Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/27c7eae7-978a-361e-ae8a-9840893b0c62.roa
File:                     27c7eae7-978a-361e-ae8a-9840893b0c62.roa (raw, json)
Hash identifier:          rtVwb24unJyf3nATlkY77plBtdDlOBos0o3U1zwpeMk=
Subject key identifier:   A6:26:EA:21:36:20:8C:F7:0E:62:FA:53:0F:F9:77:A7:FD:4E:5B:84
Certificate issuer:       /CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1
Certificate serial:       010D0C9F4328584A30502FD14D1F85D2D2536A60
Authority key identifier: F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/27c7eae7-978a-361e-ae8a-9840893b0c62.roa
Signing time:             Sat 14 Jun 2025 13:01:04 +0000
ROA not before:           Sat 14 Jun 2025 13:01:04 +0000
ROA not after:            Fri 12 Sep 2025 13:01:04 +0000
asID:                     395092
IP address blocks:        216.120.200.0/22 maxlen: 24
                          2607:a680:6::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:30:50:2f:d1:4d:1f:85:d2:d2:53:6a:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1
        Validity
            Not Before: Jun 14 13:01:04 2025 GMT
            Not After : Sep 12 13:01:04 2025 GMT
        Subject: CN=b83befaa-9048-41fe-a8d6-fc76fec71309
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:4e:2d:64:73:ca:cf:eb:47:f5:9e:a1:16:12:
                    8d:55:1c:9b:fe:f5:d3:1c:7f:d4:80:0a:aa:9b:c1:
                    e7:db:e8:00:8e:af:19:dd:18:38:da:f5:52:7b:50:
                    30:ab:e1:e5:de:46:60:75:c9:42:8d:2b:a4:0c:0c:
                    5c:20:c3:35:4e:66:06:fd:71:22:ce:30:51:8e:7d:
                    4e:32:04:61:5d:c2:1f:7d:c9:60:b6:99:5f:5f:ab:
                    6a:7f:76:56:da:c3:d7:5d:25:bc:04:77:60:15:81:
                    c6:7a:8b:dd:f8:7e:e6:35:1e:b5:23:21:f7:3b:89:
                    89:20:da:2c:fb:2a:88:9f:dc:97:d0:32:62:2d:36:
                    79:a1:35:f5:d4:0b:e5:93:91:b2:a8:eb:11:0f:ab:
                    95:15:46:7d:04:2c:72:0b:a8:2f:3f:a2:ac:66:e7:
                    40:96:7b:1d:1e:7c:dd:22:f8:9f:e0:71:15:ed:e3:
                    3a:ca:7e:8e:76:0a:1f:0c:f9:0a:af:b1:12:3f:d5:
                    b1:65:5d:35:a7:af:75:09:4b:9a:51:95:d8:14:d2:
                    84:65:ab:49:c9:01:3d:3d:2f:57:b3:d5:20:38:16:
                    eb:97:da:31:85:b2:82:fa:78:30:e3:fb:26:22:7b:
                    94:9b:d6:4a:3a:45:ea:f5:bb:91:63:b2:14:f8:b4:
                    d2:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:26:EA:21:36:20:8C:F7:0E:62:FA:53:0F:F9:77:A7:FD:4E:5B:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/27c7eae7-978a-361e-ae8a-9840893b0c62.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl

            X509v3 Authority Key Identifier:
                keyid:F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.120.200.0/22
                IPv6:
