Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/47d5e13a-1b5f-39e2-96b0-ae573d50e618.roa
File:                     47d5e13a-1b5f-39e2-96b0-ae573d50e618.roa (raw, json)
Hash identifier:          +jMxKDQJEIymZwGoM8uZ34bpw7KWMWHENlrQfVLCn+4=
Subject key identifier:   41:91:7F:F9:2F:90:53:81:A6:03:70:EE:A8:7A:87:3D:ED:AD:D3:F0
Certificate issuer:       /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
Certificate serial:       010D0C9F4328584DE9B07CBF6B090FF38F0BFC00
Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/47d5e13a-1b5f-39e2-96b0-ae573d50e618.roa
Signing time:             Fri 22 May 2026 01:00:24 +0000
ROA not before:           Fri 22 May 2026 01:00:24 +0000
ROA not after:            Thu 20 Aug 2026 01:00:24 +0000
asID:                     9009
IP address blocks:        2607:740:3a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 04 Jun 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e9:b0:7c:bf:6b:09:0f:f3:8f:0b:fc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
        Validity
            Not Before: May 22 01:00:24 2026 GMT
            Not After : Aug 20 01:00:24 2026 GMT
        Subject: CN=31e281e0-f6c8-414b-a721-909b323c01e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:84:99:ff:46:20:ed:c8:db:64:20:73:33:db:
                    df:36:b9:3f:b1:fd:92:ad:2b:b6:fc:c9:b9:66:65:
                    61:5b:34:e3:29:43:2d:9e:fa:48:0a:f4:7c:3e:fb:
                    48:b5:62:79:88:bc:be:5f:9c:d2:d9:6e:0a:11:2b:
                    b3:68:24:58:68:ab:03:61:71:94:03:82:98:6d:19:
                    eb:78:16:3c:10:3d:07:b0:4d:46:4c:1e:49:ac:14:
                    1d:fe:eb:d7:cb:e4:45:2a:64:ef:f9:e0:f3:23:d6:
                    07:4d:b3:f1:06:5b:f8:0a:95:25:18:0e:7c:ae:b0:
                    90:81:bc:0f:a4:c4:16:8b:ab:ee:1f:2c:f1:f1:84:
                    9f:54:67:d5:a3:0c:29:82:a7:c0:0f:36:ad:09:c4:
                    17:8c:98:e9:74:8a:a7:8c:d2:a5:6a:ff:9f:d7:46:
                    93:2e:3d:e2:d6:07:3a:22:7c:ac:6c:36:65:5a:eb:
                    91:8d:41:b0:63:52:25:c2:50:42:6d:f7:9a:01:9a:
                    88:c0:57:d9:3e:f9:af:fb:7e:73:f4:a5:c8:d0:9d:
                    5f:33:37:9f:55:a0:43:e4:57:a1:fa:69:0f:20:fa:
                    60:56:54:fa:25:21:67:3c:78:ce:cd:ef:f1:aa:39:
                    c7:9d:7e:ec:74:ba:7c:f3:92:a5:de:63:ea:e4:6e:
                    53:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:91:7F:F9:2F:90:53:81:A6:03:70:EE:A8:7A:87:3D:ED:AD:D3:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/47d5e13a-1b5f-39e2-96b0-ae573d50e618.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl

            X509v3 Authority Key Identifier:
                keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:740:3a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:6f:5d:3b:7d:bd:27:ae:e6:5b:28:c8:12:94:8d:93:ca:c0:
         ef:49:b5:72:71:13:71:e4:44:09:9c:9e:46:d2:af:71:e3:1d:
         ec:18:a7:52:0c:6a:eb:1b:cd:91:99:89:e5:c5:fa:fd:94:8d:
         e4:2b:5b:93:61:1e:bc:58:4d:f9:c0:3d:96:54:1f:4b:52:32:
         28:75:ac:5a:86:c0:2d:9e:fd:63:46:90:61:74:d0:ff:dd:3b:
         c7:49:f6:6e:1b:90:b6:5b:30:49:bf:74:f6:2e:e3:36:75:c4:
         0a:66:7a:04:63:cd:c3:5c:99:73:66:cf:c9:cc:2f:cf:8e:36:
         42:8d:b1:f8:b4:20:f2:f0:d5:0d:8f:9e:ea:d0:a5:5f:bc:e6:
         24:6d:ec:81:fb:17:26:6d:59:42:75:f3:72:2a:36:74:31:5c:
         22:2c:a2:31:01:5c:5e:51:c3:42:a8:75:85:f0:f6:94:0a:94:
         0b:12:32:7b:59:6e:42:cc:9a:17:9d:f6:2d:8d:45:ef:33:b5:
         f2:89:1f:d8:94:30:35:d5:50:80:ec:b2:d5:c1:6a:d4:0d:d7:
         9d:d3:ca:7c:08:6c:40:8f:c8:2f:09:6f:81:fd:8e:71:12:41:
         88:d5:5c:fc:63:43:60:0b:87:38:d6:49:ae:15:a1:e2:49:d4:
         e3:2d:4e:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:51:22 2026 by rpki-client