Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/a2a97d39-6a72-3779-bcbb-cfdbb288c517.roa
File:                     a2a97d39-6a72-3779-bcbb-cfdbb288c517.roa (raw, json)
Hash identifier:          CB7Uxu6b0iCZ+XBOWbOOGih9CriIxR3zvvH41D1VX/A=
Subject key identifier:   1B:90:B2:57:45:72:A1:69:9D:84:BF:C5:73:C6:47:87:59:5B:45:29
Certificate issuer:       /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
Certificate serial:       010D0C9F4328584DE84B3C91D58A0582F85CBE00
Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/a2a97d39-6a72-3779-bcbb-cfdbb288c517.roa
Signing time:             Thu 21 May 2026 13:00:32 +0000
ROA not before:           Thu 21 May 2026 13:00:32 +0000
ROA not after:            Wed 19 Aug 2026 13:00:32 +0000
asID:                     9009
IP address blocks:        2607:740:23::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 04 Jun 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e8:4b:3c:91:d5:8a:05:82:f8:5c:be:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
        Validity
            Not Before: May 21 13:00:32 2026 GMT
            Not After : Aug 19 13:00:32 2026 GMT
        Subject: CN=e1278754-bd8e-406e-8acd-e5a00c421845
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d5:b0:8a:70:48:12:7f:4d:c6:96:bd:90:66:
                    1f:55:66:47:31:ba:41:23:f3:fa:0d:01:49:6a:ae:
                    87:1b:e5:57:6a:c3:3a:93:58:5c:3f:ab:15:01:2e:
                    ac:44:78:01:7b:58:d3:57:8d:b5:55:22:fc:c6:2d:
                    b0:54:19:53:e6:d7:f6:73:75:98:5e:a8:b7:56:cd:
                    1a:ba:9a:91:86:76:41:62:b5:01:e5:fa:1e:cc:b3:
                    0e:b9:a9:b2:7d:7e:cb:7d:7f:b9:d1:e6:9b:ce:46:
                    49:a9:fe:5b:8b:60:0d:b4:90:3e:0e:28:f4:94:09:
                    bb:35:7e:ae:b0:41:47:d6:e7:66:09:a4:9b:c3:34:
                    5b:31:55:3f:68:11:6d:99:27:13:e0:02:68:eb:81:
                    2f:5e:f7:b6:4a:91:41:42:4d:ca:a4:ff:09:3b:6a:
                    41:11:93:52:9b:5d:c9:1b:7f:0d:fd:81:a1:0d:de:
                    4e:b8:1c:5c:b2:b4:7b:06:b2:f0:a0:b9:5a:30:a4:
                    36:7a:f3:89:c5:48:9d:91:4a:ec:f0:68:49:8b:82:
                    ea:57:4b:91:7e:88:10:b0:44:68:e9:5f:15:14:aa:
                    24:3e:79:91:eb:9c:5d:89:b9:9d:85:bf:71:f0:17:
                    28:ff:fb:7c:5e:ec:a6:e9:87:27:db:ee:2a:f4:d6:
                    53:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:90:B2:57:45:72:A1:69:9D:84:BF:C5:73:C6:47:87:59:5B:45:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/a2a97d39-6a72-3779-bcbb-cfdbb288c517.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl

            X509v3 Authority Key Identifier:
                keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:740:23::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:3d:2d:cb:eb:74:55:8e:ea:2a:d8:ca:12:4b:07:4f:2f:eb:
         8f:c1:8d:ac:54:3d:3e:ed:92:48:4a:c1:ea:98:94:05:d7:e4:
         35:a3:f2:8e:c9:19:4f:08:48:57:f7:fe:98:fa:b7:4d:71:7d:
         47:fe:dd:ca:fb:2d:13:c3:ae:f3:fe:4b:a3:64:ea:96:c7:8b:
         1f:65:70:8c:af:8c:03:0b:43:48:bd:e2:f8:77:25:a8:d6:4c:
         a7:6f:70:ad:7e:eb:2f:f8:fe:f0:b5:79:db:1b:51:a4:0d:5e:
         cc:72:b1:fa:2c:03:a7:db:f4:8c:d8:d3:00:64:fa:25:0e:e3:
         2e:2f:82:55:08:33:95:d1:50:7a:6f:a2:d9:99:0c:d4:db:d9:
         a9:64:e9:dc:6e:e9:30:d4:71:98:43:d1:cc:be:15:b8:c3:0c:
         5b:82:5f:68:a3:e9:92:77:95:ae:db:45:e8:ab:37:15:60:1c:
         d6:da:d1:6e:75:a4:e8:69:60:70:6a:f6:0c:04:0c:af:af:42:
         49:84:34:df:e4:1a:4c:3e:5a:dc:d6:6d:76:4c:04:70:bb:1d:
         76:4c:8b:a8:92:e0:49:e6:0a:66:79:d6:33:57:e6:59:9c:2e:
         06:23:5e:e0:93:b2:ea:c7:ed:18:fb:0d:b4:98:2d:ed:cd:e9:
         35:35:32:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:44:03 2026 by rpki-client