Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/757305d9-2b1e-4783-945b-e7d6cc2e49a8/35cb70a2-637a-3679-a119-d82e6e3e45a2.roa
File:                     35cb70a2-637a-3679-a119-d82e6e3e45a2.roa (raw, json)
Hash identifier:          j7IvqW3yKk5YTHTDpSvOhnniPPboGbOuOdkUcM7D4o8=
Subject key identifier:   54:64:45:C2:C4:2B:54:B3:46:24:79:1A:6D:EC:47:41:B8:FC:7C:EF
Certificate issuer:       /CN=757305d9-2b1e-4783-945b-e7d6cc2e49a8
Certificate serial:       010D0C9F4328584EAD1C6A8810AA1A8D5B93B180
Authority key identifier: 53:C3:B8:6A:90:10:C7:27:BD:73:12:C9:5F:1C:B1:B7:D8:AC:0D:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/757305d9-2b1e-4783-945b-e7d6cc2e49a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/757305d9-2b1e-4783-945b-e7d6cc2e49a8/35cb70a2-637a-3679-a119-d82e6e3e45a2.roa
Signing time:             Fri 31 Jul 2026 01:00:11 +0000
ROA not before:           Fri 31 Jul 2026 01:00:11 +0000
ROA not after:            Thu 29 Oct 2026 01:00:11 +0000
asID:                     400941
IP address blocks:        2602:f66b:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/757305d9-2b1e-4783-945b-e7d6cc2e49a8/757305d9-2b1e-4783-945b-e7d6cc2e49a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/757305d9-2b1e-4783-945b-e7d6cc2e49a8/757305d9-2b1e-4783-945b-e7d6cc2e49a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/757305d9-2b1e-4783-945b-e7d6cc2e49a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 26 Aug 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ad:1c:6a:88:10:aa:1a:8d:5b:93:b1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=757305d9-2b1e-4783-945b-e7d6cc2e49a8
        Validity
            Not Before: Jul 31 01:00:11 2026 GMT
            Not After : Oct 29 01:00:11 2026 GMT
        Subject: CN=9bd43d83-2002-4fd8-b42c-eb46efefda8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:bc:d0:81:71:ef:eb:fb:99:49:2e:2e:f8:d1:
                    f1:fc:9b:d5:c9:d0:6c:95:89:a1:eb:fa:ed:f7:c1:
                    74:7f:6f:95:27:28:18:70:46:27:d6:2a:d6:e4:2c:
                    bb:44:a8:eb:53:3f:02:74:18:5b:7e:14:14:45:60:
                    28:73:43:e9:22:ac:08:36:22:e7:55:b6:72:dd:82:
                    21:6c:17:93:b9:cb:db:79:11:be:69:72:0c:53:04:
                    fd:96:af:47:03:1c:65:d5:5a:e7:48:da:dc:03:e3:
                    5c:e8:8a:af:45:f4:c2:7b:d8:18:2e:cb:16:98:b3:
                    0a:88:3a:66:19:72:af:d2:35:09:3e:ef:4e:43:72:
                    87:49:ad:32:70:b4:69:19:96:34:71:09:e9:b8:92:
                    14:41:9c:49:dc:6e:f2:6f:15:14:53:c2:46:81:70:
                    40:e8:80:90:6f:4c:5a:64:fd:ba:53:c9:67:0d:0b:
                    65:dc:9c:1d:4b:5c:75:9c:2a:57:45:ab:31:3b:96:
                    6d:10:4f:44:f0:4a:35:6b:01:b6:9c:b8:fa:56:5a:
                    84:18:0d:6c:95:f9:13:b1:7f:48:cf:3b:cc:be:36:
                    6f:25:67:30:78:dd:d1:2d:af:9b:01:6f:47:88:1f:
                    16:92:2d:c5:d7:b0:5b:1b:50:33:62:b7:75:3b:60:
                    6c:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:64:45:C2:C4:2B:54:B3:46:24:79:1A:6D:EC:47:41:B8:FC:7C:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/757305d9-2b1e-4783-945b-e7d6cc2e49a8/35cb70a2-637a-3679-a119-d82e6e3e45a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/757305d9-2b1e-4783-945b-e7d6cc2e49a8/757305d9-2b1e-4783-945b-e7d6cc2e49a8.crl

