Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66/935393a9-cab8-334f-afd3-0eaf3ffcb44c.roa
File:                     935393a9-cab8-334f-afd3-0eaf3ffcb44c.roa (raw, json)
Hash identifier:          deVqYnH/awaikP7dxCD9Ds7Y2CCmKvKK5giCE4AeTKw=
Subject key identifier:   A2:50:54:82:FE:10:72:32:D6:25:BC:B1:33:60:91:89:94:FA:CF:95
Certificate issuer:       /CN=256d2a2e-9ac7-4d29-bd15-75874d49df66
Certificate serial:       010D0C9F4328584EA79413BCF783F7706D0CE760
Authority key identifier: E7:4C:09:96:E8:84:50:C0:CF:D5:86:D5:46:2F:70:EE:D2:57:95:0E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66/935393a9-cab8-334f-afd3-0eaf3ffcb44c.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     33000
IP address blocks:        2605:fdc0::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66/256d2a2e-9ac7-4d29-bd15-75874d49df66.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66/256d2a2e-9ac7-4d29-bd15-75874d49df66.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:94:13:bc:f7:83:f7:70:6d:0c:e7:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=256d2a2e-9ac7-4d29-bd15-75874d49df66
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=256daef7-6755-4e57-b46f-9e1d7d073f87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:de:12:28:13:4e:f7:43:6e:43:d7:49:81:b2:
                    17:65:8f:94:4c:13:34:75:ce:51:04:e5:7f:e5:36:
                    3f:2b:4b:40:b3:cf:85:29:83:a0:88:9b:21:d9:af:
                    2e:51:e6:28:43:b9:25:34:31:3e:3c:3a:37:3d:95:
                    47:95:7b:c2:39:88:70:8a:53:c5:b6:46:73:1e:bf:
                    d6:fc:b5:2e:b1:45:a5:dd:45:f4:1d:82:0f:a8:f0:
                    7e:19:c3:e4:1b:87:a6:97:2c:f8:02:40:fc:d9:18:
                    f3:98:40:25:d6:82:f1:49:51:45:70:57:06:88:d6:
                    db:3b:f9:e1:5b:ec:e1:24:a7:94:c7:9d:11:2b:8e:
                    52:46:14:75:c3:5b:22:7d:a5:58:af:65:19:92:e6:
                    67:5a:fe:9c:17:5b:64:96:e8:d2:75:03:42:0c:5d:
                    6e:85:9c:53:80:b6:1a:8f:92:04:a2:c7:97:ad:73:
                    b3:9d:da:cc:3f:4a:d7:a2:cb:48:25:91:c2:78:3a:
                    e8:57:c0:10:df:2c:d6:8a:93:16:82:72:f8:5f:75:
                    cc:2b:a3:ab:cd:cc:1c:c3:84:7a:28:3b:a4:fe:a3:
                    72:ce:cf:6b:e4:12:7d:10:4c:59:34:fb:3a:a0:34:
                    36:91:4c:84:c7:4c:58:09:03:13:34:1c:85:e0:e3:
                    86:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:50:54:82:FE:10:72:32:D6:25:BC:B1:33:60:91:89:94:FA:CF:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66/935393a9-cab8-334f-afd3-0eaf3ffcb44c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66/256d2a2e-9ac7-4d29-bd15-75874d49df66.crl

            X509v3 Authority Key Identifier:
