Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/977e9fa2-99eb-4f6f-b686-c30c86d7e19b/209e0294-a659-3d18-8b04-153e27486b77.roa
File:                     209e0294-a659-3d18-8b04-153e27486b77.roa (raw, json)
Hash identifier:          zY/At4+7tBmDzVsWl60xyjy4le9IDpIHZ+axBXOjJJY=
Subject key identifier:   27:FA:D7:6E:83:F5:06:68:C1:CB:C2:FA:1A:6D:F6:AE:69:BC:91:1E
Certificate issuer:       /CN=977e9fa2-99eb-4f6f-b686-c30c86d7e19b
Certificate serial:       010D0C9F4328584A4F6B5CC94BC51E9BB9CACB00
Authority key identifier: 93:5A:ED:73:3A:71:26:DB:62:9D:DA:F5:67:B8:B0:6D:0A:7A:6E:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/977e9fa2-99eb-4f6f-b686-c30c86d7e19b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/977e9fa2-99eb-4f6f-b686-c30c86d7e19b/209e0294-a659-3d18-8b04-153e27486b77.roa
Signing time:             Wed 25 Jun 2025 16:25:57 +0000
ROA not before:           Wed 25 Jun 2025 16:25:57 +0000
ROA not after:            Tue 23 Sep 2025 16:25:57 +0000
asID:                     23309
IP address blocks:        2607:fb78::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/977e9fa2-99eb-4f6f-b686-c30c86d7e19b/977e9fa2-99eb-4f6f-b686-c30c86d7e19b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/977e9fa2-99eb-4f6f-b686-c30c86d7e19b/977e9fa2-99eb-4f6f-b686-c30c86d7e19b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/977e9fa2-99eb-4f6f-b686-c30c86d7e19b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4f:6b:5c:c9:4b:c5:1e:9b:b9:ca:cb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=977e9fa2-99eb-4f6f-b686-c30c86d7e19b
        Validity
            Not Before: Jun 25 16:25:57 2025 GMT
            Not After : Sep 23 16:25:57 2025 GMT
        Subject: CN=6ce151b8-fcab-4032-99d4-a79f5ddb5450
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:5a:b8:7e:cc:a1:43:a9:a9:23:d0:28:d2:08:
                    78:65:5f:1a:e5:8d:f4:83:e0:a2:5d:5e:a9:08:bc:
                    b0:75:4e:10:49:1d:e4:be:5e:fd:1a:c6:26:a8:af:
                    dd:60:bd:f3:d4:41:0f:56:5b:fb:c7:10:be:1b:4f:
                    24:9d:53:d7:5d:9c:d2:ee:ed:0e:2c:82:31:f2:af:
                    86:e5:e1:cb:1c:bb:5b:77:a7:87:0f:ae:66:5f:29:
                    92:de:3e:eb:72:fe:5e:b6:71:33:1a:23:77:b0:8b:
                    5f:2d:36:d3:a4:54:da:a0:60:ff:49:d0:ff:39:a6:
                    26:1d:45:e8:dd:33:d9:23:8c:d3:53:99:ac:10:01:
                    2f:15:61:ca:8e:a1:08:30:0a:78:e6:85:07:6e:75:
                    e9:58:01:64:c4:68:7f:c6:d6:b2:d2:75:c2:32:1b:
                    4a:d6:35:1c:c8:1f:fd:d4:6b:40:a1:03:b2:7a:dc:
                    fa:da:e1:41:0e:e8:a3:6d:36:cf:7b:97:65:2c:76:
                    a1:c1:83:06:b2:85:86:ba:f4:df:a1:c5:92:a1:ab:
                    01:a0:33:ba:0f:94:61:54:a9:7f:22:ac:b9:0e:a8:
                    f8:ad:e7:5e:49:2f:6b:ee:1d:8a:31:14:34:c8:4c:
                    44:81:31:a6:ca:0b:a2:ed:14:85:ec:47:fd:f9:22:
                    31:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:FA:D7:6E:83:F5:06:68:C1:CB:C2:FA:1A:6D:F6:AE:69:BC:91:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/977e9fa2-99eb-4f6f-b686-c30c86d7e19b/209e0294-a659-3d18-8b04-153e27486b77.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/977e9fa2-99eb-4f6f-b686-c30c86d7e19b/977e9fa2-99eb-4f6f-b686-c30c86d7e19b.crl

