Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/5337b138-0fe9-3b6d-ae21-5ff6ff44773e.roa
File:                     5337b138-0fe9-3b6d-ae21-5ff6ff44773e.roa (raw, json)
Hash identifier:          X52Cmu3Tdlw4KD2HOhvsaQ3NTO3GKlxdfS7Ou5NH33g=
Subject key identifier:   E1:01:34:04:57:8C:3C:54:0D:1F:4D:31:2C:9C:B3:98:EC:10:21:FD
Certificate issuer:       /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
Certificate serial:       010D0C9F4328584A6825FD03779B28961BF0C980
Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/5337b138-0fe9-3b6d-ae21-5ff6ff44773e.roa
Signing time:             Fri 04 Jul 2025 13:01:06 +0000
ROA not before:           Fri 04 Jul 2025 13:01:06 +0000
ROA not after:            Thu 02 Oct 2025 13:01:06 +0000
asID:                     9009
IP address blocks:        2607:740:38::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Jul 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:68:25:fd:03:77:9b:28:96:1b:f0:c9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
        Validity
            Not Before: Jul  4 13:01:06 2025 GMT
            Not After : Oct  2 13:01:06 2025 GMT
        Subject: CN=47ca7e39-8f9f-4cc0-a3ac-ad87e2146790
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:85:80:51:08:db:bf:27:61:05:fb:06:55:a3:
                    43:4f:a3:4b:68:73:37:0f:93:53:77:d8:1a:52:ed:
                    5c:92:9b:88:54:86:21:e3:19:04:72:01:7f:17:f7:
                    8b:b3:e2:6d:ae:1f:56:bb:51:9f:5d:88:a2:f1:df:
                    fc:68:66:12:a2:29:78:14:80:79:20:f2:e4:21:b3:
                    41:86:0e:65:01:7d:f4:16:3f:e6:d3:4b:52:8e:eb:
                    e4:f2:bd:ac:be:98:23:02:51:0b:6a:20:60:01:cc:
                    56:6d:38:9c:0e:9f:9d:3d:48:63:2c:bb:df:2f:3d:
                    9d:79:05:7c:ab:93:1b:47:1f:21:c8:a2:e5:66:ac:
                    c1:84:a3:75:2e:4a:06:0f:73:25:e3:5c:8f:cd:4f:
                    dc:84:e7:72:cf:17:44:a3:2d:87:61:e8:1a:a9:00:
                    dd:d9:e0:6a:3c:f9:6f:ce:52:46:08:7b:92:14:1a:
                    ea:01:5d:6b:05:fd:67:89:20:e8:ae:a2:89:b6:47:
                    8e:68:bc:51:88:0f:c6:36:d6:b1:14:eb:c3:49:a1:
                    d1:c7:0b:c7:d1:bc:e4:a5:64:e4:df:c5:1d:cd:f7:
                    12:2f:2e:88:8b:25:12:18:f0:aa:bb:09:f3:90:dc:
                    58:d8:b1:02:f9:d0:b5:52:12:4d:5c:7f:39:4f:ce:
                    6d:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:01:34:04:57:8C:3C:54:0D:1F:4D:31:2C:9C:B3:98:EC:10:21:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/5337b138-0fe9-3b6d-ae21-5ff6ff44773e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl

            X509v3 Authority Key Identifier:
                keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:740:38::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:91:6b:29:19:2c:e7:07:fa:2c:bc:da:ad:c9:75:03:8b:74:
         27:f0:ba:be:a0:da:33:6d:71:62:81:ed:45:97:f4:73:e2:29:
         40:d3:68:bb:6f:d2:f6:13:8a:71:aa:b2:48:6b:f1:0c:ba:cd:
         bd:9d:25:3f:98:f7:7d:0b:69:4e:ac:8f:a9:ff:6d:5f:c7:34:
         f6:b1:f4:b1:9d:1f:17:1d:b1:1c:da:4b:0e:e7:c0:a6:af:e0:
         14:f7:84:55:f7:cb:b6:15:5d:f6:34:03:18:fb:41:74:f0:ca:
         88:97:9d:82:9a:dc:38:28:eb:d8:78:64:2e:ba:46:d9:9b:df:
         b8:41:04:9e:bd:e8:04:73:d3:88:20:1d:bb:ae:18:ec:06:0a:
         0a:ed:d7:fd:12:58:a6:9d:3c:38:19:fb:49:f2:1a:c0:30:06:
         de:a7:5d:9a:55:24:4f:25:4d:8f:45:70:8c:b6:a4:b9:8e:a0:
         32:7e:1b:f1:89:29:9b:9f:d8:17:20:ee:a8:eb:2a:3d:0f:51:
         dc:ce:43:10:88:1a:4e:2f:9a:5b:bc:6e:21:d2:4c:6f:8c:d6:
         72:77:33:53:81:1c:e6:14:27:20:b2:c1:5c:7c:2f:84:38:c4:
         ad:9f:71:b3:00:2d:44:8b:17:bf:73:2e:88:d6:e4:b7:e1:57:
         6a:76:91:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 12 15:20:35 2025 by rpki-client