Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/520c8bf1-7f7b-32e8-a201-2a5aa8d6fff7.roa
File:                     520c8bf1-7f7b-32e8-a201-2a5aa8d6fff7.roa (raw, json)
Hash identifier:          2zZWeT0y2p6AATiGVnFl0IBHWWNKyN5MyM6cu8/MVvo=
Subject key identifier:   30:03:2C:8D:A0:E0:AF:CF:34:AD:D9:52:F8:60:40:55:C9:0D:0C:AE
Certificate issuer:       /CN=bc6884d6-b11e-4280-9c4c-8177287d9869
Certificate serial:       010D0C9F4328584EA7879DC96A33114DE3C1E080
Authority key identifier: 15:C8:EE:BC:17:5F:6B:10:C3:DC:7A:CF:57:D4:D1:F3:90:0F:0E:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/520c8bf1-7f7b-32e8-a201-2a5aa8d6fff7.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     398324
IP address blocks:        206.168.35.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/bc6884d6-b11e-4280-9c4c-8177287d9869.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/bc6884d6-b11e-4280-9c4c-8177287d9869.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Sep 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:9d:c9:6a:33:11:4d:e3:c1:e0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc6884d6-b11e-4280-9c4c-8177287d9869
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=3b6d376c-4e95-46c7-8b26-0ef36d94465f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:62:3a:95:bd:df:e6:2a:60:78:c8:c6:df:63:
                    f9:21:ff:b1:c4:51:4e:2e:6f:5a:79:45:93:0f:51:
                    61:08:43:8a:d1:e8:dc:5e:d7:cc:72:47:63:49:20:
                    b2:6d:fa:58:3b:f7:c3:f2:4d:ff:68:fd:41:0a:b3:
                    10:24:7d:e6:b8:d2:d0:cb:a8:d7:95:b8:f8:8d:91:
                    89:14:52:d9:d3:b8:bd:65:d2:1f:7d:0e:62:a8:1e:
                    7f:4c:a2:46:18:23:03:e4:aa:a4:de:85:d4:96:18:
                    a7:bb:b0:5b:0d:ee:1c:0c:58:10:ff:74:41:23:dc:
                    bf:ae:a8:7b:1d:f2:a5:d9:72:79:68:e5:00:82:1e:
                    a6:9b:b9:d8:ce:31:95:e6:a3:9a:ee:a1:d1:f0:6a:
                    07:cf:98:88:a3:22:d1:79:cf:3b:e4:6a:3c:87:ca:
                    0a:90:14:41:1e:18:65:97:27:00:45:1f:2e:bc:5e:
                    66:0b:fd:5d:79:e4:15:6f:61:e7:29:03:69:f6:83:
                    2f:25:1f:1a:d1:62:59:39:ea:28:08:fe:8c:2e:d8:
                    4f:53:9c:70:20:44:c3:f5:bc:4d:81:d3:6f:5b:8a:
                    56:04:c4:e2:f2:b6:ce:ad:2d:07:7f:c9:24:2b:eb:
                    6a:42:aa:14:48:4b:7c:1b:39:02:c8:7a:f6:d2:e1:
                    9d:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:03:2C:8D:A0:E0:AF:CF:34:AD:D9:52:F8:60:40:55:C9:0D:0C:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/520c8bf1-7f7b-32e8-a201-2a5aa8d6fff7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/bc6884d6-b11e-4280-9c4c-8177287d9869.crl

            X509v3 Authority Key Identifier:
