Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/cec05261-0f78-3265-830a-98a87b1c4a62.roa
File:                     cec05261-0f78-3265-830a-98a87b1c4a62.roa (raw, json)
Hash identifier:          6F8P8hu3M3hpJgvhJ2GluRkBb75IPVT+rWjIjhzYkQs=
Subject key identifier:   FC:0C:5E:63:5C:BB:5A:13:B8:29:44:E6:0D:22:14:35:2D:1E:53:A6
Certificate issuer:       /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
Certificate serial:       010D0C9F4328584EA78773CF534DFFD1BA6DABC0
Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/cec05261-0f78-3265-830a-98a87b1c4a62.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     27602
IP address blocks:        204.48.35.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Sep 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:73:cf:53:4d:ff:d1:ba:6d:ab:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=211083ee-b061-46f7-b27a-fa2802025891
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:06:c4:2a:77:17:1f:eb:d7:8d:dc:a9:67:0d:
                    2b:b3:52:69:a2:2e:cb:fe:88:7c:59:08:d3:f5:af:
                    2c:d7:b0:12:a0:90:50:e3:84:43:e7:f7:f6:fa:c9:
                    98:06:7d:b6:71:2c:22:db:a1:c0:5b:99:c6:09:b5:
                    50:2c:54:60:b3:a6:31:0c:f2:c1:4e:d8:40:0c:6e:
                    3b:86:eb:54:0c:a0:b3:3e:36:24:64:75:d7:e5:6d:
                    58:65:bb:6c:6d:19:5e:eb:cd:55:33:f0:48:a7:ec:
                    51:01:f1:6b:ec:8f:5e:43:ea:2c:81:8c:9e:6e:65:
                    d3:98:07:d5:10:91:de:1c:48:10:83:eb:e2:9b:80:
                    de:d6:61:c6:51:a1:e6:3f:1c:8c:e9:ef:ff:88:2b:
                    dc:5b:4e:8b:1f:e9:0d:d8:bb:de:c2:1e:f8:30:21:
                    84:3c:c7:a8:1a:b9:3a:48:74:cd:74:c4:12:16:27:
                    7f:ac:74:2e:7b:84:24:2f:50:f3:4b:82:07:4d:77:
                    c7:51:02:41:a7:f3:03:74:44:25:19:0f:d2:86:12:
                    d9:fd:43:91:f9:c2:d1:da:cc:5b:29:0e:47:ed:7f:
                    b5:e8:68:74:d8:6f:3a:78:a7:d0:5e:1b:5b:bd:93:
                    9d:b0:d0:80:ad:b0:71:7d:fb:35:b4:a8:11:a4:d2:
                    24:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:0C:5E:63:5C:BB:5A:13:B8:29:44:E6:0D:22:14:35:2D:1E:53:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/cec05261-0f78-3265-830a-98a87b1c4a62.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl

            X509v3 Authority Key Identifier:
                keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.48.35.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:34:fd:9f:43:f6:64:9e:44:d3:4d:31:86:60:10:89:89:cc:
         0d:de:4c:91:1d:ce:27:6f:b5:ae:97:5f:54:d2:3b:88:c0:37:
         ec:b8:d6:88:96:b6:4a:73:c1:c4:63:7b:74:72:a5:74:bd:8e:
         f2:a2:bf:1e:96:33:b2:c4:51:8a:20:07:ea:f9:a8:fd:67:c0:
         66:69:83:73:c0:54:21:d7:26:a2:09:a2:04:41:27:20:94:5e:
         f6:23:e7:bd:04:61:f5:4b:ea:d6:ae:60:04:4f:8f:73:65:59:
         ed:a8:32:f9:44:f5:45:65:2f:88:3a:dc:c8:71:5d:c8:73:d7:
         84:85:8f:54:ec:a1:1a:05:4d:3f:d9:8f:94:25:ee:64:15:50:
         e4:38:e6:13:75:d1:3b:a1:4a:da:74:b5:ab:6c:d9:42:5c:6e:
         09:12:d1:13:79:a2:1b:0a:d4:95:4a:50:4e:e5:e2:c8:a8:25:
         df:7a:94:0a:01:e7:fe:46:52:61:6f:bd:62:4a:f8:00:50:b5:
         53:93:92:e1:eb:41:43:c6:1b:4c:19:be:58:c6:97:18:10:31:
         73:d5:7c:61:45:32:56:b5:cb:c8:04:d7:cf:fd:14:dc:5c:2c:
         17:c1:48:b2:cb:b9:c2:3f:12:1b:0b:9e:98:a2:0c:37:19:ee:
         ae:6c:66:24
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nh3PPU03/0bptq8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3
ZDNkMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
MjExMDgzZWUtYjA2MS00NmY3LWIyN2EtZmEyODAyMDI1ODkxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwbEKncXH+vXjdypZw0rs1Jpoi7L/oh8WQjT
9a8s17ASoJBQ44RD5/f2+smYBn22cSwi26HAW5nGCbVQLFRgs6YxDPLBTthADG47
hutUDKCzPjYkZHXX5W1YZbtsbRle681VM/BIp+xRAfFr7I9eQ+osgYyebmXTmAfV
EJHeHEgQg+vim4De1mHGUaHmPxyM6e//iCvcW06LH+kN2Lvewh74MCGEPMeoGrk6
SHTNdMQSFid/rHQue4QkL1DzS4IHTXfHUQJBp/MDdEQlGQ/ShhLZ/UOR+cLR2sxb
KQ5H7X+16Gh02G86eKfQXhtbvZOdsNCArbBxffs1tKgRpNIkXQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPwMXmNcu1oTuClE5g0iFDUtHlOmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5
OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvY2VjMDUyNjEtMGY3OC0z
MjY1LTgzMGEtOThhODdiMWM0YTYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4
NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz
N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5
NGI0MzdkM2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzDAjMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB40/Z9D9mSeRNNNMYZgEImJzA3eTJEdzidvta6XX1TSO4jAN+y41oiW
tkpzwcRje3RypXS9jvKivx6WM7LEUYogB+r5qP1nwGZpg3PAVCHXJqIJogRBJyCU
XvYj570EYfVL6tauYARPj3NlWe2oMvlE9UVlL4g63MhxXchz14SFj1TsoRoFTT/Z
j5Ql7mQVUOQ45hN10TuhStp0tats2UJcbgkS0RN5ohsK1JVKUE7l4sioJd96lAoB
5/5GUmFvvWJK+ABQtVOTkuHrQUPGG0wZvljGlxgQMXPVfGFFMla1y8gE18/9FNxc
LBfBSLLLucI/EhsLnpiiDDcZ7q5sZiQ=
-----END CERTIFICATE-----
Generated at Tue Sep 1 03:56:03 2026 by rpki-client