Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e52220-fa56-4913-b008-c1121580f510/81659d32-f50b-3864-b984-19757f28c063.roa
File:                     81659d32-f50b-3864-b984-19757f28c063.roa (raw, json)
Hash identifier:          QvvMPZ5bsRIAla506fe4xaEdAoujqwib5o+c/JjE7KI=
Subject key identifier:   52:02:CA:A3:B0:78:61:D7:2C:BD:01:63:1D:20:52:F8:F2:1C:EF:BF
Certificate issuer:       /CN=53e52220-fa56-4913-b008-c1121580f510
Certificate serial:       010D0C9F4328584EAE81BA10F2C561F1AA4A3980
Authority key identifier: B6:C8:08:6B:80:F5:32:00:56:7A:31:3B:7C:58:72:AA:44:0B:B8:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e52220-fa56-4913-b008-c1121580f510.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e52220-fa56-4913-b008-c1121580f510/81659d32-f50b-3864-b984-19757f28c063.roa
Signing time:             Fri 31 Jul 2026 13:00:12 +0000
ROA not before:           Fri 31 Jul 2026 13:00:12 +0000
ROA not after:            Thu 29 Oct 2026 13:00:12 +0000
asID:                     12684
IP address blocks:        66.133.35.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e52220-fa56-4913-b008-c1121580f510/53e52220-fa56-4913-b008-c1121580f510.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e52220-fa56-4913-b008-c1121580f510/53e52220-fa56-4913-b008-c1121580f510.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e52220-fa56-4913-b008-c1121580f510.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ae:81:ba:10:f2:c5:61:f1:aa:4a:39:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53e52220-fa56-4913-b008-c1121580f510
        Validity
            Not Before: Jul 31 13:00:12 2026 GMT
            Not After : Oct 29 13:00:12 2026 GMT
        Subject: CN=b79b1b9c-aa3f-447c-8afb-cea3d8b14c9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:f1:a0:0c:c9:d6:b7:cd:34:92:8b:cf:c5:48:
                    6a:e1:43:c3:a9:a9:db:14:07:b2:1c:11:a0:ec:e8:
                    5b:4b:8f:b1:a9:c4:65:59:ae:f9:4a:8f:79:3d:eb:
                    88:7d:de:4e:e7:ca:c6:17:90:f1:04:3e:09:0a:51:
                    7d:a9:57:c1:25:86:43:0f:eb:1d:31:dc:33:7b:aa:
                    c2:37:19:09:d4:c1:96:b8:5f:b6:f8:c0:0c:be:28:
                    00:b5:79:40:fa:18:b5:2b:38:ab:57:9c:58:54:8b:
                    77:13:79:e5:27:b7:5e:3a:a8:0d:d9:05:3b:2c:8d:
                    c2:07:31:b8:c0:98:57:b8:5a:db:6b:d3:f7:b7:d4:
                    e5:a1:2d:58:82:28:b4:6f:99:47:d0:4a:82:f4:70:
                    d1:2d:da:57:ac:d9:90:0f:43:24:a0:4f:c5:ab:6a:
                    b6:b4:da:c0:f0:7f:dd:6b:63:49:7b:65:b7:57:71:
                    41:ca:e6:2a:a6:00:e3:df:33:a4:61:5a:3b:dc:a1:
                    c8:82:15:1c:2a:71:61:2d:5d:50:31:a7:38:22:61:
                    6a:50:b1:a9:b2:f4:bb:e1:e4:99:4b:ef:ff:f0:1f:
                    7e:c8:17:23:3f:98:a4:e2:d4:fb:84:8f:e3:f6:6e:
                    3e:13:e1:75:94:13:c2:be:b3:ba:ce:e8:aa:f2:90:
                    00:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:02:CA:A3:B0:78:61:D7:2C:BD:01:63:1D:20:52:F8:F2:1C:EF:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e52220-fa56-4913-b008-c1121580f510/81659d32-f50b-3864-b984-19757f28c063.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e52220-fa56-4913-b008-c1121580f510/53e52220-fa56-4913-b008-c1121580f510.crl

            X509v3 Authority Key Identifier:
                keyid:B6:C8:08:6B:80:F5:32:00:56:7A:31:3B:7C:58:72:AA:44:0B:B8:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e52220-fa56-4913-b008-c1121580f510.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.133.35.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:6e:bb:e1:27:9b:9d:11:e9:b3:15:89:4a:68:85:35:ce:49:
         70:5b:03:3d:93:65:98:c0:ed:cb:97:b7:b9:bb:89:52:cf:15:
         50:d4:57:3d:47:cf:84:17:54:0c:19:d0:ad:c6:6d:b8:b3:a9:
         f0:65:4e:6f:5e:44:b4:46:dd:fb:50:25:eb:af:8e:5a:29:f7:
         82:c3:da:8f:bf:34:f4:d9:d2:ee:71:bf:c2:5b:ed:cd:67:99:
         46:dc:cb:12:2a:03:f6:c3:3d:31:e2:f2:ca:e0:64:fe:4b:20:
         34:fa:bb:4d:bf:e1:5f:dc:b5:d8:9e:67:77:29:59:d8:ac:2f:
         37:fd:7e:14:6c:fb:9c:e8:ba:85:b9:ea:e7:ed:2e:3b:01:64:
         8d:35:61:34:f2:c8:ca:4f:09:3c:30:b3:5d:16:ff:cd:c5:aa:
         43:05:e2:5c:3b:6c:ab:2d:ca:b5:2f:a2:3b:51:7a:ae:95:25:
         a0:92:99:8d:e9:da:a4:ee:4f:44:26:88:a4:11:3d:ae:4d:4f:
         19:ac:e7:7f:08:9a:98:64:ba:31:dd:4e:c1:60:19:c5:c7:fb:
         2a:88:d9:bd:93:b7:f8:ea:26:2f:1e:a2:f0:f7:b4:b2:36:94:
         91:84:bb:37:2a:44:95:c9:bb:0f:b5:b7:a3:14:6d:a7:17:e4:
         bc:2c:98:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 07:17:33 2026 by rpki-client