                keyid:15:C8:EE:BC:17:5F:6B:10:C3:DC:7A:CF:57:D4:D1:F3:90:0F:0E:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.168.35.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:51:a5:4a:41:f7:cd:8c:ac:63:92:b5:b7:08:45:ad:13:de:
         ae:21:45:cb:1e:9e:af:7d:ca:e3:2b:98:bf:d0:1b:21:b0:9b:
         c5:c9:1e:0c:25:dd:04:88:97:42:2c:43:0e:d6:a7:8f:da:15:
         5f:08:d5:24:ab:c9:86:c5:32:94:17:73:55:87:d2:52:12:e8:
         fc:f0:0b:f3:4c:e6:af:d2:f7:66:9e:3f:97:63:ad:a5:cc:3a:
         32:ad:99:5e:fd:9b:d4:59:19:c3:fd:a1:0b:0a:ec:28:67:45:
         78:4d:db:39:37:64:5e:ae:c9:05:1b:86:9a:e8:9d:ad:6b:50:
         a3:94:b8:ce:5e:c2:54:b7:18:f4:10:91:7b:6c:71:75:52:46:
         16:43:3b:b7:4a:cf:ae:31:9c:08:59:4b:52:97:2a:cb:eb:64:
         4f:39:99:8f:a8:a4:f4:7a:fe:68:af:7b:f8:b9:f3:43:fc:8d:
         7c:d4:c3:9b:1b:0d:b3:0a:e8:1d:a6:d0:17:97:93:7b:dc:53:
         65:f1:22:83:27:9d:58:7f:70:30:2f:80:23:1d:d4:b6:89:72:
         0f:12:5c:93:3a:65:09:21:bf:46:c4:c9:27:4e:2f:8e:11:ea:
         a8:11:cc:a5:86:88:94:df:62:42:f6:4a:56:81:92:0f:f2:b4:
         6a:f5:7c:90
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nh53JajMRTePB4IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmM2ODg0ZDYtYjExZS00MjgwLTljNGMtODE3NzI4N2Q5
ODY5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
M2I2ZDM3NmMtNGU5NS00NmM3LThiMjYtMGVmMzZkOTQ0NjVmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi2I6lb3f5ipgeMjG32P5If+xxFFOLm9aeUWT
D1FhCEOK0ejcXtfMckdjSSCybfpYO/fD8k3/aP1BCrMQJH3muNLQy6jXlbj4jZGJ
FFLZ07i9ZdIffQ5iqB5/TKJGGCMD5Kqk3oXUlhinu7BbDe4cDFgQ/3RBI9y/rqh7
HfKl2XJ5aOUAgh6mm7nYzjGV5qOa7qHR8GoHz5iIoyLRec875Go8h8oKkBRBHhhl
lycARR8uvF5mC/1deeQVb2HnKQNp9oMvJR8a0WJZOeooCP6MLthPU5xwIETD9bxN
gdNvW4pWBMTi8rbOrS0Hf8kkK+tqQqoUSEt8GzkCyHr20uGdGwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDADLI2g4K/PNK3ZUvhgQFXJDQyuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9iYzY4
ODRkNi1iMTFlLTQyODAtOWM0Yy04MTc3Mjg3ZDk4NjkvNTIwYzhiZjEtN2Y3Yi0z
MmU4LWEyMDEtMmE1YWE4ZDZmZmY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYmM2ODg0ZDYtYjExZS00MjgwLTlj
NGMtODE3NzI4N2Q5ODY5L2JjNjg4NGQ2LWIxMWUtNDI4MC05YzRjLTgxNzcyODdk
OTg2OS5jcmwwHwYDVR0jBBgwFoAUFcjuvBdfaxDD3HrPV9TR85APDocwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9iYzY4ODRkNi1iMTFlLTQyODAtOWM0Yy04MTc3
Mjg3ZDk4NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzqgjMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGtRpUpB982MrGOStbcIRa0T3q4hRcsenq99yuMrmL/QGyGwm8XJHgwl
3QSIl0IsQw7Wp4/aFV8I1SSryYbFMpQXc1WH0lIS6PzwC/NM5q/S92aeP5djraXM
OjKtmV79m9RZGcP9oQsK7ChnRXhN2zk3ZF6uyQUbhprona1rUKOUuM5ewlS3GPQQ
kXtscXVSRhZDO7dKz64xnAhZS1KXKsvrZE85mY+opPR6/mive/i580P8jXzUw5sb
DbMK6B2m0BeXk3vcU2XxIoMnnVh/cDAvgCMd1LaJcg8SXJM6ZQkhv0bEySdOL44R
6qgRzKWGiJTfYkL2SlaBkg/ytGr1fJA=
-----END CERTIFICATE-----
Generated at Sat Sep 12 09:43:50 2026 by rpki-client