Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/f2ea3378-08d9-360d-9857-e9aba7c1e179.roa
File:                     f2ea3378-08d9-360d-9857-e9aba7c1e179.roa (raw, json)
Hash identifier:          zDfP8H2Lov19Dabw80zY7WBMTrpPQrRPa8s2CM3pjjQ=
Subject key identifier:   AC:EE:61:CD:30:85:3C:62:C6:1E:A5:A3:E1:4D:AB:65:60:90:72:ED
Certificate issuer:       /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
Certificate serial:       010D0C9F4328584F4F0828A5ED8EDC315FA2E840
Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/f2ea3378-08d9-360d-9857-e9aba7c1e179.roa
Signing time:             Sun 27 Sep 2026 01:00:12 +0000
ROA not before:           Sun 27 Sep 2026 01:00:12 +0000
ROA not after:            Sat 26 Dec 2026 02:00:12 +0000
asID:                     26042
IP address blocks:        2607:740:49::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 26 Oct 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4f:08:28:a5:ed:8e:dc:31:5f:a2:e8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
        Validity
            Not Before: Sep 27 01:00:12 2026 GMT
            Not After : Dec 26 02:00:12 2026 GMT
        Subject: CN=dc98752c-613e-4a8e-b3e4-04dfc6d3f55f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:31:cc:4f:0c:62:da:a9:3a:39:38:9d:7e:62:
                    7d:13:e8:89:a7:ef:13:70:07:39:d7:e9:83:00:e0:
                    fc:47:56:4a:1a:10:ea:3d:c5:0c:7d:be:cd:be:16:
                    eb:dd:5a:06:11:6c:5f:c9:fa:71:44:fd:90:45:75:
                    df:f0:da:f4:30:c6:a7:13:59:c8:97:f6:cf:a3:96:
                    ff:55:85:a7:8c:4d:7f:8f:39:d1:34:21:09:3b:0a:
                    de:7f:bb:b9:1b:17:5c:b6:2d:79:dc:54:6f:21:cb:
                    66:75:30:08:20:c5:63:78:41:f3:1f:9e:e3:81:d5:
                    e0:15:bf:cc:e9:c9:51:7c:44:8e:c7:cd:2b:27:4d:
                    21:c0:b6:98:55:a8:e3:d2:5d:a2:81:19:80:83:d9:
                    92:05:5c:ad:cd:19:e4:16:89:55:ae:61:d0:54:a7:
                    1a:b4:93:d4:fd:3a:9d:b7:bc:db:5a:d4:7e:38:9c:
                    97:01:a6:45:c2:a8:37:0e:6a:4f:41:14:b6:ae:ba:
                    f0:cb:b7:af:48:4a:6b:a0:2d:82:58:8f:1d:d2:4d:
                    ce:88:82:9e:2e:dc:94:2b:49:09:24:84:99:d7:99:
                    91:6f:11:e3:20:b2:c4:9e:0e:8e:af:76:3d:20:c7:
                    07:fb:dd:ea:6a:bb:ec:a1:bd:81:85:44:21:3e:5a:
                    bb:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:EE:61:CD:30:85:3C:62:C6:1E:A5:A3:E1:4D:AB:65:60:90:72:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/f2ea3378-08d9-360d-9857-e9aba7c1e179.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl

            X509v3 Authority Key Identifier:
                keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:740:49::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:2f:60:57:15:d5:20:48:71:46:a7:4b:61:d7:54:b6:a8:fa:
         69:61:11:65:8b:2b:b6:ed:7e:6d:d2:90:78:84:c1:eb:dd:6d:
         2d:e8:3d:6c:84:dc:6f:94:ac:b8:9b:bd:da:5f:3d:71:96:da:
         f8:c2:13:88:f8:e1:c4:4b:92:7d:d5:e5:9b:14:b0:09:a5:da:
         4a:c0:15:ed:e2:c7:71:63:b5:98:c2:e8:21:a0:0a:40:1b:c2:
         4e:09:48:a7:15:2e:7e:3b:6f:09:30:7c:30:3c:65:c1:d9:a0:
         de:ca:0a:d7:1a:1a:0d:bb:18:3f:82:b1:c5:7a:79:d6:84:64:
         9e:88:5d:45:d2:b1:60:36:ce:9d:a3:81:43:97:f7:97:4e:a6:
         36:19:4e:65:4f:e8:47:eb:52:aa:ff:7b:6a:4b:7b:be:f3:28:
         2c:47:69:eb:b1:6c:3b:57:a9:07:47:61:da:3c:8b:8e:27:7a:
         9a:c4:bb:89:86:7a:14:78:66:2b:cc:d8:0a:11:0e:fd:52:47:
         2e:57:18:50:ef:67:58:ea:0f:b3:d6:0c:27:56:9e:8e:2d:8c:
         57:91:06:a4:86:a5:d6:da:c7:5a:d4:e1:6c:11:6b:7b:53:79:
         3a:48:5e:6b:10:1b:f7:6c:99:64:cb:25:d1:0f:62:d0:de:57:
         6a:f2:ae:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 13:44:36 2026 by rpki-client