Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/e60dcdad-e41a-33b5-9259-fdbeb18ca76e.roa
File:                     e60dcdad-e41a-33b5-9259-fdbeb18ca76e.roa (raw, json)
Hash identifier:          8iZ5NBRwnMCW9G9XOzYpiv5HCTDlxY9Y8nlOd3HdUo0=
Subject key identifier:   B1:4B:CE:4E:A9:34:18:94:07:09:74:BF:40:F7:F2:09:DC:05:D9:D4
Certificate issuer:       /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
Certificate serial:       010D0C9F4328584B48E1ACA9365105A50BE0DD80
Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/e60dcdad-e41a-33b5-9259-fdbeb18ca76e.roa
Signing time:             Tue 23 Sep 2025 01:00:33 +0000
ROA not before:           Tue 23 Sep 2025 01:00:33 +0000
ROA not after:            Mon 22 Dec 2025 02:00:33 +0000
asID:                     262287
IP address blocks:        2607:740:36::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:48:e1:ac:a9:36:51:05:a5:0b:e0:dd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
        Validity
            Not Before: Sep 23 01:00:33 2025 GMT
            Not After : Dec 22 02:00:33 2025 GMT
        Subject: CN=02049571-b611-46c2-8f77-99873ddf018f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:b3:2e:91:01:de:d2:cf:35:f4:2f:ed:a8:ed:
                    2d:f9:e9:a9:7a:cc:aa:9c:b7:8a:5f:64:b0:be:39:
                    3a:cf:1b:a5:36:c3:58:69:b0:c9:2d:13:f3:85:16:
                    9e:a3:b9:0f:ea:3f:3b:44:12:76:08:5b:4f:83:1b:
                    30:d1:fd:c7:8d:59:86:d6:42:f8:b9:07:4b:b0:70:
                    cd:77:ad:3e:b0:b4:de:6b:d4:15:cf:38:63:17:89:
                    d4:07:92:31:6c:f2:fc:a6:c3:47:d9:44:78:40:49:
                    2a:b7:ca:70:37:51:47:03:a3:d9:e9:fb:d0:2d:b3:
                    79:da:78:82:2a:86:b4:0e:53:7c:bb:8f:2c:ce:89:
                    fb:d6:52:24:58:a1:6f:95:35:7a:09:28:3a:23:dd:
                    b2:3e:76:20:f5:dd:8c:40:21:6c:1c:53:bd:17:68:
                    c2:93:c5:a7:8b:3b:0d:7d:96:bf:e5:7a:16:79:bb:
                    4b:ae:18:9b:11:aa:c3:9e:2d:4f:4f:f4:96:69:1a:
                    cd:39:d1:3d:64:02:73:b6:b0:c7:63:be:54:0a:98:
                    b0:bc:56:b1:2e:53:ea:52:a3:d2:7f:74:09:f0:e7:
                    8c:42:e5:28:d3:7c:fa:1c:10:26:40:66:f4:91:90:
                    6e:f3:9b:94:14:05:e3:19:27:ac:a1:fd:ca:bc:62:
                    59:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:4B:CE:4E:A9:34:18:94:07:09:74:BF:40:F7:F2:09:DC:05:D9:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/e60dcdad-e41a-33b5-9259-fdbeb18ca76e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl

            X509v3 Authority Key Identifier:
                keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:740:36::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:03:4c:29:ba:ee:38:ce:56:11:b6:34:22:cb:a0:10:7f:02:
         9c:6e:30:ea:f7:42:c2:3b:b5:bd:af:54:9e:77:9c:84:f7:90:
         17:95:31:54:38:74:e8:c5:b7:67:d5:e5:af:e0:bf:b5:2b:22:
         ea:8d:67:5b:2c:f3:b5:a1:15:42:6d:9f:71:87:cb:5c:a8:d4:
         65:77:1f:e9:4e:65:a0:63:9c:7a:69:a4:6c:69:6e:93:08:64:
         6c:eb:f8:f4:45:03:24:6c:de:65:84:88:08:86:d7:05:f2:be:
         38:ba:e9:55:a4:80:d7:16:9a:59:74:6e:83:13:d3:18:9f:26:
         06:97:0b:cf:10:fe:87:09:02:2b:fa:71:7c:72:50:05:86:da:
         42:cb:a6:fe:88:a0:a1:c4:ee:4e:43:f0:5c:91:a5:e4:a5:65:
         f9:3b:af:0e:83:19:e3:48:56:51:de:58:5c:26:21:38:ae:d2:
         31:81:6d:76:9a:8c:17:25:ef:5c:9a:ab:2c:d3:84:ed:64:33:
         ea:47:a2:f7:9d:95:05:33:00:4a:27:38:51:d4:51:9e:5e:a2:
         40:72:13:91:8b:85:2f:65:19:99:8c:da:f9:8e:ec:23:8d:76:
         f2:85:e7:fc:64:50:d0:04:68:d3:e8:ae:c6:ff:3b:29:19:26:
         02:85:94:79
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtI4aypNlEFpQvg3YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3
ZDNkMB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk
MDIwNDk1NzEtYjYxMS00NmMyLThmNzctOTk4NzNkZGYwMThmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmLMukQHe0s819C/tqO0t+empesyqnLeKX2Sw
vjk6zxulNsNYabDJLRPzhRaeo7kP6j87RBJ2CFtPgxsw0f3HjVmG1kL4uQdLsHDN
d60+sLTea9QVzzhjF4nUB5IxbPL8psNH2UR4QEkqt8pwN1FHA6PZ6fvQLbN52niC
Koa0DlN8u48szon71lIkWKFvlTV6CSg6I92yPnYg9d2MQCFsHFO9F2jCk8WnizsN
fZa/5XoWebtLrhibEarDni1PT/SWaRrNOdE9ZAJztrDHY75UCpiwvFaxLlPqUqPS
f3QJ8OeMQuUo03z6HBAmQGb0kZBu85uUFAXjGSesof3KvGJZQwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFLFLzk6pNBiUBwl0v0D38gncBdnUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5
OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvZTYwZGNkYWQtZTQxYS0z
M2I1LTkyNTktZmRiZWIxOGNhNzZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4
NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz
N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5
NGI0MzdkM2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgcHQAA2
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGsDTCm67jjOVhG2NCLLoBB/ApxuMOr3QsI7tb2vVJ53nIT3kBeV
MVQ4dOjFt2fV5a/gv7UrIuqNZ1ss87WhFUJtn3GHy1yo1GV3H+lOZaBjnHpppGxp
bpMIZGzr+PRFAyRs3mWEiAiG1wXyvji66VWkgNcWmll0boMT0xifJgaXC88Q/ocJ
Aiv6cXxyUAWG2kLLpv6IoKHE7k5D8FyRpeSlZfk7rw6DGeNIVlHeWFwmITiu0jGB
bXaajBcl71yaqyzThO1kM+pHovedlQUzAEonOFHUUZ5eokByE5GLhS9lGZmM2vmO
7CONdvKF5/xkUNAEaNPorsb/OykZJgKFlHk=
-----END CERTIFICATE-----
Generated at Sat Oct 11 18:38:02 2025 by rpki-client