Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/99f57e95-f252-322c-b610-0e25f2a01dec.roa
File:                     99f57e95-f252-322c-b610-0e25f2a01dec.roa (raw, json)
Hash identifier:          zOiryWbdq+0n/xQrUYfkWdJwsv18fkI6p2TaDx109Nk=
Subject key identifier:   9F:67:B5:B9:60:B3:6A:E9:ED:F7:3D:58:0B:92:65:49:22:10:AE:EA
Certificate issuer:       /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
Certificate serial:       010D0C9F4328584EA78837BCB5B5D2CB0C9B2400
Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/99f57e95-f252-322c-b610-0e25f2a01dec.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     9009
IP address blocks:        2607:740:6f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Sep 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:37:bc:b5:b5:d2:cb:0c:9b:24:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=456a64ff-55ee-47d2-ae67-15b232914884
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:1c:43:8c:eb:00:b8:06:66:75:15:ca:12:38:
                    b8:b0:4b:55:da:43:fa:f0:f8:f3:9a:80:60:38:e3:
                    c2:76:64:18:6f:74:1a:bc:7a:c3:e1:01:0e:f7:76:
                    7e:c1:11:f0:2b:b9:db:0c:5e:8f:90:89:39:f0:5f:
                    57:d5:3d:e1:90:0f:47:62:90:c3:19:3e:4a:8f:d2:
                    a6:eb:79:6c:f9:ed:d9:7d:d4:5e:af:d0:4f:f3:e0:
                    a2:9f:e2:d5:12:98:6c:ea:26:d0:d8:e0:c9:1d:07:
                    c9:38:8b:4a:b6:10:c5:71:f0:4a:6c:d6:41:72:e6:
                    cb:e3:a3:8e:77:44:5a:1c:9c:40:24:3b:85:c4:15:
                    be:35:02:bc:26:c2:51:31:ce:b5:1b:64:24:3a:18:
                    eb:7b:32:f4:0d:9b:7f:87:22:7f:77:36:ca:90:3b:
                    94:e7:23:26:9d:75:13:38:90:88:8f:20:a9:fa:1c:
                    f2:c6:24:70:5a:e3:0c:2b:6b:ac:e9:79:34:b4:e0:
                    12:73:3e:df:8e:1e:15:f3:ab:03:1f:d2:22:6e:f6:
                    a7:0c:ce:6f:18:96:33:dc:06:d7:2f:f7:87:ca:df:
                    df:e5:c8:43:dd:d7:18:ab:84:be:24:d4:a6:ca:99:
                    6d:ba:c4:e4:be:37:a4:c3:9b:d2:38:2d:36:0c:3f:
                    b0:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:67:B5:B9:60:B3:6A:E9:ED:F7:3D:58:0B:92:65:49:22:10:AE:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/99f57e95-f252-322c-b610-0e25f2a01dec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl

            X509v3 Authority Key Identifier:
                keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:740:6f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:f1:cc:99:2e:8d:df:f3:e8:d0:3d:c7:19:95:d9:97:c1:60:
         4d:72:42:ca:96:dc:04:c5:50:bb:5a:d3:f7:2c:f2:55:08:b6:
         b8:da:c9:b5:35:d9:97:0b:6c:ef:93:2f:c1:66:3c:08:9e:df:
         a7:5a:45:a1:23:0d:3a:65:16:cd:64:0a:bb:04:55:67:d4:b4:
         fd:21:ae:ae:51:f4:54:cc:5e:89:b0:c1:44:f0:23:be:df:99:
         9e:81:e5:cd:fc:57:ce:cb:55:77:b8:9a:68:29:5b:16:02:31:
         84:f4:ab:53:7a:1f:e0:6b:85:07:c8:68:31:64:fe:a7:d3:3f:
         46:aa:be:c4:47:87:c6:71:c7:28:2b:ff:7f:75:89:9b:8b:ab:
         a8:61:f9:10:b3:3b:ac:18:da:3f:61:bd:e2:a4:0f:6c:ba:a1:
         ec:54:e0:ab:15:01:e2:6b:4d:0a:69:24:cf:a5:b4:02:fd:96:
         ab:7d:2f:af:1c:9a:b8:94:30:93:0e:cb:58:30:9b:0f:a8:60:
         ba:df:63:b5:30:6f:ad:3a:36:a7:16:45:aa:e3:2c:d1:e0:85:
         dc:ef:ac:1f:5b:a1:59:4d:39:53:5e:d6:fd:69:d3:13:03:38:
         cc:0f:24:2d:4a:d9:b8:58:78:26:76:f9:56:70:76:42:a8:99:
         ce:74:6c:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 01:57:30 2026 by rpki-client