Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/e59c1ef8-d0f2-32cf-aa96-f81c05ff3eb1.roa
File:                     e59c1ef8-d0f2-32cf-aa96-f81c05ff3eb1.roa (raw, json)
Hash identifier:          XEO3ylmqzyyp8j81tv+4QVGaKJbsvnQx5Qt9mu7+oUk=
Subject key identifier:   4D:4F:C9:4C:DD:83:97:E1:A1:C5:A6:94:29:59:31:A5:55:69:C6:42
Certificate issuer:       /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
Certificate serial:       010D0C9F4328584D07ACF7CD06D0C00887E21008
Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/e59c1ef8-d0f2-32cf-aa96-f81c05ff3eb1.roa
Signing time:             Mon 02 Mar 2026 02:00:31 +0000
ROA not before:           Mon 02 Mar 2026 02:00:31 +0000
ROA not after:            Sun 31 May 2026 01:00:31 +0000
asID:                     9009
IP address blocks:        2607:740:2a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:07:ac:f7:cd:06:d0:c0:08:87:e2:10:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
        Validity
            Not Before: Mar  2 02:00:31 2026 GMT
            Not After : May 31 01:00:31 2026 GMT
        Subject: CN=8626c537-a623-425a-b3be-7ae1834c5279
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:53:98:7d:06:49:a0:f4:0b:d5:d3:d3:53:39:
                    b2:ac:f5:03:e1:6b:cd:88:1a:91:56:d5:2e:fc:c8:
                    b3:79:f6:4f:f2:e6:5e:02:5e:6a:d5:d7:c3:4d:7e:
                    6e:ae:d5:ae:95:54:fd:d9:32:d4:7c:ac:9c:cb:86:
                    f7:00:e5:47:1c:51:c5:66:d8:b1:e4:d9:2c:06:cd:
                    31:42:d4:c9:b0:79:01:7c:fd:53:44:68:5b:1f:0f:
                    7d:f6:57:71:2e:b5:62:85:f5:59:47:b9:8e:ff:22:
                    a2:eb:84:15:62:5c:1b:ba:04:2d:59:7d:34:bc:b7:
                    8d:ed:3c:6f:b9:a2:dc:ab:16:0a:23:c7:58:50:2b:
                    39:f2:a0:f9:b2:56:9a:75:22:6c:1e:9b:71:b0:ad:
                    96:6f:2d:da:28:f0:48:9f:1e:51:5e:5f:e7:d7:a1:
                    95:ce:67:ae:a3:2c:8e:bb:61:f0:86:08:90:16:01:
                    0a:0a:bb:d6:bc:db:3e:f3:0c:18:6b:b2:d8:ae:aa:
                    03:a5:66:20:78:b8:b9:4b:78:99:c8:03:8a:ba:e7:
                    64:d7:ae:62:6b:f9:1b:76:f7:79:61:bd:47:71:9d:
                    35:1a:b0:6d:bc:14:29:68:f6:ce:ce:86:40:4b:ab:
                    c9:c7:2a:c1:8c:d0:4c:d8:61:a9:30:59:45:a2:26:
                    90:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:4F:C9:4C:DD:83:97:E1:A1:C5:A6:94:29:59:31:A5:55:69:C6:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/e59c1ef8-d0f2-32cf-aa96-f81c05ff3eb1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl

            X509v3 Authority Key Identifier:
                keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:740:2a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:48:2a:f5:7a:fb:cc:48:e9:8f:29:74:7c:74:0c:1a:41:53:
         bd:ae:db:bd:5e:3c:31:02:6f:ef:c4:e7:98:47:7a:41:c2:9e:
         24:cc:68:bf:dd:92:c9:07:3c:63:f7:b9:98:78:b8:c5:8c:98:
         2d:9d:cc:cb:c3:10:23:61:a2:59:15:f8:64:a4:f6:8e:35:88:
         39:fe:05:11:f1:f9:84:26:66:51:91:db:9b:47:5f:07:f0:9e:
         b3:90:d0:87:22:f8:3a:62:41:92:10:06:9f:1d:95:23:9b:f8:
         27:a5:95:ae:2b:87:ac:58:3a:f9:74:33:1a:f7:57:72:db:f3:
         a9:70:51:b2:d2:02:c0:ec:34:8b:87:17:75:79:9e:fb:4b:9e:
         43:2f:66:e3:8a:d3:02:a8:2b:31:ea:64:3e:0d:00:b2:e6:79:
         59:d8:61:d6:6d:d3:35:73:68:c1:33:a4:99:db:60:8a:97:cc:
         8a:5e:21:a7:7f:c1:0a:2f:4f:fc:62:1e:8f:51:56:31:d8:ef:
         ef:23:5e:19:6e:1e:f8:86:2f:91:2e:e2:15:61:01:33:6c:1c:
         fe:e9:a2:80:78:f9:d5:13:7f:f3:ea:6c:4e:fb:e5:ff:63:28:
         d4:e2:be:9e:ca:78:8a:78:08:8c:60:dd:95:d4:91:b9:4b:ac:
         1b:e0:db:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 11:26:39 2026 by rpki-client