            X509v3 Authority Key Identifier:
                keyid:53:C3:B8:6A:90:10:C7:27:BD:73:12:C9:5F:1C:B1:B7:D8:AC:0D:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/757305d9-2b1e-4783-945b-e7d6cc2e49a8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f66b:1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:7d:cd:dc:b6:6f:03:2e:c4:14:f9:dd:6b:82:ee:e9:ae:5d:
         61:5a:e2:ba:0b:0c:de:da:96:b6:2a:00:c4:bb:35:38:0e:bf:
         af:4a:55:40:f0:13:db:cf:db:64:a2:8a:6e:9b:f1:74:03:03:
         01:5a:57:71:45:74:47:0e:ff:78:e1:5a:b0:dd:1e:d2:97:b4:
         47:33:6a:41:a5:87:63:ed:10:c4:95:27:37:fa:38:d2:05:4d:
         55:44:b8:f5:6c:81:da:47:6f:ce:85:78:95:f7:ab:f8:ef:60:
         14:36:01:6f:0e:cb:33:fa:a5:0c:e8:0e:b3:69:7f:99:fc:51:
         87:50:28:b9:de:b8:74:58:af:ac:e8:21:e0:2d:33:59:d3:6e:
         97:94:a3:2c:17:a4:10:fd:9b:c6:c7:1d:91:7d:2e:ed:74:74:
         d8:d9:db:64:69:d1:e0:89:0c:9b:ee:cc:d2:d2:db:b0:1c:87:
         53:c0:0b:5b:74:20:10:f9:ea:4b:c4:48:40:b3:f1:b2:57:91:
         9b:38:43:82:39:9c:32:53:b7:a8:db:dd:89:b3:93:77:e1:a4:
         69:43:29:39:98:e4:a5:e2:c0:67:a0:40:fe:9d:00:27:e3:ba:
         09:5e:4d:28:23:e6:44:2d:f3:7b:a3:c8:70:a8:03:5d:9d:cd:
         aa:a4:07:7d
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6tHGqIEKoajVuTsYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzU3MzA1ZDktMmIxZS00NzgzLTk0NWItZTdkNmNjMmU0
OWE4MB4XDTI2MDczMTAxMDAxMVoXDTI2MTAyOTAxMDAxMVowLzEtMCsGA1UEAxMk
OWJkNDNkODMtMjAwMi00ZmQ4LWI0MmMtZWI0NmVmZWZkYThhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrzQgXHv6/uZSS4u+NHx/JvVydBslYmh6/rt
98F0f2+VJygYcEYn1irW5Cy7RKjrUz8CdBhbfhQURWAoc0PpIqwINiLnVbZy3YIh
bBeTucvbeRG+aXIMUwT9lq9HAxxl1VrnSNrcA+Nc6IqvRfTCe9gYLssWmLMKiDpm
GXKv0jUJPu9OQ3KHSa0ycLRpGZY0cQnpuJIUQZxJ3G7ybxUUU8JGgXBA6ICQb0xa
ZP26U8lnDQtl3JwdS1x1nCpXRasxO5ZtEE9E8Eo1awG2nLj6VlqEGA1slfkTsX9I
zzvMvjZvJWcweN3RLa+bAW9HiB8Wki3F17BbG1AzYrd1O2BsRwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFFRkRcLEK1SzRiR5Gm3sR0G4/HzvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi83NTcz
MDVkOS0yYjFlLTQ3ODMtOTQ1Yi1lN2Q2Y2MyZTQ5YTgvMzVjYjcwYTItNjM3YS0z
Njc5LWExMTktZDgyZTZlM2U0NWEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNzU3MzA1ZDktMmIxZS00NzgzLTk0
NWItZTdkNmNjMmU0OWE4Lzc1NzMwNWQ5LTJiMWUtNDc4My05NDViLWU3ZDZjYzJl
NDlhOC5jcmwwHwYDVR0jBBgwFoAUU8O4apAQxye9cxLJXxyxt9isDXgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi83NTczMDVkOS0yYjFlLTQ3ODMtOTQ1Yi1lN2Q2
Y2MyZTQ5YTguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL2awAB
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADt9zdy2bwMuxBT53WuC7umuXWFa4roLDN7alrYqAMS7NTgOv69K
VUDwE9vP22Siim6b8XQDAwFaV3FFdEcO/3jhWrDdHtKXtEczakGlh2PtEMSVJzf6
ONIFTVVEuPVsgdpHb86FeJX3q/jvYBQ2AW8OyzP6pQzoDrNpf5n8UYdQKLneuHRY
r6zoIeAtM1nTbpeUoywXpBD9m8bHHZF9Lu10dNjZ22Rp0eCJDJvuzNLS27Ach1PA
C1t0IBD56kvESECz8bJXkZs4Q4I5nDJTt6jb3Ymzk3fhpGlDKTmY5KXiwGegQP6d
ACfjugleTSgj5kQt83ujyHCoA12dzaqkB30=
-----END CERTIFICATE-----
Generated at Tue Aug 25 17:06:30 2026 by rpki-client