Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560/6a9ff204-b31d-37f5-b27e-d6ac2010fd2b.roa
File:                     6a9ff204-b31d-37f5-b27e-d6ac2010fd2b.roa (raw, json)
Hash identifier:          gAAUaK6mtSqsAauEppxOdzpg2eEd1//MBb6NqgAOjxo=
Subject key identifier:   FA:90:A3:BC:80:5E:99:F2:C4:47:BC:42:7E:B5:67:D9:29:10:FC:D5
Certificate issuer:       /CN=35dd34c4-644d-463f-8aba-5a3d509d5560
Certificate serial:       010D0C9F4328584DD78B1A862DBE436DA34BEC00
Authority key identifier: DE:68:B5:45:30:7A:DA:0B:73:6E:15:EE:60:89:9C:2F:9E:EE:1C:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560/6a9ff204-b31d-37f5-b27e-d6ac2010fd2b.roa
Signing time:             Fri 15 May 2026 13:00:30 +0000
ROA not before:           Fri 15 May 2026 13:00:30 +0000
ROA not after:            Thu 13 Aug 2026 13:00:30 +0000
asID:                     14618
IP address blocks:        139.64.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560/35dd34c4-644d-463f-8aba-5a3d509d5560.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560/35dd34c4-644d-463f-8aba-5a3d509d5560.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d7:8b:1a:86:2d:be:43:6d:a3:4b:ec:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35dd34c4-644d-463f-8aba-5a3d509d5560
        Validity
            Not Before: May 15 13:00:30 2026 GMT
            Not After : Aug 13 13:00:30 2026 GMT
        Subject: CN=8898ef94-98b0-4ec6-ac38-5e13e6bd5bb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:c0:e0:cb:ab:7c:86:63:4b:26:c1:48:d0:26:
                    a5:9e:1a:a2:b4:83:3c:69:60:70:83:52:64:94:19:
                    1b:b8:5c:21:21:2f:d0:12:f2:54:2e:d6:7d:c4:62:
                    4b:23:0d:91:7c:c4:6a:c5:1d:62:78:df:57:6d:e9:
                    b6:6c:9e:43:9f:f1:0c:30:7d:03:cf:a3:57:46:e6:
                    92:38:e8:f9:30:29:93:b0:8c:4e:a6:91:82:1c:70:
                    7a:94:ac:f2:20:88:ac:12:10:08:89:12:16:3f:38:
                    5a:1d:04:ff:2d:d9:eb:77:8c:d3:4c:ce:d9:2c:9e:
                    47:71:19:fa:7c:20:88:4d:ef:c6:4a:22:66:56:41:
                    11:b1:63:bd:96:c3:0e:3a:9d:dd:ac:41:40:bf:23:
                    4d:e8:ab:6c:a7:78:dd:a6:92:0b:92:de:81:f8:03:
                    cb:7e:a1:55:7f:c6:da:5a:21:49:72:03:8a:c4:2b:
                    01:89:5d:0a:04:9e:e8:c8:b3:6e:94:23:bd:92:6a:
                    12:d5:f0:27:1a:96:0f:21:91:40:96:de:c6:fe:cb:
                    7a:fa:95:a6:13:a0:79:69:2e:4c:3f:1c:74:bf:dd:
                    f8:a4:f2:52:bc:69:80:d4:ab:f0:7b:83:92:62:21:
                    1d:46:28:7e:a2:34:9f:16:0f:9c:eb:e1:45:fa:a0:
                    f4:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:90:A3:BC:80:5E:99:F2:C4:47:BC:42:7E:B5:67:D9:29:10:FC:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560/6a9ff204-b31d-37f5-b27e-d6ac2010fd2b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560/35dd34c4-644d-463f-8aba-5a3d509d5560.crl

