Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/d93dda25-13c9-3b65-a1fd-a54bf749998e.roa
File:                     d93dda25-13c9-3b65-a1fd-a54bf749998e.roa (raw, json)
Hash identifier:          3HD1QJmhx7vQM67KY3MaWDQ49r33APij6ZcPremGXVc=
Subject key identifier:   DB:F9:6F:2A:B6:17:ED:B5:1C:97:7F:29:B7:47:EB:F4:F5:DB:EA:44
Certificate issuer:       /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
Certificate serial:       010D0C9F4328584DE84B368F59E0602ED555B300
Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/d93dda25-13c9-3b65-a1fd-a54bf749998e.roa
Signing time:             Thu 21 May 2026 13:00:32 +0000
ROA not before:           Thu 21 May 2026 13:00:32 +0000
ROA not after:            Wed 19 Aug 2026 13:00:32 +0000
asID:                     9009
IP address blocks:        2607:740:1c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 04 Jun 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e8:4b:36:8f:59:e0:60:2e:d5:55:b3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
        Validity
            Not Before: May 21 13:00:32 2026 GMT
            Not After : Aug 19 13:00:32 2026 GMT
        Subject: CN=6e501d57-032e-4845-b7db-052d90e6f3d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:9c:44:27:00:5d:9f:fb:c4:b5:55:43:ba:af:
                    ed:62:12:da:48:6d:f7:51:db:c5:60:50:90:ae:f5:
                    65:4f:9c:0f:35:ef:b1:11:fb:f6:be:a4:9b:4c:87:
                    5a:51:6a:b0:58:28:71:59:76:58:86:7c:37:8a:3d:
                    2d:9d:fe:f4:29:3e:85:c8:c3:64:37:ae:ce:6d:36:
                    33:a6:5c:fa:9b:16:e8:e5:a3:2c:ea:5f:f1:b0:ab:
                    8f:5c:fc:d9:3f:a7:43:9f:33:3c:9c:f3:d7:4a:a9:
                    95:89:df:dd:50:f9:f2:9c:e7:32:5c:e4:1c:d2:7a:
                    15:78:0a:d5:41:a2:19:af:dc:e7:29:e7:cb:b0:5e:
                    36:57:6f:98:0d:00:a5:0e:d1:fb:4e:7c:b7:43:ff:
                    92:6a:b2:e2:47:13:64:b3:5e:ff:bf:a1:64:76:77:
                    56:52:09:eb:c3:f1:59:7a:fa:47:8e:cc:f8:70:50:
                    0c:d6:9e:7a:d3:74:cc:57:62:ab:97:c7:81:5c:dd:
                    08:9b:8a:b3:43:c9:5d:fe:4b:d5:93:a7:2f:0c:cf:
                    a4:12:66:6c:02:bc:86:ff:bf:74:8a:37:99:87:0e:
                    05:e5:87:13:90:49:a8:52:99:0e:5f:00:ce:2a:03:
                    47:ec:7b:d3:ef:9a:d1:0b:20:7e:be:a8:b0:ca:19:
                    f5:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:F9:6F:2A:B6:17:ED:B5:1C:97:7F:29:B7:47:EB:F4:F5:DB:EA:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/d93dda25-13c9-3b65-a1fd-a54bf749998e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl

            X509v3 Authority Key Identifier:
                keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:740:1c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:3e:40:95:50:72:80:80:6a:27:39:2f:78:b8:4e:23:82:01:
         44:51:30:54:27:c6:0e:b0:1f:cd:8f:de:0a:d5:97:dd:69:7a:
         f0:cd:34:ac:ef:d3:18:31:1d:da:d8:9e:aa:e0:cb:53:c3:fe:
         25:07:b5:b6:e5:4b:f1:b6:93:c0:38:32:68:7b:af:87:f1:66:
         ad:3d:ae:f0:3e:8d:79:85:46:a7:86:87:2d:a7:6c:55:15:0f:
         6d:e8:1e:c3:d6:6e:33:69:95:e4:b2:f3:48:97:08:7c:3f:d7:
         87:75:30:43:ff:7e:36:f9:e3:83:47:61:26:47:09:69:bc:8c:
         6a:77:3b:94:ed:6d:85:d5:39:3d:90:da:10:f8:ce:bb:1b:f2:
         de:9d:5e:19:e0:b2:8a:b5:f9:6e:85:63:d2:9f:e9:17:4b:a5:
         99:c0:1e:bb:f9:c6:7f:56:90:42:db:4a:73:55:76:b4:57:30:
         5f:51:0d:08:2f:6f:fc:d6:95:2b:70:ac:47:f4:8b:66:28:a1:
         2e:f4:c0:2a:f7:68:dc:1a:02:b7:82:7d:e4:42:ac:e9:f4:70:
         e1:48:00:43:b4:0a:b0:bc:86:67:cd:ad:07:83:57:58:b0:43:
         7e:2e:e5:50:24:b7:84:e8:f6:45:b3:9e:c0:4b:98:ae:68:84:
         57:fe:06:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:51:49 2026 by rpki-client