Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/35a6c984-7199-33e0-aebc-4baa9ef6f0da.roa
File:                     35a6c984-7199-33e0-aebc-4baa9ef6f0da.roa (raw, json)
Hash identifier:          NP/1Co2Mf+d3uU5dIjKrafU0use9PnaTIG6tPW3Bjz8=
Subject key identifier:   14:06:AF:6A:42:40:59:A2:53:4D:DA:76:F8:45:6D:03:54:A3:20:17
Certificate issuer:       /CN=65dae2a0-0cb7-46e8-ae17-abeb06007e1a
Certificate serial:       010D0C9F4328584EA788CFF516861A982FEB5380
Authority key identifier: 1A:49:9D:8B:77:A3:3A:DF:1F:CD:4E:BA:51:CC:1A:A3:FA:A3:F6:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/35a6c984-7199-33e0-aebc-4baa9ef6f0da.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     396356
IP address blocks:        2607:6b80:6c::/48 maxlen: 48
                          2607:6b80:6d::/48 maxlen: 48
                          2607:6b80:6e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 13 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:cf:f5:16:86:1a:98:2f:eb:53:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65dae2a0-0cb7-46e8-ae17-abeb06007e1a
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=1b873662-2c98-4372-8bd4-26fd50162065
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:e7:19:5e:9d:58:9e:9a:63:e3:24:08:98:89:
                    99:0b:3a:f6:df:ec:62:98:9f:d4:20:2b:4e:59:fb:
                    d8:2b:ce:41:bc:3d:14:66:31:70:c9:33:99:44:17:
                    e5:77:79:dc:0f:1f:49:15:ee:45:ac:02:92:e3:1c:
                    4f:d1:7e:10:34:f5:9a:5e:b7:12:f6:7b:0a:90:69:
                    b3:e0:c1:8c:e9:b9:32:85:23:bb:0c:f5:30:39:3b:
                    3c:6c:8b:a3:84:d8:ad:27:4e:ab:26:14:5d:06:56:
                    63:5c:e9:70:57:b2:1e:fe:0c:0f:f7:e3:53:4f:f0:
                    94:7a:8a:cf:d8:f7:ea:12:6c:c9:7e:18:e0:a1:5a:
                    38:00:cb:2f:0c:0e:0f:e9:51:4a:81:8a:df:ae:3a:
                    30:27:6c:2f:04:fe:fa:37:d3:cc:7d:a8:50:cb:7f:
                    68:07:c1:00:79:af:c3:5f:05:2f:f0:1b:47:a4:da:
                    6f:0e:13:6c:df:c3:42:89:6a:db:9b:37:fe:53:c0:
                    17:3e:82:a2:dc:b7:d0:06:88:de:69:22:8c:c5:73:
                    5b:54:15:a3:60:66:3e:00:d6:7b:1b:81:a2:33:c6:
                    5b:87:be:fd:24:58:e2:19:9a:47:cc:97:27:19:70:
                    c4:75:60:3b:34:b8:90:4f:8d:7c:e4:1b:55:8f:89:
                    c4:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:06:AF:6A:42:40:59:A2:53:4D:DA:76:F8:45:6D:03:54:A3:20:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/35a6c984-7199-33e0-aebc-4baa9ef6f0da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.crl

            X509v3 Authority Key Identifier:
                keyid:1A:49:9D:8B:77:A3:3A:DF:1F:CD:4E:BA:51:CC:1A:A3:FA:A3:F6:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:6b80:6c::-2607:6b80:6e:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bb:31:1a:c8:ec:21:d4:72:4c:3a:4d:a7:4e:68:01:e5:7f:62:
