Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/35ea36bf-fe2c-3b55-b368-d4025e456a18.roa
File:                     35ea36bf-fe2c-3b55-b368-d4025e456a18.roa (raw, json)
Hash identifier:          OQQwDRSjGJx2VkcLfB4ERoKpCSzVfRJBeBDmMYebASc=
Subject key identifier:   66:99:A3:06:A7:10:A3:BE:EA:EA:28:4E:15:00:63:7E:DC:20:1A:2F
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584E5A4A0F4B8211BD4DA3FBFC00
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/35ea36bf-fe2c-3b55-b368-d4025e456a18.roa
Signing time:             Wed 01 Jul 2026 09:00:12 +0000
ROA not before:           Wed 01 Jul 2026 09:00:12 +0000
ROA not after:            Tue 29 Sep 2026 09:00:12 +0000
asID:                     13335
IP address blocks:        2606:54c0:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5a:4a:0f:4b:82:11:bd:4d:a3:fb:fc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Jul  1 09:00:12 2026 GMT
            Not After : Sep 29 09:00:12 2026 GMT
        Subject: CN=faec961b-d806-4071-b3aa-4c4202786735
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:f2:d5:f9:a4:69:0e:94:63:f2:ac:ca:46:09:
                    1f:81:73:00:98:5c:4c:1e:f5:d3:d3:bf:36:7d:1d:
                    64:0c:a4:a3:a6:de:e2:1f:8e:c2:0a:70:4f:7e:15:
                    ab:42:d4:6d:43:33:45:45:6d:98:da:a8:66:3f:4c:
                    be:91:77:1c:d9:5b:d7:5a:25:55:d5:a8:5e:44:1f:
                    52:a5:83:e0:ac:1d:14:ab:11:c7:27:ab:95:30:6a:
                    c1:5e:09:ad:c2:0d:52:07:01:fa:1b:df:46:e1:33:
                    6e:8a:37:de:b8:5d:85:6f:ba:46:8e:37:1b:3a:4c:
                    9f:6f:e9:ff:cf:e6:f3:91:af:d0:d1:25:70:21:9e:
                    88:06:33:ab:58:26:8d:33:17:7f:27:0d:ae:ba:6b:
                    e4:bd:bf:cb:0a:8e:ca:59:e5:5b:69:88:c0:58:4e:
                    62:27:32:c0:52:df:dd:af:de:b3:8b:46:30:34:57:
                    15:ac:82:f4:cd:86:6a:6c:4c:35:b9:c7:b0:a6:00:
                    fc:93:6d:7e:1e:85:d4:2c:51:94:4d:1a:e9:a1:0e:
                    ed:ac:52:e6:6f:ac:77:a7:2d:b9:3e:0d:5a:29:59:
                    e2:3a:6b:a3:15:b1:57:ee:8d:da:81:02:27:d8:ba:
                    60:e1:63:2f:67:b6:a4:dd:d4:59:44:f9:fa:54:6c:
                    b7:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:99:A3:06:A7:10:A3:BE:EA:EA:28:4E:15:00:63:7E:DC:20:1A:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/35ea36bf-fe2c-3b55-b368-d4025e456a18.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:54c0:4000::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:a3:27:ae:e0:14:70:79:a5:20:d7:bf:33:41:c9:bf:86:79:
         0c:f4:3b:f5:49:b5:c6:c1:32:d9:49:f8:5f:ff:05:ef:0c:b1:
         b8:28:ab:b5:0d:84:6f:bb:a8:48:61:6c:d5:d5:51:b5:88:55:
         8b:36:c1:e0:1b:17:75:9f:55:e5:03:67:6b:87:62:a3:cf:9c:
         fb:74:e6:a9:04:12:88:f9:4c:90:90:c7:96:7d:d6:d3:95:54:
         57:05:6f:c5:10:5d:2d:88:84:32:7e:ec:83:96:e4:30:39:57:
         d5:25:a3:78:e3:d6:c7:b9:ef:e6:af:21:69:0d:07:03:79:3c:
         93:69:4e:1d:7b:8d:a6:c2:05:90:3f:6c:fd:dc:14:73:2d:a4:
         8c:bc:fb:3d:4d:4c:11:58:89:74:f0:21:34:e2:8a:bd:c7:63:
         12:93:7c:18:ed:55:93:e0:15:d4:6c:29:04:54:50:56:a4:c8:
         91:96:ca:b4:4b:a5:05:7e:67:49:06:c4:f8:d8:40:4e:27:a6:
         25:e6:74:d5:34:24:0f:07:fa:4c:d5:c8:00:68:e6:7b:eb:85:
         9d:7b:5c:42:87:b6:a0:8e:84:a9:14:5f:19:f8:91:3d:bd:eb:
         98:51:af:95:ea:4a:1d:a2:13:34:1e:74:85:c5:1c:82:38:c8:
         67:c0:ad:94
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE5aSg9LghG9TaP7/AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI2MDcwMTA5MDAxMloXDTI2MDkyOTA5MDAxMlowLzEtMCsGA1UEAxMk
ZmFlYzk2MWItZDgwNi00MDcxLWIzYWEtNGM0MjAyNzg2NzM1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApPLV+aRpDpRj8qzKRgkfgXMAmFxMHvXT0782
fR1kDKSjpt7iH47CCnBPfhWrQtRtQzNFRW2Y2qhmP0y+kXcc2VvXWiVV1aheRB9S
pYPgrB0UqxHHJ6uVMGrBXgmtwg1SBwH6G99G4TNuijfeuF2Fb7pGjjcbOkyfb+n/
z+bzka/Q0SVwIZ6IBjOrWCaNMxd/Jw2uumvkvb/LCo7KWeVbaYjAWE5iJzLAUt/d
r96zi0YwNFcVrIL0zYZqbEw1ucewpgD8k21+HoXULFGUTRrpoQ7trFLmb6x3py25
Pg1aKVniOmujFbFX7o3agQIn2Lpg4WMvZ7ak3dRZRPn6VGy3kwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFGaZowanEKO+6uooThUAY37cIBovMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMzVlYTM2YmYtZmUyYy0z
YjU1LWIzNjgtZDQwMjVlNDU2YTE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYGJgZUwEAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAnqMnruAUcHmlINe/M0HJv4Z5DPQ79Um1xsEy2Un4X/8F7wyxuCir
tQ2Eb7uoSGFs1dVRtYhVizbB4BsXdZ9V5QNna4dio8+c+3TmqQQSiPlMkJDHln3W
05VUVwVvxRBdLYiEMn7sg5bkMDlX1SWjeOPWx7nv5q8haQ0HA3k8k2lOHXuNpsIF
kD9s/dwUcy2kjLz7PU1MEViJdPAhNOKKvcdjEpN8GO1Vk+AV1GwpBFRQVqTIkZbK
tEulBX5nSQbE+NhATiemJeZ01TQkDwf6TNXIAGjme+uFnXtcQoe2oI6EqRRfGfiR
Pb3rmFGvlepKHaITNB50hcUcgjjIZ8CtlA==
-----END CERTIFICATE-----
Generated at Thu Jul 23 21:58:11 2026 by rpki-client