Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/2027f2ae-853f-3917-886e-21754d6f9154.roa
File:                     2027f2ae-853f-3917-886e-21754d6f9154.roa (raw, json)
Hash identifier:          387ffi+d2AEMJC2gKAtZ/o+xT2VXe/G23jieY0cyCvk=
Subject key identifier:   C8:A3:A4:74:68:2B:75:F2:56:25:8C:A3:AB:FB:9C:DC:93:E6:77:51
Certificate issuer:       /CN=36ee0355-1d23-4ead-8858-b26a81c6add0
Certificate serial:       010D0C9F4328584A2EEABC0D0C414A538A57BFF0
Authority key identifier: A3:BB:BA:23:A0:43:B3:7B:2C:CA:AF:E0:AA:44:10:AB:11:93:70:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/2027f2ae-853f-3917-886e-21754d6f9154.roa
Signing time:             Sat 14 Jun 2025 01:00:49 +0000
ROA not before:           Sat 14 Jun 2025 01:00:49 +0000
ROA not after:            Fri 12 Sep 2025 01:00:49 +0000
asID:                     11873
IP address blocks:        2620:bf::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Jul 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2e:ea:bc:0d:0c:41:4a:53:8a:57:bf:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36ee0355-1d23-4ead-8858-b26a81c6add0
        Validity
            Not Before: Jun 14 01:00:49 2025 GMT
            Not After : Sep 12 01:00:49 2025 GMT
        Subject: CN=cc556043-4e0a-487f-ba07-e29e67e138c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:74:0d:2b:04:1f:f4:dd:70:5d:0b:4a:bf:47:
                    95:05:a3:69:17:7c:f7:d4:99:07:18:9b:5f:e1:51:
                    50:f5:b1:fc:bf:b1:17:4d:7a:28:c6:49:c4:4d:74:
                    9f:a2:92:b4:79:b6:16:dc:fc:dc:e2:74:11:12:8a:
                    60:75:33:77:f6:75:06:f3:89:c7:11:7c:0f:94:a4:
                    93:db:cf:eb:41:12:93:07:04:92:0e:39:13:bd:31:
                    96:ac:df:c5:b2:5e:f8:80:ea:98:de:7b:8d:0d:bc:
                    f1:3b:fc:e5:ef:b7:92:8b:22:58:38:95:07:72:c4:
                    98:cc:01:86:8a:bb:44:fd:78:cb:33:6b:b2:f2:65:
                    ab:b7:c6:57:94:e5:07:38:01:1c:6b:8d:99:a3:d0:
                    48:3e:8b:03:3e:12:1e:11:4c:cf:29:70:76:55:07:
                    c0:74:c3:b0:a8:78:df:f8:d4:cd:53:ed:d3:56:02:
                    cc:83:96:1c:2c:35:ff:9a:99:16:27:be:8a:c5:9a:
                    18:69:7c:36:d4:56:ec:b9:81:45:08:fc:58:1e:4c:
                    ea:c4:a6:74:bf:73:9d:38:6b:ac:f9:88:72:96:a8:
                    73:41:d2:24:9b:51:48:51:87:ce:43:2c:55:dc:0a:
                    e9:97:f9:b6:46:83:13:34:2d:df:c3:22:45:09:33:
                    06:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:A3:A4:74:68:2B:75:F2:56:25:8C:A3:AB:FB:9C:DC:93:E6:77:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/2027f2ae-853f-3917-886e-21754d6f9154.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.crl

            X509v3 Authority Key Identifier:
