Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/51d41b22-8e48-3167-a304-52a2feb74dfb.roa
File:                     51d41b22-8e48-3167-a304-52a2feb74dfb.roa (raw, json)
Hash identifier:          755Xrx6SK5R3/t8IasIZHxHnIJGU84nL7zbj0uja3WE=
Subject key identifier:   BA:0F:91:DF:47:CD:5B:0E:EE:55:E4:53:8F:F2:61:C0:20:74:CA:D5
Certificate issuer:       /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
Certificate serial:       010D0C9F4328584EA7925C474DA2DCF638446800
Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/51d41b22-8e48-3167-a304-52a2feb74dfb.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     9009
IP address blocks:        2607:740:37::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Sep 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:92:5c:47:4d:a2:dc:f6:38:44:68:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=b1142d4c-1711-4fe7-91e0-713ef49d8d4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:82:bf:e9:56:55:18:6c:9f:98:4d:82:cb:58:
                    2d:cb:6a:c6:79:d4:83:58:d8:3b:a1:34:eb:c2:7e:
                    6c:cd:c9:94:bb:d4:f1:42:cf:63:b5:9e:20:19:04:
                    d7:16:10:32:03:61:61:c1:d8:15:22:23:2b:54:b1:
                    5f:af:15:0c:44:b5:74:96:79:ad:b4:b3:f6:7b:54:
                    47:af:dc:31:00:0f:6e:df:35:65:67:90:31:63:a7:
                    73:e5:ee:cf:32:03:4a:9d:d4:12:d4:00:40:be:aa:
                    49:31:09:f9:20:46:7a:93:8f:a3:7e:2c:18:9c:29:
                    6f:d6:bd:bb:30:93:9a:23:b5:54:20:86:72:94:7d:
                    20:99:b4:90:a3:d0:e3:ad:a6:8e:74:f2:e6:27:7a:
                    a2:af:2b:0d:d4:f7:eb:77:08:fa:92:49:96:59:5e:
                    64:53:f6:38:ca:1c:7d:f4:90:8c:d4:f9:88:29:6a:
                    e1:7d:b7:a2:4b:1d:05:f3:f9:dd:7a:1e:0b:3c:09:
                    59:20:6f:ea:40:e6:ab:ae:9a:fd:43:0b:52:8e:15:
                    e7:0f:45:28:7c:36:8d:ba:cd:3c:58:0f:28:e0:1b:
                    32:d6:34:40:1b:84:60:45:e8:ab:28:03:8b:8f:eb:
                    47:b1:c7:d6:86:c5:0b:d3:96:f2:3a:dc:28:81:10:
                    e8:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:0F:91:DF:47:CD:5B:0E:EE:55:E4:53:8F:F2:61:C0:20:74:CA:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/51d41b22-8e48-3167-a304-52a2feb74dfb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl

            X509v3 Authority Key Identifier:
                keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:740:37::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:c6:bf:86:51:93:19:5e:3d:5c:61:ca:de:a6:ea:6e:7f:5b:
         6a:91:35:c3:a5:a4:f0:52:00:b6:29:3c:2f:81:21:28:76:a9:
         2c:16:74:2a:3e:3f:7a:d4:f2:68:d9:b4:81:3c:8f:ee:42:3c:
         49:6e:cf:36:2b:08:d2:4a:52:dc:bf:f8:d8:ac:e1:5b:03:68:
         1f:19:98:2d:96:c8:8a:af:4a:97:96:73:bb:57:38:86:40:44:
         dd:d0:5b:e8:62:f1:b6:82:1c:9c:ab:f5:60:09:d2:d4:7b:84:
         53:54:ca:8b:df:dd:43:59:7f:c9:7a:4e:09:9c:26:86:1d:e8:
         17:7f:c0:d8:73:e6:e6:4f:04:e5:c1:51:e1:b3:06:d5:f3:63:
         82:db:0b:c6:e6:6c:3a:77:62:4c:c1:42:16:a2:0f:68:49:7c:
         86:03:61:ba:3a:53:d2:e5:56:9f:26:16:68:67:47:6f:d5:9c:
         33:52:86:fc:4d:00:e2:65:d9:0f:8e:27:4b:72:92:1e:cc:18:
         37:c3:0e:e9:e0:2a:70:3b:f3:6f:31:a5:b9:58:99:6c:1f:4f:
         9a:0c:b2:bd:05:6f:2f:3d:d0:75:2a:5a:d9:36:2a:a4:c6:b1:
         ae:45:e9:29:82:3c:d5:ed:70:c8:b8:50:37:85:94:b4:cc:0f:
         fd:e6:05:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 03:16:22 2026 by rpki-client