Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/40c437b4-a88b-3526-8eb4-8c0c2b279264.roa
File:                     40c437b4-a88b-3526-8eb4-8c0c2b279264.roa (raw, json)
Hash identifier:          NsHy+XhsuaUpZJm4Xb8nQt7xbjDZ5cFt63O2KFDH4nI=
Subject key identifier:   05:24:EA:95:53:10:07:35:2C:EC:50:94:5E:E0:5F:E3:29:CD:A9:09
Certificate issuer:       /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
Certificate serial:       010D0C9F4328584EA7999036D70F8B1DAF343E80
Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/40c437b4-a88b-3526-8eb4-8c0c2b279264.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     212238
IP address blocks:        2607:740:195::/48 maxlen: 48
                          2607:740:197::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Aug 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:99:90:36:d7:0f:8b:1d:af:34:3e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=5a386f5d-8533-4686-85fa-92422c7d75e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:8d:db:7e:69:8d:4d:76:2a:ff:66:fb:d2:66:
                    fd:12:f9:f6:32:e5:49:21:bd:a8:89:76:3c:35:c8:
                    99:74:d7:de:3c:71:2d:fe:e6:b7:fe:98:71:bb:d4:
                    fd:85:6e:73:33:c8:5a:72:c8:75:46:1c:fc:86:e6:
                    ad:62:ef:23:28:19:7a:ed:9d:a0:a7:2e:e4:6f:a1:
                    74:cd:77:e5:b9:8a:ca:b9:e9:e6:88:4f:c9:12:61:
                    3b:fb:89:16:a3:11:ed:b6:5d:f0:e8:0b:cc:53:28:
                    6a:6b:7c:be:f2:2e:8d:27:03:ba:05:70:27:31:75:
                    3f:91:e0:5f:61:3c:cc:b4:c2:96:46:5b:b9:12:f4:
                    40:7e:79:f7:d9:d9:57:31:30:17:ab:39:cc:c2:72:
                    b2:94:f6:ef:bf:16:21:2f:19:ec:2b:76:23:6d:68:
                    24:af:81:ad:75:91:6c:fe:4b:7e:8d:21:54:7e:97:
                    3c:34:57:f6:57:2b:23:fc:a3:57:af:22:8c:6f:dc:
                    2c:c6:36:f3:53:28:92:f8:f4:94:90:2a:27:fc:0e:
                    e0:ef:35:66:af:3b:c4:24:01:00:f3:4e:cf:b1:b4:
                    1e:a6:13:a3:d0:50:45:b6:d8:07:39:f5:b9:96:99:
                    d6:62:a2:d8:55:6f:33:26:1d:7e:8d:71:dc:0d:9a:
                    cd:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:24:EA:95:53:10:07:35:2C:EC:50:94:5E:E0:5F:E3:29:CD:A9:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/40c437b4-a88b-3526-8eb4-8c0c2b279264.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl

            X509v3 Authority Key Identifier:
                keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:740:195::/48
                  2607:740:197::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:6b:92:c2:b5:f2:48:69:4c:6f:bb:c9:db:5e:9b:34:1d:b5:
         5a:5c:92:26:09:1c:ec:ca:61:3b:50:e2:0e:8e:3e:a3:2d:10:
         e8:a4:f8:e9:cb:b9:f9:85:a2:ef:5c:b4:e9:11:ea:7e:24:f1:
         64:04:bb:27:19:68:57:58:c1:fe:66:b9:52:43:23:68:c0:50:
         a4:44:ce:d8:34:2b:0d:a9:12:f6:09:a9:c7:74:ed:5e:97:71:
         41:96:5d:a5:89:4f:17:11:e7:16:11:8f:77:f3:74:2d:03:b8:
         73:3a:33:80:e2:a5:17:6a:59:a6:0f:4d:a7:2a:0a:5d:d2:59:
         08:af:36:bc:d3:19:f0:74:6b:06:0a:64:26:ea:99:0a:7f:a0:
         9a:2d:04:f1:79:e4:d6:57:aa:5b:6c:61:81:87:f4:22:ca:2b:
         3e:a5:e4:3e:b2:c1:9b:ca:e9:e8:79:c4:5d:d2:33:79:eb:3b:
         0c:16:df:44:db:b5:e4:b5:f9:36:3a:03:ae:61:17:27:9c:52:
         f1:3f:a1:46:ab:93:58:3e:46:eb:3b:c6:ef:8f:9e:67:fb:ae:
         07:68:de:44:d9:73:8f:12:42:20:80:ab:cb:ff:e0:24:0a:6f:
         59:6b:b0:20:e0:2e:b1:1c:d2:1f:2f:e5:f8:48:f1:6f:1d:16:
         f4:7e:26:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 07:44:00 2026 by rpki-client