Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/705ffea9-a0dc-3fd2-be27-5b56d1e7f898.roa
File:                     705ffea9-a0dc-3fd2-be27-5b56d1e7f898.roa (raw, json)
Hash identifier:          chF+uYbjJnPOBW0x5xbjeZrut8pt39wGOLkMnFNa6vQ=
Subject key identifier:   87:1F:20:D5:7D:78:89:C4:F0:97:4D:1D:76:5D:86:D8:2F:59:A6:A4
Certificate issuer:       /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
Certificate serial:       010D0C9F4328584EAD1C64F061E6CCAF22736A80
Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/705ffea9-a0dc-3fd2-be27-5b56d1e7f898.roa
Signing time:             Fri 31 Jul 2026 01:00:11 +0000
ROA not before:           Fri 31 Jul 2026 01:00:11 +0000
ROA not after:            Thu 29 Oct 2026 01:00:11 +0000
asID:                     212238
IP address blocks:        2607:740:4b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Sep 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ad:1c:64:f0:61:e6:cc:af:22:73:6a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
        Validity
            Not Before: Jul 31 01:00:11 2026 GMT
            Not After : Oct 29 01:00:11 2026 GMT
        Subject: CN=e455e8bf-2007-4e55-a7d7-2ec67699f7a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:20:37:49:8b:f9:cc:dc:06:e3:20:3e:0f:74:
                    59:44:68:5f:ae:c7:14:b3:45:e6:f0:eb:d8:04:11:
                    41:f7:6f:61:89:67:f2:d6:40:6c:bf:2f:88:61:c9:
                    85:ca:68:c9:9b:2e:b2:f1:f6:ae:78:a5:2a:0c:1e:
                    1d:88:49:69:89:c5:8d:f4:98:56:e5:e7:71:e3:c3:
                    e1:8a:1f:10:7c:69:3d:4a:ad:20:5c:75:a2:e0:c5:
                    12:fc:22:b2:5a:d8:d2:9f:56:58:11:47:67:69:6f:
                    72:df:7e:a6:26:6f:a8:d8:48:55:25:2d:62:37:25:
                    81:8b:8e:21:eb:0d:60:8d:52:dc:9f:79:32:51:7f:
                    09:17:f4:83:0f:9f:04:11:69:21:e8:c4:8e:93:11:
                    a9:13:ab:7a:96:4f:c5:da:f7:45:20:71:1a:39:8f:
                    e3:cb:66:f0:8d:3f:9f:6b:fc:9f:dd:ef:34:89:23:
                    ec:5e:15:aa:f1:74:3a:d6:01:61:0a:8f:e8:7b:0d:
                    28:a8:1e:fd:20:d2:2e:f0:40:36:84:14:54:e7:d5:
                    e9:56:bf:aa:fe:58:d4:83:c7:a3:03:68:62:e7:26:
                    28:44:8a:91:bc:50:a6:fc:fd:10:82:07:7c:b8:4d:
                    8e:53:55:ab:f8:19:19:6a:c5:54:68:bc:d6:28:2b:
                    e9:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:1F:20:D5:7D:78:89:C4:F0:97:4D:1D:76:5D:86:D8:2F:59:A6:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/705ffea9-a0dc-3fd2-be27-5b56d1e7f898.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl

            X509v3 Authority Key Identifier:
                keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:740:4b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:a2:23:9d:fe:28:95:96:d6:3b:c0:a4:95:85:f1:a8:6b:91:
         04:49:f8:96:38:c2:a3:b1:17:4c:20:94:34:fd:53:33:c8:b5:
         af:f9:26:d0:17:0d:88:40:d3:29:bc:f5:08:0e:3f:01:9d:45:
         8e:d2:39:50:72:17:60:74:28:c7:2b:01:d7:f2:c0:69:70:09:
         ae:5a:30:0b:80:f4:5b:c7:b5:da:8c:ba:6e:9e:a7:83:9f:49:
         dd:13:82:9f:37:2b:b0:df:13:fe:70:4c:a1:ef:63:bf:71:ac:
         77:51:ea:a7:98:93:0f:e4:f2:0f:43:9f:6f:3f:d0:b6:7c:11:
         65:a2:98:c5:73:26:6c:3f:7c:8d:87:57:fa:43:52:c2:80:1b:
         cb:c5:24:a8:69:8e:db:b7:84:03:6c:dc:9e:8d:ca:5c:09:14:
         40:09:a9:f2:8a:79:0a:ee:da:2b:d9:67:b2:32:b5:bc:00:55:
         7b:6f:4e:19:40:94:a5:03:91:8e:c8:30:83:9b:09:5d:80:ab:
         56:0e:25:4c:ef:de:0a:a8:4f:98:8f:3e:7e:65:f1:f8:ad:ea:
         29:30:5a:56:56:96:2e:22:c4:ea:6e:9f:93:0d:4b:6d:d7:fa:
         1e:9a:1b:d1:9f:2d:71:6a:69:28:be:97:4a:08:50:52:b1:52:
         3a:51:9d:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 03:55:28 2026 by rpki-client