Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/679b1148-0358-4232-b827-4a6006838da6/35ec1831-5758-3354-b185-9ab807b853f2.roa
File:                     35ec1831-5758-3354-b185-9ab807b853f2.roa (raw, json)
Hash identifier:          AuNf95NBk4cOtGFRwSB0lpn8fQ+gw+IynEkuer5+K6k=
Subject key identifier:   78:21:29:33:49:6E:95:06:31:59:C0:2E:DE:EA:A7:F7:6E:E3:A1:36
Certificate issuer:       /CN=679b1148-0358-4232-b827-4a6006838da6
Certificate serial:       010D0C9F4328584B7DECA3F60DE4489646171D00
Authority key identifier: 85:88:97:A4:88:EB:ED:BE:CF:9F:1A:CD:C7:0D:21:B8:50:37:50:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/679b1148-0358-4232-b827-4a6006838da6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/679b1148-0358-4232-b827-4a6006838da6/35ec1831-5758-3354-b185-9ab807b853f2.roa
Signing time:             Sun 12 Oct 2025 01:00:30 +0000
ROA not before:           Sun 12 Oct 2025 01:00:30 +0000
ROA not after:            Sat 10 Jan 2026 02:00:30 +0000
asID:                     397045
IP address blocks:        199.233.129.0/24 maxlen: 24
                          2602:801:6000::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/679b1148-0358-4232-b827-4a6006838da6/679b1148-0358-4232-b827-4a6006838da6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/679b1148-0358-4232-b827-4a6006838da6/679b1148-0358-4232-b827-4a6006838da6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/679b1148-0358-4232-b827-4a6006838da6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7d:ec:a3:f6:0d:e4:48:96:46:17:1d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=679b1148-0358-4232-b827-4a6006838da6
        Validity
            Not Before: Oct 12 01:00:30 2025 GMT
            Not After : Jan 10 02:00:30 2026 GMT
        Subject: CN=d7ace6a1-c45d-4ebb-9bdd-83c823a6b652
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:2c:71:41:fb:3b:7c:8b:f1:5f:5a:d6:a8:a8:
                    fb:5b:f5:f0:7a:f6:ce:33:5d:da:bc:fc:77:a2:5d:
                    34:d6:c0:af:6d:ea:c9:a0:7f:17:a9:ca:9a:3c:5e:
                    b0:4b:42:65:c4:69:43:4b:1c:8a:6d:d9:bf:ac:ce:
                    dc:08:c0:0b:a9:ba:0c:c8:98:89:04:7f:82:08:5e:
                    05:19:67:00:e5:ff:17:0a:bf:dc:3d:ce:d6:50:ae:
                    f7:7f:ad:4d:c8:00:d9:bc:22:3c:d9:ee:f9:20:15:
                    ac:87:c4:44:5a:fa:ab:b3:a2:73:aa:d6:b4:7a:aa:
                    e6:27:d8:2f:88:de:33:ae:fc:49:28:e2:0a:42:cd:
                    c6:42:8a:67:56:15:e7:a2:23:ab:9c:cf:6b:c8:d7:
                    1a:8b:52:08:d5:47:0d:26:6f:9b:62:9b:01:03:c2:
                    14:df:dc:99:f5:56:c2:5f:3f:da:d6:37:6e:31:db:
                    10:cf:26:35:3d:72:60:96:9b:0d:00:61:03:87:f6:
                    28:e2:05:99:8a:a6:c0:11:4a:f0:12:9e:08:21:db:
                    ad:04:76:0d:db:2d:20:e5:ea:10:8e:1c:41:70:00:
                    32:85:14:fb:1a:74:23:3b:71:d9:96:08:a8:83:32:
                    5d:ef:2e:9a:61:3a:b2:34:90:82:e4:54:95:cb:ca:
                    c0:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:21:29:33:49:6E:95:06:31:59:C0:2E:DE:EA:A7:F7:6E:E3:A1:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/679b1148-0358-4232-b827-4a6006838da6/35ec1831-5758-3354-b185-9ab807b853f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/679b1148-0358-4232-b827-4a6006838da6/679b1148-0358-4232-b827-4a6006838da6.crl