                  2607:a680:6::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:a6:0e:be:90:53:6c:ec:71:1c:83:5e:eb:41:b6:68:25:08:
         b5:1b:69:5f:e3:12:34:d8:ee:6b:24:d6:df:22:9b:14:f2:20:
         d7:a0:ae:6c:fa:a7:c9:3d:3b:1f:8c:cd:95:b3:68:b6:00:11:
         23:06:86:12:d4:7a:f7:63:8a:28:7e:8c:58:43:2f:53:76:57:
         51:11:fc:ae:64:1c:7c:29:fa:2b:cc:9f:2c:77:34:fb:80:cc:
         a4:eb:76:aa:52:a5:3e:7a:ba:9f:fa:15:f2:51:bf:f5:e1:10:
         b8:bb:58:57:52:af:34:59:f3:8f:e7:cb:ae:3b:13:49:a6:3f:
         4c:cb:63:b7:19:10:18:5e:f4:2c:ec:ca:d8:f4:0e:8a:fa:ba:
         b7:bd:aa:3b:5b:c7:fd:43:23:ce:aa:17:a5:7d:d4:42:e2:5b:
         85:ba:46:ef:64:07:12:93:05:49:32:94:6a:72:22:18:40:c6:
         61:c8:e2:f5:61:6e:f7:87:39:ca:a3:11:b4:13:4b:be:ea:a9:
         e3:57:e9:f0:7d:84:0d:f4:f1:c3:b6:b9:6c:b5:2c:96:04:84:
         d2:39:b9:a5:53:8c:4d:f3:fe:de:48:c0:0a:91:7e:de:dc:45:
         ec:1b:f6:0a:7c:50:df:4f:32:90:d4:c7:50:01:b8:87:90:b5:
         40:9b:bc:74
-----BEGIN CERTIFICATE-----
MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEowUC/RTR+F0tJTamAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjBlOTcyZTctYWUxZS00NDhjLThlNmMtOGY4MWY3M2I3
N2ExMB4XDTI1MDYxNDEzMDEwNFoXDTI1MDkxMjEzMDEwNFowLzEtMCsGA1UEAxMk
YjgzYmVmYWEtOTA0OC00MWZlLWE4ZDYtZmM3NmZlYzcxMzA5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAok4tZHPKz+tH9Z6hFhKNVRyb/vXTHH/UgAqq
m8Hn2+gAjq8Z3Rg42vVSe1Awq+Hl3kZgdclCjSukDAxcIMM1TmYG/XEizjBRjn1O
MgRhXcIffclgtplfX6tqf3ZW2sPXXSW8BHdgFYHGeovd+H7mNR61IyH3O4mJINos
+yqIn9yX0DJiLTZ5oTX11Avlk5GyqOsRD6uVFUZ9BCxyC6gvP6KsZudAlnsdHnzd
Ivif4HEV7eM6yn6OdgofDPkKr7ESP9WxZV01p691CUuaUZXYFNKEZatJyQE9PS9X
s9UgOBbrl9oxhbKC+ngw4/smInuUm9ZKOkXq9buRY7IU+LTSQQIDAQABo4IDZjCC
A2IwHQYDVR0OBBYEFKYm6iE2IIz3DmL6Uw/5d6f9TluEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8yMGU5
NzJlNy1hZTFlLTQ0OGMtOGU2Yy04ZjgxZjczYjc3YTEvMjdjN2VhZTctOTc4YS0z
NjFlLWFlOGEtOTg0MDg5M2IwYzYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMjBlOTcyZTctYWUxZS00NDhjLThl
NmMtOGY4MWY3M2I3N2ExLzIwZTk3MmU3LWFlMWUtNDQ4Yy04ZTZjLThmODFmNzNi
NzdhMS5jcmwwHwYDVR0jBBgwFoAU9m6h5/hh+dd0ACy7mBw7ijSGX0cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8yMGU5NzJlNy1hZTFlLTQ0OGMtOGU2Yy04Zjgx
ZjczYjc3YTEuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQC2HjIMA8E
AgACMAkDBwAmB6aAAAYwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG
AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu
aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAFKYOvpBTbOxxHINe60G2aCUItRtpX+MS
NNjuayTW3yKbFPIg16CubPqnyT07H4zNlbNotgARIwaGEtR692OKKH6MWEMvU3ZX
URH8rmQcfCn6K8yfLHc0+4DMpOt2qlKlPnq6n/oV8lG/9eEQuLtYV1KvNFnzj+fL
rjsTSaY/TMtjtxkQGF70LOzK2PQOivq6t72qO1vH/UMjzqoXpX3UQuJbhbpG72QH
EpMFSTKUanIiGEDGYcji9WFu94c5yqMRtBNLvuqp41fp8H2EDfTxw7a5bLUslgSE
0jm5pVOMTfP+3kjACpF+3txF7Bv2CnxQ308ykNTHUAG4h5C1QJu8dA==
-----END CERTIFICATE-----
Generated at Mon Jun 16 00:12:50 2025 by rpki-client