f:8d:5d:7e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqQoMXdC0BNlYt6uvAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWFlNjFlZmMtYTQwMi00OTc1LWJmZTctZjdkZGRhNzVh
NjI4MB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk
NjU4YmEyNzUtOGI4NC00YTAxLWIzMzEtMTA0NzUyMGM2NTU2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjMZZtxYhWjYuplA9Ouy99e8DfdFLPvGfrDDL
nAbLbP/fyEwonl5c9MhQBuHoUvhdgKe2JTRH6cyhOFlTvsTzu7HMbYhZ9odKwmr/
42KDhz4wmS0uO1SSlZoDUJ61Hb99CXbmkkbsmL52koyibbEKRSxIaUNDa60Dfuse
qjC7fXwQf704FX2uKBQayYssTjEzOWY8J01JWZCbmYw/xnxyDP/EY/AET2IXppSN
kb/UTOAQf4hcbRCXO0896a5PzkkzHFR6OyFpCRL7N+rhgKm6m1sR1a8q0QJ5/DgA
Ok9dnsWXmZd1/xCS7qPl92cqI30ICi+txMVYY74A3/AJyuAHKQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIknZ8A+OSo5KViZ+ZnI6GoZSOvjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85YWU2
MWVmYy1hNDAyLTQ5NzUtYmZlNy1mN2RkZGE3NWE2MjgvMjdiNzcyNDgtNTYxMS0z
Yzk3LTkzMDMtMjJjNzYxMjY3NTFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOWFlNjFlZmMtYTQwMi00OTc1LWJm
ZTctZjdkZGRhNzVhNjI4LzlhZTYxZWZjLWE0MDItNDk3NS1iZmU3LWY3ZGRkYTc1
YTYyOC5jcmwwHwYDVR0jBBgwFoAUV/x20jYvyqmQzdr7t7/ue7aAmuQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85YWU2MWVmYy1hNDAyLTQ5NzUtYmZlNy1mN2Rk
ZGE3NWE2MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0YeyMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIY9KoH9axKPK7C4KMl02gnTm/smhyA29URzSDvsUG3qcHyznX1NOI1v
Q5KZB3PvfjE8nQIEJ6762g3afryR91xQkwuEf2Mk6knBlCPT7SeOG147GdsiPrgu
BOT/VhP9xRJn+606TwnhmsoG8oXe4OVTeZCaS2YkjUiq7Tbb+47lGbaXX5AoGxYz
AF1N67t90fNVnWvE+OKyQGHyJKeh+/ac1cT2Onq1vh9z+KyJVjhPMgbC0F+6cWPX
efwJgZTSgXEYOhFeQwhUmKztSk6znRECc6JybbmlHMbIVsgEFftCG+2rEGPwLyMd
p+JAB9ffNXWCNvqtq5u6FubGA3+NXX4=
-----END CERTIFICATE-----
Generated at Tue Jul 22 04:33:40 2025 by rpki-client