Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/909e0677-e107-3f90-b3d6-d289381c03ee.roa
File:                     909e0677-e107-3f90-b3d6-d289381c03ee.roa (raw, json)
Hash identifier:          wuWnqwPywhciwAumTeDY5jjLKZmWj7Bi7y56bY88nes=
Subject key identifier:   E3:89:A8:3B:90:81:B5:98:42:2A:A1:42:AC:DE:F4:0C:86:5F:2C:5E
Certificate issuer:       /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
Certificate serial:       010D0C9F4328584DE9B07CB1D1C1F8FE0CED4D02
Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/909e0677-e107-3f90-b3d6-d289381c03ee.roa
Signing time:             Fri 22 May 2026 01:00:24 +0000
ROA not before:           Fri 22 May 2026 01:00:24 +0000
ROA not after:            Thu 20 Aug 2026 01:00:24 +0000
asID:                     9009
IP address blocks:        2607:740:39::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 04 Jun 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e9:b0:7c:b1:d1:c1:f8:fe:0c:ed:4d:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
        Validity
            Not Before: May 22 01:00:24 2026 GMT
            Not After : Aug 20 01:00:24 2026 GMT
        Subject: CN=0a309023-9d61-40a1-8609-3cc761905027
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:e0:83:25:90:da:59:29:f3:c4:18:c1:81:94:
                    8a:c7:7c:8c:75:e2:d9:bc:19:c4:6a:b3:69:ce:28:
                    f5:c3:bb:b6:4a:a4:6a:fb:0a:8e:19:0e:30:46:69:
                    54:33:99:7a:d6:c4:61:0a:c6:90:82:64:5b:f4:a2:
                    a7:73:c0:31:73:91:7c:74:dd:e8:74:58:04:76:ca:
                    84:e0:60:60:8e:11:0e:97:31:6a:f5:57:29:a8:7c:
                    66:3b:5c:33:0c:e1:19:1f:bf:52:ad:09:32:e7:79:
                    44:b7:bb:33:09:14:ee:9e:20:0e:9b:29:ec:cf:7c:
                    b2:6b:8e:ed:b8:56:88:d9:19:12:93:85:40:3a:bc:
                    00:95:47:b0:c6:8f:be:f9:75:88:40:86:9c:2f:d8:
                    ba:78:b9:ea:9b:60:d1:bd:10:b4:68:1d:5c:08:7a:
                    84:2b:d5:d0:de:68:07:c4:3b:3e:b3:aa:47:f7:15:
                    bf:86:74:87:22:16:19:4a:23:1d:71:1d:a1:e1:ec:
                    bb:02:8a:05:a7:4f:f4:f8:4e:17:d7:ed:a9:a5:d7:
                    76:5e:00:6d:31:f5:32:0b:ab:58:f3:76:40:34:ea:
                    42:50:88:2d:24:72:07:3c:c1:c7:59:38:cd:7c:84:
                    a8:d8:09:f3:4c:49:9b:b8:99:f2:58:6e:19:df:a7:
                    0c:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:89:A8:3B:90:81:B5:98:42:2A:A1:42:AC:DE:F4:0C:86:5F:2C:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/909e0677-e107-3f90-b3d6-d289381c03ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl

            X509v3 Authority Key Identifier:
                keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:740:39::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:d4:5a:de:e8:47:93:14:39:28:bd:64:78:27:85:ed:58:62:
         3d:c7:1b:7c:94:ca:46:21:39:de:15:b9:38:9c:1d:55:b5:1d:
         4c:4f:37:5a:c7:c5:b0:0d:a7:26:fb:34:69:78:0f:95:e4:51:
         76:ad:24:c5:a7:5a:ab:29:f5:19:2c:ef:90:0d:98:f2:fe:4a:
         82:f8:6c:b2:4f:7a:30:5d:1a:d9:d1:c5:f4:8d:cc:73:57:94:
         ef:4a:e7:37:44:2c:bb:c2:19:e8:b9:ba:3d:c7:82:ac:bc:fd:
         d6:0d:ac:b6:0a:88:f7:6b:be:3e:53:14:1f:54:84:b6:49:23:
         37:2b:52:8d:2d:91:e1:82:29:a8:b6:1c:e3:c1:71:ce:d8:47:
         e9:cf:f1:03:d3:75:27:7e:d0:df:ce:ec:90:3e:41:34:59:f1:
         78:17:e0:dd:d8:d1:24:fb:24:85:a1:4a:66:2f:e2:18:78:5f:
         3b:5d:d1:7c:ad:ac:94:38:b4:b6:04:fd:0a:bc:f5:84:b0:f4:
         d7:57:5b:23:db:e4:68:f7:cf:1c:37:e2:22:00:99:28:13:9f:
         aa:3e:af:d7:0f:31:92:89:c6:63:0b:7b:11:1e:4e:8d:1e:d8:
         f3:1f:9f:75:5d:b8:87:8f:2c:c4:e0:7d:94:85:20:49:44:dc:
         73:b3:c6:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:51:53 2026 by rpki-client