            X509v3 Authority Key Identifier:
                keyid:85:88:97:A4:88:EB:ED:BE:CF:9F:1A:CD:C7:0D:21:B8:50:37:50:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/679b1148-0358-4232-b827-4a6006838da6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.233.129.0/24
                IPv6:
                  2602:801:6000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cc:46:5c:38:41:52:4a:1a:67:78:f6:65:0f:95:56:0e:6b:c3:
         18:59:3e:33:fa:83:b1:f8:ee:10:f7:ce:0f:e5:1c:c7:e1:82:
         77:00:2f:26:60:73:ea:73:17:38:b5:c7:eb:09:f1:74:27:fd:
         7f:23:ec:cf:88:6d:e8:58:c7:a4:19:91:fa:e3:05:41:a8:e7:
         1d:36:fe:ba:f7:ca:38:7e:f2:8d:c4:42:39:ae:8d:ac:be:79:
         f6:4d:6a:21:c0:bb:05:12:ac:f3:43:eb:b2:18:8f:e1:b8:41:
         12:b6:dd:e7:ef:29:92:d8:10:d9:1b:ec:de:c1:3f:4a:64:a1:
         99:5a:44:5a:42:89:91:d5:99:90:a1:dc:95:11:eb:0a:2c:7d:
         2f:07:64:be:bc:09:f7:74:47:e0:0c:1d:43:9d:62:c7:23:9a:
         a6:87:47:37:36:f3:09:ef:a1:e5:02:f3:93:92:3a:a2:5b:7d:
         a5:ae:98:bb:53:f1:78:f9:94:f7:f7:d9:14:65:58:28:97:95:
         6d:da:d4:e6:f2:74:ac:51:1b:ab:98:00:52:ff:31:07:a5:33:
         11:76:95:e4:c8:6f:29:c5:f0:b6:a4:72:43:98:8a:11:b1:86:
         95:0e:e2:f4:96:dd:cf:0c:b2:90:06:3b:9b:07:68:48:78:20:
         77:c4:09:5c
-----BEGIN CERTIFICATE-----
MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEt97KP2DeRIlkYXHQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjc5YjExNDgtMDM1OC00MjMyLWI4MjctNGE2MDA2ODM4
ZGE2MB4XDTI1MTAxMjAxMDAzMFoXDTI2MDExMDAyMDAzMFowLzEtMCsGA1UEAxMk
ZDdhY2U2YTEtYzQ1ZC00ZWJiLTliZGQtODNjODIzYTZiNjUyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkSxxQfs7fIvxX1rWqKj7W/XwevbOM13avPx3
ol001sCvberJoH8XqcqaPF6wS0JlxGlDSxyKbdm/rM7cCMALqboMyJiJBH+CCF4F
GWcA5f8XCr/cPc7WUK73f61NyADZvCI82e75IBWsh8REWvqrs6Jzqta0eqrmJ9gv
iN4zrvxJKOIKQs3GQopnVhXnoiOrnM9ryNcai1II1UcNJm+bYpsBA8IU39yZ9VbC
Xz/a1jduMdsQzyY1PXJglpsNAGEDh/Yo4gWZiqbAEUrwEp4IIdutBHYN2y0g5eoQ
jhxBcAAyhRT7GnQjO3HZlgiogzJd7y6aYTqyNJCC5FSVy8rAfwIDAQABo4IDZjCC
A2IwHQYDVR0OBBYEFHghKTNJbpUGMVnALt7qp/du46E2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82Nzli
MTE0OC0wMzU4LTQyMzItYjgyNy00YTYwMDY4MzhkYTYvMzVlYzE4MzEtNTc1OC0z
MzU0LWIxODUtOWFiODA3Yjg1M2YyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjc5YjExNDgtMDM1OC00MjMyLWI4
MjctNGE2MDA2ODM4ZGE2LzY3OWIxMTQ4LTAzNTgtNDIzMi1iODI3LTRhNjAwNjgz
OGRhNi5jcmwwHwYDVR0jBBgwFoAUhYiXpIjr7b7PnxrNxw0huFA3UAcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS82NzliMTE0OC0wMzU4LTQyMzItYjgyNy00YTYw
MDY4MzhkYTYuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAx+mBMA8E
AgACMAkDBwQmAggBYAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG
AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu
aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAzEZcOEFSShpnePZlD5VWDmvDGFk+M/qD
sfjuEPfOD+Ucx+GCdwAvJmBz6nMXOLXH6wnxdCf9fyPsz4ht6FjHpBmR+uMFQajn
HTb+uvfKOH7yjcRCOa6NrL559k1qIcC7BRKs80PrshiP4bhBErbd5+8pktgQ2Rvs
3sE/SmShmVpEWkKJkdWZkKHclRHrCix9LwdkvrwJ93RH4AwdQ51ixyOapodHNzbz
Ce+h5QLzk5I6olt9pa6Yu1PxePmU9/fZFGVYKJeVbdrU5vJ0rFEbq5gAUv8xB6Uz
EXaV5MhvKcXwtqRyQ5iKEbGGlQ7i9JbdzwyykAY7mwdoSHggd8QJXA==
-----END CERTIFICATE-----
Generated at Mon Oct 20 23:36:33 2025 by rpki-client