                keyid:A3:BB:BA:23:A0:43:B3:7B:2C:CA:AF:E0:AA:44:10:AB:11:93:70:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:bf::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:e0:79:1e:3e:dc:78:a9:9b:ed:47:c4:eb:63:19:e5:20:8d:
         27:8f:bb:7c:2e:c9:88:9b:81:12:50:20:1f:64:cb:9a:f0:e9:
         41:b9:1c:4f:67:62:87:cc:7d:e2:0e:27:61:7b:0f:73:75:7d:
         44:28:26:59:e4:ee:0d:f9:a2:09:e8:ed:60:1f:c0:47:91:09:
         af:82:09:ad:33:4a:54:f7:08:04:f7:d4:8e:d1:8e:89:6b:c6:
         2a:e9:d3:eb:90:7e:f8:bd:fb:8b:b0:a9:f3:2a:45:8f:77:32:
         ba:cc:c6:b9:4e:2b:f6:56:88:2b:2b:60:d9:3d:e7:0b:d3:a3:
         8e:25:32:dd:5f:65:1e:04:c4:cd:58:3c:c4:a1:82:b7:c7:3d:
         23:1a:bf:7c:ea:1d:f1:3a:a7:1a:9f:ef:3d:6b:98:38:ab:34:
         0f:ed:6a:58:74:50:bb:0d:0a:ed:3e:9d:7f:aa:7b:47:24:5a:
         ee:79:73:6b:0e:8d:7f:91:dc:ff:9d:19:dc:66:40:16:32:3a:
         58:65:e6:82:e8:8b:64:f8:0a:ac:18:ae:71:da:21:e8:a3:a3:
         85:30:3d:e3:ac:53:d4:6f:54:62:5e:2b:be:a5:5e:c7:4e:c6:
         ab:dd:fe:d4:6b:91:44:4a:ed:bd:cc:cd:38:af:23:ab:84:53:
         46:23:3c:98
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEou6rwNDEFKU4pXv/AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzZlZTAzNTUtMWQyMy00ZWFkLTg4NTgtYjI2YTgxYzZh
ZGQwMB4XDTI1MDYxNDAxMDA0OVoXDTI1MDkxMjAxMDA0OVowLzEtMCsGA1UEAxMk
Y2M1NTYwNDMtNGUwYS00ODdmLWJhMDctZTI5ZTY3ZTEzOGM0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3QNKwQf9N1wXQtKv0eVBaNpF3z31JkHGJtf
4VFQ9bH8v7EXTXooxknETXSfopK0ebYW3Pzc4nQREopgdTN39nUG84nHEXwPlKST
28/rQRKTBwSSDjkTvTGWrN/Fsl74gOqY3nuNDbzxO/zl77eSiyJYOJUHcsSYzAGG
irtE/XjLM2uy8mWrt8ZXlOUHOAEca42Zo9BIPosDPhIeEUzPKXB2VQfAdMOwqHjf
+NTNU+3TVgLMg5YcLDX/mpkWJ76KxZoYaXw21FbsuYFFCPxYHkzqxKZ0v3OdOGus
+YhylqhzQdIkm1FIUYfOQyxV3Arpl/m2RoMTNC3fwyJFCTMGJQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFMijpHRoK3XyViWMo6v7nNyT5ndRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zNmVl
MDM1NS0xZDIzLTRlYWQtODg1OC1iMjZhODFjNmFkZDAvMjAyN2YyYWUtODUzZi0z
OTE3LTg4NmUtMjE3NTRkNmY5MTU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMzZlZTAzNTUtMWQyMy00ZWFkLTg4
NTgtYjI2YTgxYzZhZGQwLzM2ZWUwMzU1LTFkMjMtNGVhZC04ODU4LWIyNmE4MWM2
YWRkMC5jcmwwHwYDVR0jBBgwFoAUo7u6I6BDs3ssyq/gqkQQqxGTcJUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC8zNmVlMDM1NS0xZDIzLTRlYWQtODg1OC1iMjZh
ODFjNmFkZDAuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAvwAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAJzgeR4+3Hipm+1HxOtjGeUgjSePu3wuyYibgRJQIB9ky5rw6UG5
HE9nYofMfeIOJ2F7D3N1fUQoJlnk7g35ogno7WAfwEeRCa+CCa0zSlT3CAT31I7R
jolrxirp0+uQfvi9+4uwqfMqRY93MrrMxrlOK/ZWiCsrYNk95wvTo44lMt1fZR4E
xM1YPMShgrfHPSMav3zqHfE6pxqf7z1rmDirNA/talh0ULsNCu0+nX+qe0ckWu55
c2sOjX+R3P+dGdxmQBYyOlhl5oLoi2T4CqwYrnHaIeijo4UwPeOsU9RvVGJeK76l
XsdOxqvd/tRrkURK7b3MzTivI6uEU0YjPJg=
-----END CERTIFICATE-----
Generated at Wed Jul 9 01:37:07 2025 by rpki-client