Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/e2f6556d-7cd4-395e-9a5d-8c7c9aee8a50.roa
File:                     e2f6556d-7cd4-395e-9a5d-8c7c9aee8a50.roa (raw, json)
Hash identifier:          Y/pCV6S17wiNQUuniGuBh3GhfKbxzx68VxU0jpDppoA=
Subject key identifier:   A5:39:DE:0B:F7:CF:2F:B4:5F:85:30:B9:0C:CC:E6:80:C2:29:A5:1B
Certificate issuer:       /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
Certificate serial:       010D0C9F4328584A6825F64117C8ED37628DD380
Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/e2f6556d-7cd4-395e-9a5d-8c7c9aee8a50.roa
Signing time:             Fri 04 Jul 2025 13:01:06 +0000
ROA not before:           Fri 04 Jul 2025 13:01:06 +0000
ROA not after:            Thu 02 Oct 2025 13:01:06 +0000
asID:                     9009
IP address blocks:        2607:740:2b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:68:25:f6:41:17:c8:ed:37:62:8d:d3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
        Validity
            Not Before: Jul  4 13:01:06 2025 GMT
            Not After : Oct  2 13:01:06 2025 GMT
        Subject: CN=ff28e8f8-afe1-45f1-b230-ba4a12651c87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:85:39:71:b1:1f:32:48:0f:c8:bf:8c:40:62:
                    76:24:23:5a:d6:af:7b:0a:b8:c3:96:fa:6a:66:75:
                    cc:73:de:bf:e7:54:88:f4:a7:0c:53:d5:3c:ed:47:
                    70:30:4e:8c:63:53:58:53:0a:fb:8e:88:8a:c1:ac:
                    98:86:1e:11:2a:f8:77:83:14:78:bc:62:29:a7:b4:
                    5b:88:df:a3:ef:fd:76:96:0c:56:ea:6d:ac:99:c6:
                    8e:47:f1:53:62:c2:10:56:74:24:ec:83:3b:5a:eb:
                    bb:87:2f:76:11:ef:5a:c3:e8:d3:8e:29:66:a7:11:
                    6b:af:f9:ed:8c:67:c3:9f:5a:89:ff:6f:58:46:24:
                    d7:7d:4e:83:90:73:c9:99:70:0f:3f:fa:09:86:b0:
                    da:17:4c:45:2f:f7:de:6c:6a:0f:15:c4:61:d2:a3:
                    73:7d:84:3e:5e:fc:c9:68:79:17:7d:0e:84:44:9b:
                    6d:15:2c:ec:e4:7c:22:19:ed:50:7b:54:c7:ed:57:
                    db:08:28:58:4d:0a:54:51:78:84:64:34:80:b5:41:
                    a1:61:c9:f3:65:bf:b2:be:e2:32:cf:bc:70:51:12:
                    4f:e1:4a:b9:29:41:e0:bc:03:ed:be:48:fb:4c:1a:
                    1e:8e:48:2f:52:60:e2:ed:1d:19:78:93:df:69:f7:
                    8f:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:39:DE:0B:F7:CF:2F:B4:5F:85:30:B9:0C:CC:E6:80:C2:29:A5:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/e2f6556d-7cd4-395e-9a5d-8c7c9aee8a50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl

            X509v3 Authority Key Identifier:
                keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:740:2b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:a1:04:64:86:63:ab:bf:37:74:60:ec:07:28:ea:cd:fe:30:
         cb:61:f0:4a:fb:ef:00:cc:d0:34:8a:93:fb:04:56:d4:86:0d:
         b0:4d:6d:2b:11:8e:42:25:31:3c:80:55:ed:44:fa:d2:23:e3:
         32:1a:7f:d2:a9:6a:88:6b:b6:cf:3e:ee:12:6e:d3:61:c3:d6:
         f7:ba:02:7b:b7:ea:46:27:1e:0c:53:90:7c:33:40:be:35:1c:
         61:14:f8:d6:77:b3:c4:6a:c1:50:44:be:c6:53:38:42:d4:70:
         1b:24:68:87:84:15:38:05:3a:09:4b:cc:64:cb:02:2b:ee:07:
         d2:ff:93:cd:03:ed:93:a3:ac:67:d8:95:92:26:98:67:74:52:
         37:c7:8d:50:77:9d:cf:73:d4:24:22:ca:5c:b1:93:28:1f:05:
         8f:a2:34:f7:f3:ce:2b:e9:28:8e:7e:ad:58:28:3c:4a:39:3e:
         0c:e3:4b:06:93:5c:65:f7:04:51:2a:c8:a3:54:f5:ca:ae:4b:
         d0:78:67:53:47:f9:d1:d1:83:3e:0a:2f:20:14:73:1a:87:e3:
         20:70:d1:45:a6:27:99:a4:c8:21:f6:b1:4c:36:37:55:21:6c:
         60:c8:0c:a6:65:5c:ac:41:08:19:b0:be:96:89:13:84:ef:5a:
         a7:28:6f:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 12 14:28:05 2025 by rpki-client