                keyid:E7:4C:09:96:E8:84:50:C0:CF:D5:86:D5:46:2F:70:EE:D2:57:95:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:fdc0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:d1:5e:9f:71:8d:33:1a:08:26:03:4a:7c:ec:27:fd:29:88:
         5a:eb:a1:82:dc:0f:8b:36:ce:90:2a:34:5b:85:39:94:76:e8:
         8c:27:11:a6:71:9e:e0:65:11:46:ee:4c:67:a1:b5:4f:bd:70:
         96:64:9d:3d:dd:8b:a2:e4:f9:1c:60:8d:af:59:be:e4:f7:3a:
         ae:3b:36:f2:1b:d8:2a:ae:09:2a:1e:2c:ed:70:5f:73:1e:a3:
         53:d9:81:97:1f:4d:65:57:67:8a:f1:f7:56:86:90:3a:60:a6:
         29:c7:69:99:75:f1:3d:dd:95:99:8f:c0:cf:ae:37:e5:36:03:
         51:bd:62:e4:a9:e9:69:90:79:b8:e7:73:3c:40:84:00:94:72:
         32:9b:02:e4:56:f0:8c:4a:66:63:95:0b:a2:2e:1c:f1:2d:9c:
         d2:2c:55:9d:0e:37:4c:46:26:4a:a7:64:76:15:3f:60:9b:fd:
         8b:e3:2b:a2:dc:b7:30:d2:ea:be:cf:ce:15:58:d8:aa:72:20:
         b6:fc:a7:61:f3:5c:21:4d:8f:14:c8:e9:68:01:a0:e9:0e:85:
         91:7d:ef:7e:e1:8e:f7:59:42:cc:2a:51:86:03:d6:68:2d:a8:
         b1:24:41:3f:6b:cb:f1:cf:d7:91:88:d7:63:85:5f:cf:3b:d2:
         5f:9d:f6:66
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE6nlBO894P3cG0M52AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjU2ZDJhMmUtOWFjNy00ZDI5LWJkMTUtNzU4NzRkNDlk
ZjY2MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
MjU2ZGFlZjctNjc1NS00ZTU3LWI0NmYtOWUxZDdkMDczZjg3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxt4SKBNO90NuQ9dJgbIXZY+UTBM0dc5RBOV/
5TY/K0tAs8+FKYOgiJsh2a8uUeYoQ7klNDE+PDo3PZVHlXvCOYhwilPFtkZzHr/W
/LUusUWl3UX0HYIPqPB+GcPkG4emlyz4AkD82RjzmEAl1oLxSVFFcFcGiNbbO/nh
W+zhJKeUx50RK45SRhR1w1sifaVYr2UZkuZnWv6cF1tklujSdQNCDF1uhZxTgLYa
j5IEoseXrXOzndrMP0rXostIJZHCeDroV8AQ3yzWipMWgnL4X3XMK6Orzcwcw4R6
KDuk/qNyzs9r5BJ9EExZNPs6oDQ2kUyEx0xYCQMTNByF4OOGTwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFKJQVIL+EHIy1iW8sTNgkYmU+s+VMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yNTZk
MmEyZS05YWM3LTRkMjktYmQxNS03NTg3NGQ0OWRmNjYvOTM1MzkzYTktY2FiOC0z
MzRmLWFmZDMtMGVhZjNmZmNiNDRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMjU2ZDJhMmUtOWFjNy00ZDI5LWJk
MTUtNzU4NzRkNDlkZjY2LzI1NmQyYTJlLTlhYzctNGQyOS1iZDE1LTc1ODc0ZDQ5
ZGY2Ni5jcmwwHwYDVR0jBBgwFoAU50wJluiEUMDP1YbVRi9w7tJXlQ4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS8yNTZkMmEyZS05YWM3LTRkMjktYmQxNS03NTg3
NGQ0OWRmNjYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgX9wDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBH0V6fcY0zGggmA0p87Cf9KYha66GC3A+LNs6QKjRbhTmUduiMJxGm
cZ7gZRFG7kxnobVPvXCWZJ093Yui5PkcYI2vWb7k9zquOzbyG9gqrgkqHiztcF9z
HqNT2YGXH01lV2eK8fdWhpA6YKYpx2mZdfE93ZWZj8DPrjflNgNRvWLkqelpkHm4
53M8QIQAlHIymwLkVvCMSmZjlQuiLhzxLZzSLFWdDjdMRiZKp2R2FT9gm/2L4yui
3Lcw0uq+z84VWNiqciC2/Kdh81whTY8UyOloAaDpDoWRfe9+4Y73WULMKlGGA9Zo
LaixJEE/a8vxz9eRiNdjhV/PO9JfnfZm
-----END CERTIFICATE-----
Generated at Thu Aug 20 00:06:22 2026 by rpki-client