Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6c64dc03-a03b-457c-9d7e-4e879861dcb5/aeafd934-ada4-343c-8a50-365c591e1394.roa
File:                     aeafd934-ada4-343c-8a50-365c591e1394.roa (raw, json)
Hash identifier:          cHzXhc95IoTJxGFzfrinfjpz0F/ibdPjr5iz57LnwFA=
Subject key identifier:   A6:65:F4:4F:63:BD:2F:E5:70:02:13:C8:7F:31:CD:ED:F2:C7:17:EC
Certificate issuer:       /CN=6c64dc03-a03b-457c-9d7e-4e879861dcb5
Certificate serial:       010D0C9F4328584F03A76D97B9F935DEED5385C0
Authority key identifier: F1:95:44:7D:4D:B0:3B:13:DC:A0:8D:9F:1A:80:50:CA:17:DD:B8:D4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6c64dc03-a03b-457c-9d7e-4e879861dcb5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6c64dc03-a03b-457c-9d7e-4e879861dcb5/aeafd934-ada4-343c-8a50-365c591e1394.roa
Signing time:             Mon 31 Aug 2026 01:00:12 +0000
ROA not before:           Mon 31 Aug 2026 01:00:12 +0000
ROA not after:            Sun 29 Nov 2026 02:00:12 +0000
asID:                     0
IP address blocks:        66.85.58.0/24 maxlen: 24
                          2602:f36b::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6c64dc03-a03b-457c-9d7e-4e879861dcb5/6c64dc03-a03b-457c-9d7e-4e879861dcb5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6c64dc03-a03b-457c-9d7e-4e879861dcb5/6c64dc03-a03b-457c-9d7e-4e879861dcb5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6c64dc03-a03b-457c-9d7e-4e879861dcb5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:03:a7:6d:97:b9:f9:35:de:ed:53:85:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c64dc03-a03b-457c-9d7e-4e879861dcb5
        Validity
            Not Before: Aug 31 01:00:12 2026 GMT
            Not After : Nov 29 02:00:12 2026 GMT
        Subject: CN=4ed7ef7f-5998-4cf6-a83d-14d6af865366
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:55:d1:90:df:5f:41:19:2f:d1:2f:ea:0a:90:
                    e8:16:98:1b:bf:39:ad:64:e2:97:31:e0:78:85:3c:
                    cf:ee:87:d0:7d:ba:d3:47:40:16:70:f1:6a:c6:8b:
                    02:79:1f:7b:d6:96:e4:59:d4:f2:eb:34:df:38:df:
                    4b:63:b0:ac:b4:06:01:c3:9b:4a:c2:27:a1:54:d5:
                    43:29:9d:3a:b3:ef:fe:1a:fa:4f:cf:a2:af:1a:3d:
                    5b:9e:95:1f:37:6b:b8:c8:05:4e:48:55:4f:56:7a:
                    2c:c7:77:59:5e:41:cb:df:3c:df:df:c8:92:34:93:
                    85:7f:eb:18:6a:1a:98:fa:c3:6d:23:7a:4f:97:fb:
                    8e:ff:f7:1b:e2:58:9c:97:82:68:c5:83:a1:73:53:
                    c0:de:dc:44:9d:79:d7:43:9a:0b:b3:49:77:60:e7:
                    f7:eb:34:c2:78:2d:a3:dc:f4:99:f0:55:92:df:de:
                    6d:fc:b8:6b:d5:43:f9:cc:47:dd:32:cc:c1:45:15:
                    c2:57:94:82:52:2e:d2:9d:65:11:73:c0:c2:02:12:
                    4e:76:c7:81:0c:42:0c:c4:b7:24:56:b7:fd:a4:d5:
                    9a:ff:22:fd:40:ec:5b:5a:92:94:02:61:e9:31:b5:
                    aa:74:ed:2a:89:46:60:a9:36:c2:ff:da:bb:a8:8f:
                    b0:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:65:F4:4F:63:BD:2F:E5:70:02:13:C8:7F:31:CD:ED:F2:C7:17:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6c64dc03-a03b-457c-9d7e-4e879861dcb5/aeafd934-ada4-343c-8a50-365c591e1394.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6c64dc03-a03b-457c-9d7e-4e879861dcb5/6c64dc03-a03b-457c-9d7e-4e879861dcb5.crl