            X509v3 Authority Key Identifier:
                keyid:DE:68:B5:45:30:7A:DA:0B:73:6E:15:EE:60:89:9C:2F:9E:EE:1C:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.64.232.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:f2:b9:c7:c2:cd:fd:57:2d:9c:3d:71:f7:98:2f:7f:0d:08:
         7f:dd:11:6a:2a:21:c2:fe:9f:0e:f4:e3:44:56:34:a7:89:7c:
         d5:ce:8f:88:0f:dc:c9:de:9b:dd:b3:5f:3f:60:0d:8c:61:7e:
         80:0f:5f:8f:1d:d4:aa:d8:6a:61:22:5a:9e:11:c4:93:31:45:
         f2:45:63:da:37:15:3b:69:c7:25:47:0c:83:69:fc:b6:b0:54:
         21:a4:d0:f0:32:45:34:10:1a:b2:5e:d9:be:4c:c7:92:6a:9d:
         7d:02:38:07:dd:91:18:9f:34:75:ec:49:2a:1a:ca:e1:9d:9a:
         84:f2:75:23:83:13:0b:24:6d:0f:d5:3f:c4:e6:b4:72:1c:a1:
         51:4f:7f:35:be:b8:5e:9c:da:2f:3d:65:f1:68:67:c3:21:b9:
         75:96:a5:22:f5:9b:5d:c1:a1:06:7c:a2:ce:fe:57:4a:b0:49:
         8d:61:1f:d1:23:4f:9b:a2:10:50:59:51:e9:c5:77:07:f1:29:
         54:15:27:37:d5:bf:cf:74:51:27:fd:23:3c:64:a1:9c:63:03:
         c8:e2:8d:a2:bc:00:24:0d:b3:41:92:2b:3d:66:05:81:eb:92:
         71:87:1f:74:d0:82:25:6c:95:73:23:78:d6:cf:83:c3:78:89:
         ce:58:83:20
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3XixqGLb5DbaNL7AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzVkZDM0YzQtNjQ0ZC00NjNmLThhYmEtNWEzZDUwOWQ1
NTYwMB4XDTI2MDUxNTEzMDAzMFoXDTI2MDgxMzEzMDAzMFowLzEtMCsGA1UEAxMk
ODg5OGVmOTQtOThiMC00ZWM2LWFjMzgtNWUxM2U2YmQ1YmI3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgsDgy6t8hmNLJsFI0CalnhqitIM8aWBwg1Jk
lBkbuFwhIS/QEvJULtZ9xGJLIw2RfMRqxR1ieN9Xbem2bJ5Dn/EMMH0Dz6NXRuaS
OOj5MCmTsIxOppGCHHB6lKzyIIisEhAIiRIWPzhaHQT/Ldnrd4zTTM7ZLJ5HcRn6
fCCITe/GSiJmVkERsWO9lsMOOp3drEFAvyNN6Ktsp3jdppILkt6B+APLfqFVf8ba
WiFJcgOKxCsBiV0KBJ7oyLNulCO9kmoS1fAnGpYPIZFAlt7G/st6+pWmE6B5aS5M
Pxx0v934pPJSvGmA1Kvwe4OSYiEdRih+ojSfFg+c6+FF+qD0cwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPqQo7yAXpnyxEe8Qn61Z9kpEPzVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zNWRk
MzRjNC02NDRkLTQ2M2YtOGFiYS01YTNkNTA5ZDU1NjAvNmE5ZmYyMDQtYjMxZC0z
N2Y1LWIyN2UtZDZhYzIwMTBmZDJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMzVkZDM0YzQtNjQ0ZC00NjNmLThh
YmEtNWEzZDUwOWQ1NTYwLzM1ZGQzNGM0LTY0NGQtNDYzZi04YWJhLTVhM2Q1MDlk
NTU2MC5jcmwwHwYDVR0jBBgwFoAU3mi1RTB62gtzbhXuYImcL57uHD8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8zNWRkMzRjNC02NDRkLTQ2M2YtOGFiYS01YTNk
NTA5ZDU1NjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAi0DoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFvyucfCzf1XLZw9cfeYL38NCH/dEWoqIcL+nw7040RWNKeJfNXOj4gP
3Mnem92zXz9gDYxhfoAPX48d1KrYamEiWp4RxJMxRfJFY9o3FTtpxyVHDINp/Law
VCGk0PAyRTQQGrJe2b5Mx5JqnX0COAfdkRifNHXsSSoayuGdmoTydSODEwskbQ/V
P8TmtHIcoVFPfzW+uF6c2i89ZfFoZ8MhuXWWpSL1m13BoQZ8os7+V0qwSY1hH9Ej
T5uiEFBZUenFdwfxKVQVJzfVv890USf9IzxkoZxjA8jijaK8ACQNs0GSKz1mBYHr
knGHH3TQgiVslXMjeNbPg8N4ic5YgyA=
-----END CERTIFICATE-----
Generated at Sat Jun 13 07:24:11 2026 by rpki-client