Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/1f267b9f-4eb6-3e46-9931-27afe99a04ee.roa
File:                     1f267b9f-4eb6-3e46-9931-27afe99a04ee.roa (raw, json)
Hash identifier:          cc8Kd7YLThuL20zzvA20d+odjKpQhEcqOJmWLyWnYPE=
Subject key identifier:   C8:5F:9A:FE:AD:74:D7:3F:3B:26:E0:AD:EA:A2:AE:94:29:F9:94:BA
Certificate issuer:       /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
Certificate serial:       010D0C9F4328584D07ACF73AB4A987D3A0D6A280
Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/1f267b9f-4eb6-3e46-9931-27afe99a04ee.roa
Signing time:             Mon 02 Mar 2026 02:00:31 +0000
ROA not before:           Mon 02 Mar 2026 02:00:31 +0000
ROA not after:            Sun 31 May 2026 01:00:31 +0000
asID:                     9009
IP address blocks:        2607:740:1d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:07:ac:f7:3a:b4:a9:87:d3:a0:d6:a2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
        Validity
            Not Before: Mar  2 02:00:31 2026 GMT
            Not After : May 31 01:00:31 2026 GMT
        Subject: CN=377c82b9-9d08-496b-8154-1ac2d69215c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:de:cf:16:c8:8e:db:5e:c0:ee:49:8c:15:85:
                    50:04:07:f2:a6:58:0b:77:4e:ad:ae:3c:f0:91:93:
                    65:f0:81:9f:53:06:fc:b8:79:ff:4e:05:7c:a9:c6:
                    27:5d:14:a3:6e:a2:9e:1a:c0:61:4e:9d:04:d7:4d:
                    4a:7a:b8:91:2a:7c:7e:9d:38:5d:0d:c7:38:91:00:
                    b7:ac:4b:bc:d2:4e:8c:ec:16:57:e0:ca:a9:23:5f:
                    b8:0d:9a:92:f5:d7:9f:ed:30:3b:94:e8:59:86:19:
                    a1:f7:c6:69:2a:aa:75:7c:ba:51:41:62:f3:3f:ec:
                    3c:94:43:fa:b4:e8:77:7f:a3:bb:88:66:14:bf:b4:
                    66:18:54:91:50:bf:60:ae:0c:5d:2d:ac:56:21:e3:
                    f3:79:86:1d:4a:6a:a9:bc:16:b9:b3:f9:95:81:d4:
                    79:9c:8f:6c:b4:72:7d:02:71:27:ba:7e:bd:0d:5c:
                    1b:de:fb:09:74:14:aa:b1:6f:f5:f4:d5:a5:0d:fb:
                    d5:e9:71:8a:38:b1:b4:53:bd:4a:d8:1f:20:32:cd:
                    8d:7b:a2:83:15:b4:84:11:12:a2:e2:fb:47:74:bc:
                    c6:f7:59:22:07:82:bc:be:66:e3:33:a9:43:3e:51:
                    7a:2c:af:e9:b6:36:3d:46:2b:53:00:15:16:27:ce:
                    44:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:5F:9A:FE:AD:74:D7:3F:3B:26:E0:AD:EA:A2:AE:94:29:F9:94:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/1f267b9f-4eb6-3e46-9931-27afe99a04ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl

            X509v3 Authority Key Identifier:
                keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:740:1d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:75:ed:47:f0:46:87:9f:fd:86:34:81:1b:94:15:85:44:1a:
         0c:18:5a:ab:ba:ee:ad:54:98:2a:3b:6a:3f:2e:1d:5a:a9:38:
         fc:a1:9f:74:1d:c7:86:89:6b:fb:25:33:c7:5a:bd:3e:57:0a:
         d9:31:b6:ed:16:8b:10:97:77:1f:23:2e:85:7a:1e:e2:7c:42:
         9d:9a:e1:4a:a7:49:82:c4:33:24:08:7c:b3:6f:db:c1:33:83:
         98:d2:ce:d9:00:d6:5d:d8:3f:69:2a:c6:ef:7b:1a:83:d0:e1:
         bd:28:08:e8:db:7a:8b:cc:05:81:f8:61:5e:2e:4c:74:c6:0d:
         d0:94:e1:47:e2:97:10:99:0f:63:ef:22:32:b5:dd:71:73:93:
         7c:ba:fd:67:4d:ee:1d:33:52:28:02:40:2c:ea:86:2a:cf:88:
         ed:d0:90:89:68:b4:10:72:9d:b5:cf:a7:9f:c0:4c:99:03:56:
         73:5f:b8:db:b4:fb:d5:ce:b2:ea:43:4a:5e:db:28:83:58:96:
         f1:ae:34:ca:c3:6e:94:fe:2e:6a:95:b2:43:4b:82:14:ca:8d:
         86:09:20:ff:e5:b0:28:4d:91:a6:66:b0:09:7c:63:e6:f2:92:
         8d:37:60:0c:a3:f3:a8:c6:a4:c0:cf:77:50:a0:e3:4d:e5:e0:
         96:4e:e5:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 11:25:46 2026 by rpki-client