            X509v3 Authority Key Identifier:
                keyid:F1:95:44:7D:4D:B0:3B:13:DC:A0:8D:9F:1A:80:50:CA:17:DD:B8:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6c64dc03-a03b-457c-9d7e-4e879861dcb5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.85.58.0/24
                IPv6:
                  2602:f36b::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:b7:2a:72:ca:9d:aa:3a:cd:8f:ec:5f:07:e5:05:ae:27:e2:
         e6:3d:60:2e:aa:d9:9e:76:6c:9d:93:61:97:ac:0b:80:9e:71:
         fa:6a:09:56:ae:91:8d:33:1e:ac:64:bb:43:fd:25:51:f8:80:
         e8:db:3f:33:8a:9e:6f:ee:25:67:7a:4d:73:89:7d:be:87:94:
         f7:8b:eb:89:84:cf:96:b2:2b:46:d7:40:7e:07:f5:13:0f:c9:
         dd:16:76:8c:c7:ae:40:7f:ef:1d:b1:82:20:8a:66:d0:b4:f2:
         28:dd:a9:78:59:30:4b:59:c2:1c:ac:97:51:b1:ac:0e:b0:c0:
         59:56:70:af:96:b1:b9:84:d0:a4:12:f2:5c:98:94:c6:03:45:
         1f:0f:6e:c1:b6:ce:9c:df:ac:3c:d9:00:1c:f3:bb:d9:e7:f2:
         5d:00:17:1a:d6:86:a6:0e:f9:d5:fe:61:c8:d5:5e:4f:77:95:
         dd:7c:75:87:f6:d2:b9:44:0c:16:9e:31:e9:b8:d7:81:b2:e2:
         2c:fd:a0:20:50:6c:50:a8:19:38:8a:52:ee:97:ab:42:70:62:
         ce:c4:52:56:01:ba:f7:c5:b1:42:92:22:db:c4:c2:6a:98:f8:
         ff:6f:c8:63:11:14:a1:a6:63:55:7e:7d:c7:66:9c:23:2b:ff:
         d9:96:a1:52
-----BEGIN CERTIFICATE-----
MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE8Dp22Xufk13u1ThcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmM2NGRjMDMtYTAzYi00NTdjLTlkN2UtNGU4Nzk4NjFk
Y2I1MB4XDTI2MDgzMTAxMDAxMloXDTI2MTEyOTAyMDAxMlowLzEtMCsGA1UEAxMk
NGVkN2VmN2YtNTk5OC00Y2Y2LWE4M2QtMTRkNmFmODY1MzY2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxlXRkN9fQRkv0S/qCpDoFpgbvzmtZOKXMeB4
hTzP7ofQfbrTR0AWcPFqxosCeR971pbkWdTy6zTfON9LY7CstAYBw5tKwiehVNVD
KZ06s+/+GvpPz6KvGj1bnpUfN2u4yAVOSFVPVnosx3dZXkHL3zzf38iSNJOFf+sY
ahqY+sNtI3pPl/uO//cb4licl4JoxYOhc1PA3txEnXnXQ5oLs0l3YOf36zTCeC2j
3PSZ8FWS395t/Lhr1UP5zEfdMszBRRXCV5SCUi7SnWURc8DCAhJOdseBDEIMxLck
Vrf9pNWa/yL9QOxbWpKUAmHpMbWqdO0qiUZgqTbC/9q7qI+wOQIDAQABo4IDZTCC
A2EwHQYDVR0OBBYEFKZl9E9jvS/lcAITyH8xze3yxxfsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi82YzY0
ZGMwMy1hMDNiLTQ1N2MtOWQ3ZS00ZTg3OTg2MWRjYjUvYWVhZmQ5MzQtYWRhNC0z
NDNjLThhNTAtMzY1YzU5MWUxMzk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05
YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvNmM2NGRjMDMtYTAzYi00NTdjLTlk
N2UtNGU4Nzk4NjFkY2I1LzZjNjRkYzAzLWEwM2ItNDU3Yy05ZDdlLTRlODc5ODYx
ZGNiNS5jcmwwHwYDVR0jBBgwFoAU8ZVEfU2wOxPcoI2fGoBQyhfduNQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz
OS05NDBmLWJlMjczZDljMGI2Mi82YzY0ZGMwMy1hMDNiLTQ1N2MtOWQ3ZS00ZTg3
OTg2MWRjYjUuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAQlU6MA4E
AgACMAgDBgAmAvNrADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB
BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o
dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBytypyyp2qOs2P7F8H5QWuJ+LmPWAuqtme
dmydk2GXrAuAnnH6aglWrpGNMx6sZLtD/SVR+IDo2z8zip5v7iVnek1ziX2+h5T3
i+uJhM+WsitG10B+B/UTD8ndFnaMx65Af+8dsYIgimbQtPIo3al4WTBLWcIcrJdR
sawOsMBZVnCvlrG5hNCkEvJcmJTGA0UfD27Bts6c36w82QAc87vZ5/JdABca1oam
DvnV/mHI1V5Pd5XdfHWH9tK5RAwWnjHpuNeBsuIs/aAgUGxQqBk4ilLul6tCcGLO
xFJWAbr3xbFCkiLbxMJqmPj/b8hjERShpmNVfn3HZpwjK//ZlqFS
-----END CERTIFICATE-----
Generated at Tue Sep 22 06:19:15 2026 by rpki-client