Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/705ffea9-a0dc-3fd2-be27-5b56d1e7f898.roa
File:                     705ffea9-a0dc-3fd2-be27-5b56d1e7f898.roa (raw, json)
Hash identifier:          U7KjVsZFWp0kogj7vr56sjSHvR1wHswHIJ9ctsn2mEg=
Subject key identifier:   20:BE:7D:78:85:F2:48:65:0D:57:9E:50:B4:32:DD:B3:03:CB:BB:C4
Certificate issuer:       /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
Certificate serial:       010D0C9F4328584E0A70092BF2D0E5E84B4F1810
Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/705ffea9-a0dc-3fd2-be27-5b56d1e7f898.roa
Signing time:             Tue 02 Jun 2026 18:32:03 +0000
ROA not before:           Tue 02 Jun 2026 18:32:03 +0000
ROA not after:            Mon 31 Aug 2026 18:32:03 +0000
asID:                     212238
IP address blocks:        2607:740:4b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 04 Jun 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:0a:70:09:2b:f2:d0:e5:e8:4b:4f:18:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
        Validity
            Not Before: Jun  2 18:32:03 2026 GMT
            Not After : Aug 31 18:32:03 2026 GMT
        Subject: CN=86cfca22-4a8c-436b-8546-b4824ac86e3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:a5:02:c1:1a:24:59:46:46:fe:67:86:15:0b:
                    0d:4c:d4:3b:aa:5c:c4:c1:c3:76:c8:ea:57:79:4d:
                    1b:b9:94:40:2e:b9:32:68:56:3e:ad:13:1e:dd:f9:
                    7b:21:ef:88:2f:56:8c:11:0c:dd:e6:fb:42:55:b9:
                    db:26:f8:49:fb:a2:9c:cf:48:c6:f8:cb:0c:82:77:
                    d6:85:af:82:03:5d:51:c7:5e:0b:82:1c:62:6b:69:
                    83:68:50:e5:cf:6d:08:d6:76:9d:07:c0:90:fc:ad:
                    52:93:89:1a:f5:f1:30:1a:c3:e8:23:f7:7c:16:9b:
                    8f:dd:53:56:11:a7:f3:42:5a:3a:5a:a0:aa:4e:01:
                    bf:5d:5a:1f:ec:0b:3b:95:13:2b:0d:af:4a:58:d6:
                    41:2a:68:51:6b:8f:90:e6:28:ed:3d:f4:d4:12:0d:
                    09:6f:1d:24:ee:89:d0:03:fe:29:c2:5d:cb:58:e5:
                    55:c6:c4:04:80:3d:ba:a4:9a:7b:8a:7d:cd:f0:d3:
                    ea:99:7f:f6:a3:33:70:5a:62:58:2e:0b:97:a6:5f:
                    66:76:60:26:03:65:2a:bb:9b:71:a1:d6:2e:75:db:
                    85:63:fa:69:0c:af:c7:2d:0a:18:bb:00:bd:10:9c:
                    fa:5a:4a:0c:c2:8d:3f:93:60:3b:bf:30:c1:a9:21:
                    e5:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:BE:7D:78:85:F2:48:65:0D:57:9E:50:B4:32:DD:B3:03:CB:BB:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/705ffea9-a0dc-3fd2-be27-5b56d1e7f898.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl

            X509v3 Authority Key Identifier:
                keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:740:4b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:24:04:35:79:c4:08:d3:2b:70:9e:f0:64:e1:bc:fa:39:4c:
         61:56:1b:3b:2b:0f:a7:e3:22:02:60:89:43:8d:20:e7:c3:81:
         89:6b:20:ce:63:f2:25:61:17:3e:a0:7c:ff:da:3f:39:79:bd:
         41:ef:fb:c9:1a:1d:f7:61:f1:a1:07:c2:d7:d5:7e:69:10:27:
         3b:fa:a6:6f:3b:1f:74:4a:39:19:ea:35:13:e9:4e:93:eb:d8:
         6f:1f:51:d9:b1:1b:12:4a:a7:a7:7d:d1:6b:84:c1:07:56:4e:
         48:72:38:03:11:08:90:fd:0a:01:89:43:ca:23:91:ee:1d:43:
         61:62:72:1d:d4:16:ff:69:79:9a:b3:ce:34:bb:81:9b:da:43:
         bd:89:c4:6b:b7:89:9c:09:30:4f:10:6f:3e:3d:f9:60:5f:ed:
         39:37:69:cf:39:2a:61:2b:ca:45:f7:85:1f:20:95:72:88:96:
         09:ea:29:4f:8b:a0:30:fb:6d:1c:3e:bd:8f:0b:fd:df:11:23:
         2d:4a:b6:e1:93:0d:3b:c8:da:c4:1c:fe:7e:ab:ed:69:2b:3f:
         ac:ed:d4:f3:3f:10:1a:ce:03:1d:de:e2:77:6d:9f:28:d2:9f:
         b9:da:40:a6:2f:84:b2:0d:55:58:32:cc:ed:48:cb:2e:4c:96:
         16:86:26:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:41:18 2026 by rpki-client