            X509v3 Authority Key Identifier:
                keyid:93:5A:ED:73:3A:71:26:DB:62:9D:DA:F5:67:B8:B0:6D:0A:7A:6E:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/977e9fa2-99eb-4f6f-b686-c30c86d7e19b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:fb78::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:49:fb:5b:ff:ad:34:67:76:b5:51:00:ce:3d:25:59:e7:bc:
         3b:60:be:27:0c:71:49:6a:57:05:d2:93:00:04:4d:19:aa:08:
         3c:94:26:33:31:67:03:a1:32:6f:31:58:55:8e:47:21:ed:95:
         ee:d8:59:ff:88:c3:dd:7e:f4:5e:8f:79:28:98:db:97:d3:cf:
         2a:98:0e:33:43:7e:8c:32:15:c5:e7:90:d0:a0:6c:b3:2f:8c:
         bb:72:73:3b:42:12:a8:6f:b5:15:2f:97:ca:50:be:e9:4b:6d:
         ee:0c:34:a4:25:41:02:38:f7:78:3f:43:ad:2e:76:f1:bf:70:
         a7:d8:db:9a:b6:1d:e3:56:ab:e1:0a:5a:37:d7:29:8e:7d:01:
         d5:b6:7e:f5:c7:34:90:04:5a:d9:12:5f:55:83:b6:8a:05:91:
         cf:9b:94:5f:5c:b8:c3:43:ab:6e:53:79:b5:67:9d:63:93:04:
         0e:07:c8:d3:83:8f:9a:71:b1:28:04:03:34:68:e6:db:c5:dd:
         ba:d7:20:53:d7:a1:06:96:ce:eb:a8:47:69:82:ca:a5:6e:61:
         48:58:82:53:c9:1a:e3:ea:a7:9e:11:d0:e0:b7:f0:dd:29:85:
         00:e4:d9:01:d9:56:a7:d3:dc:e5:6c:04:d9:b4:13:fb:ea:97:
         e6:7a:51:74
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEpPa1zJS8Uem7nKywAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTc3ZTlmYTItOTllYi00ZjZmLWI2ODYtYzMwYzg2ZDdl
MTliMB4XDTI1MDYyNTE2MjU1N1oXDTI1MDkyMzE2MjU1N1owLzEtMCsGA1UEAxMk
NmNlMTUxYjgtZmNhYi00MDMyLTk5ZDQtYTc5ZjVkZGI1NDUwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1q4fsyhQ6mpI9Ao0gh4ZV8a5Y30g+CiXV6p
CLywdU4QSR3kvl79GsYmqK/dYL3z1EEPVlv7xxC+G08knVPXXZzS7u0OLIIx8q+G
5eHLHLtbd6eHD65mXymS3j7rcv5etnEzGiN3sItfLTbTpFTaoGD/SdD/OaYmHUXo
3TPZI4zTU5msEAEvFWHKjqEIMAp45oUHbnXpWAFkxGh/xtay0nXCMhtK1jUcyB/9
1GtAoQOyetz62uFBDuijbTbPe5dlLHahwYMGsoWGuvTfocWSoasBoDO6D5RhVKl/
Iqy5Dqj4redeSS9r7h2KMRQ0yExEgTGmygui7RSF7Ef9+SIxiQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFCf6126D9QZowcvC+hpt9q5pvJEeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy85Nzdl
OWZhMi05OWViLTRmNmYtYjY4Ni1jMzBjODZkN2UxOWIvMjA5ZTAyOTQtYTY1OS0z
ZDE4LThiMDQtMTUzZTI3NDg2Yjc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvOTc3ZTlmYTItOTllYi00ZjZmLWI2
ODYtYzMwYzg2ZDdlMTliLzk3N2U5ZmEyLTk5ZWItNGY2Zi1iNjg2LWMzMGM4NmQ3
ZTE5Yi5jcmwwHwYDVR0jBBgwFoAUk1rtczpxJttindr1Z7iwbQp6bnwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy85NzdlOWZhMi05OWViLTRmNmYtYjY4Ni1jMzBj
ODZkN2UxOWIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgf7eDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBWSftb/600Z3a1UQDOPSVZ57w7YL4nDHFJalcF0pMABE0Zqgg8lCYz
MWcDoTJvMVhVjkch7ZXu2Fn/iMPdfvRej3komNuX088qmA4zQ36MMhXF55DQoGyz
L4y7cnM7QhKob7UVL5fKUL7pS23uDDSkJUECOPd4P0OtLnbxv3Cn2Nuath3jVqvh
Clo31ymOfQHVtn71xzSQBFrZEl9Vg7aKBZHPm5RfXLjDQ6tuU3m1Z51jkwQOB8jT
g4+acbEoBAM0aObbxd261yBT16EGls7rqEdpgsqlbmFIWIJTyRrj6qeeEdDgt/Dd
KYUA5NkB2Van09zlbATZtBP76pfmelF0
-----END CERTIFICATE-----
Generated at Thu Jul 3 23:01:09 2025 by rpki-client