         0c:af:d3:75:45:1c:5d:8b:f9:b9:3a:0b:6b:31:24:2b:b0:b3:
         b3:2b:cb:d6:b1:d0:db:2d:fd:b4:33:bd:7c:d3:57:8e:74:af:
         2b:cf:53:9d:96:91:82:8b:85:58:fd:b9:d7:98:5a:20:3a:7e:
         34:54:c8:85:38:76:e0:e7:7e:5f:c2:3f:bb:f1:7a:a5:7e:aa:
         e6:53:6b:bf:0f:fe:a0:04:4c:88:25:41:16:72:55:a0:66:5e:
         97:c0:0d:d0:e8:45:6a:fb:4b:9d:7f:a3:8c:1a:e3:71:d8:95:
         47:e2:a7:e4:c0:ac:02:19:7f:c2:5b:cb:17:2a:b2:91:e6:89:
         95:4d:4e:db:7b:df:08:28:16:4a:49:05:cf:25:82:51:6e:93:
         bb:12:d8:16:82:cd:83:d2:60:0b:fb:ab:bb:de:83:b8:33:d3:
         5c:81:0d:b2:92:9d:bd:d7:7f:e9:2b:ba:ea:81:89:42:3a:b5:
         7a:22:3c:54:83:7b:69:3c:5f:19:75:38:8f:37:79:3e:b3:b2:
         33:a1:e3:65:a4:99:a9:89:0c:eb:bf:e3:db:1e:1b:11:a5:b0:
         85:2d:1e:29:a3:a5:3f:05:04:3f:1b:d9:48:64:59:de:e7:d6:
         f9:5f:f2:88
-----BEGIN CERTIFICATE-----
MIIGUTCCBTmgAwIBAgIUAQ0Mn0MoWE6niM/1FoYamC/rU4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjVkYWUyYTAtMGNiNy00NmU4LWFlMTctYWJlYjA2MDA3
ZTFhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
MWI4NzM2NjItMmM5OC00MzcyLThiZDQtMjZmZDUwMTYyMDY1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgOcZXp1Ynppj4yQImImZCzr23+ximJ/UICtO
WfvYK85BvD0UZjFwyTOZRBfld3ncDx9JFe5FrAKS4xxP0X4QNPWaXrcS9nsKkGmz
4MGM6bkyhSO7DPUwOTs8bIujhNitJ06rJhRdBlZjXOlwV7Ie/gwP9+NTT/CUeorP
2PfqEmzJfhjgoVo4AMsvDA4P6VFKgYrfrjowJ2wvBP76N9PMfahQy39oB8EAea/D
XwUv8BtHpNpvDhNs38NCiWrbmzf+U8AXPoKi3LfQBojeaSKMxXNbVBWjYGY+ANZ7
G4GiM8Zbh779JFjiGZpHzJcnGXDEdWA7NLiQT4185BtVj4nECwIDAQABo4IDYzCC
A18wHQYDVR0OBBYEFBQGr2pCQFmiU03advhFbQNUoyAXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82NWRh
ZTJhMC0wY2I3LTQ2ZTgtYWUxNy1hYmViMDYwMDdlMWEvMzVhNmM5ODQtNzE5OS0z
M2UwLWFlYmMtNGJhYTllZjZmMGRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjVkYWUyYTAtMGNiNy00NmU4LWFl
MTctYWJlYjA2MDA3ZTFhLzY1ZGFlMmEwLTBjYjctNDZlOC1hZTE3LWFiZWIwNjAw
N2UxYS5jcmwwHwYDVR0jBBgwFoAUGkmdi3ejOt8fzU66Ucwao/qj9iUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS82NWRhZTJhMC0wY2I3LTQ2ZTgtYWUxNy1hYmVi
MDYwMDdlMWEuY2VyMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAAjAUMBIDBwImB2uA
AGwDBwAmB2uAAG4wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUF
BwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRt
bDANBgkqhkiG9w0BAQsFAAOCAQEAuzEayOwh1HJMOk2nTmgB5X9iDK/TdUUcXYv5
uToLazEkK7CzsyvL1rHQ2y39tDO9fNNXjnSvK89TnZaRgouFWP2515haIDp+NFTI
hTh24Od+X8I/u/F6pX6q5lNrvw/+oARMiCVBFnJVoGZel8AN0OhFavtLnX+jjBrj
cdiVR+Kn5MCsAhl/wlvLFyqykeaJlU1O23vfCCgWSkkFzyWCUW6TuxLYFoLNg9Jg
C/uru96DuDPTXIENspKdvdd/6Su66oGJQjq1eiI8VIN7aTxfGXU4jzd5PrOyM6Hj
ZaSZqYkM67/j2x4bEaWwhS0eKaOlPwUEPxvZSGRZ3ufW+V/yiA==
-----END CERTIFICATE-----
Generated at Wed Aug 12 04:06:07 2026 by rpki-client