Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/f33be0ff-24c5-33cf-975f-4f33a85de390.roa
File:                     f33be0ff-24c5-33cf-975f-4f33a85de390.roa (raw, json)
Hash identifier:          QHqXMJfNgiPj2yNHXiDUH2msTGrko9aSvjzV5Oe/0BA=
Subject key identifier:   89:AA:DA:3E:1F:7F:69:21:54:03:04:68:20:0C:2F:7E:58:68:FA:ED
Certificate issuer:       /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
Certificate serial:       010D0C9F4328584EA78F1B17A5A5F724A3D7C3C0
Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/f33be0ff-24c5-33cf-975f-4f33a85de390.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     9009
IP address blocks:        2607:740:62::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Sep 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:8f:1b:17:a5:a5:f7:24:a3:d7:c3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=6f474717-65c1-4093-8d01-35b771850ed5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:c4:3c:3b:11:ad:e7:e5:25:19:7e:ce:06:5d:
                    3c:7d:73:f0:7e:59:8a:2c:c7:52:e8:89:84:79:34:
                    6d:c5:c1:0f:b3:33:8c:a9:07:64:89:95:0a:95:12:
                    ae:e9:22:00:a9:e9:a0:2d:73:2d:b5:f4:aa:7e:be:
                    f9:38:71:18:19:98:da:be:fc:83:35:4e:a1:d7:14:
                    fa:41:ad:ff:5f:dc:b2:37:56:6d:72:39:45:d6:0f:
                    37:54:56:6d:43:5b:c5:25:50:98:5d:0d:11:85:17:
                    6d:df:66:6f:2e:19:97:d7:76:09:f7:fe:04:77:d4:
                    74:ed:0b:8a:b9:2e:28:ab:25:71:45:1d:10:b2:75:
                    fc:df:71:5a:5e:1d:16:fa:55:9c:5c:08:98:aa:0a:
                    34:e4:5d:ee:d8:42:f2:1d:9b:fb:dd:5a:21:d7:dd:
                    b7:52:96:0f:58:29:3d:6d:bf:aa:89:a7:6d:4f:a0:
                    65:ef:b5:8e:de:bb:1d:51:4d:7a:06:6f:7f:b7:9f:
                    d5:86:b3:1f:aa:35:b7:f8:ac:7c:fb:64:11:5f:cd:
                    3e:f0:0f:c6:71:db:6f:c6:45:cc:7f:95:9e:e7:79:
                    f0:2e:d2:5e:54:17:f1:bc:2b:c2:3f:4d:65:e5:da:
                    89:75:e2:ad:67:f2:7c:c0:40:6a:88:9b:c6:46:2b:
                    98:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:AA:DA:3E:1F:7F:69:21:54:03:04:68:20:0C:2F:7E:58:68:FA:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/f33be0ff-24c5-33cf-975f-4f33a85de390.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl

            X509v3 Authority Key Identifier:
                keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:740:62::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:f9:95:21:2b:52:24:f0:05:61:de:80:51:d9:ca:ff:80:e2:
         12:fc:a2:2d:d7:e7:28:5a:c4:e3:54:57:82:b6:ef:d2:f5:ce:
         37:80:07:8f:f5:53:8f:83:72:2b:62:ef:d3:72:e1:a5:89:23:
         8e:07:cc:ef:e8:76:37:19:e5:fd:62:b9:d1:73:8e:c2:63:79:
         c6:e7:70:31:87:ae:c6:a4:99:3a:a3:b7:2d:65:9f:68:60:a8:
         5f:b0:3c:f4:28:65:aa:f4:6e:ac:24:11:72:bf:68:c0:d7:c9:
         b2:08:e9:8a:78:89:12:c6:42:00:45:43:f3:08:4f:27:1e:46:
         7d:f7:59:95:49:22:16:99:c7:be:52:32:b4:94:a5:82:6a:44:
         b0:d2:2e:fa:01:0a:c6:ea:94:e9:72:4a:3d:4f:06:85:9a:f1:
         17:7c:b7:a8:bb:0d:85:69:a9:36:f6:fd:f8:16:87:02:5d:91:
         5b:02:1d:1e:ae:fc:6b:17:f1:30:26:d6:f8:88:69:65:0d:0e:
         2a:d7:81:00:98:08:e5:8c:92:98:bf:48:e5:4c:7f:ad:bf:b4:
         73:b0:0e:bc:b3:09:75:ef:96:41:19:8c:e6:81:ce:fc:4f:ac:
         f1:b9:93:45:dd:65:e7:cf:19:e0:29:3b:2b:c0:d7:a9:d1:0b:
         69:29:3a:86
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6njxsXpaX3JKPXw8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3
ZDNkMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
NmY0NzQ3MTctNjVjMS00MDkzLThkMDEtMzViNzcxODUwZWQ1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhMQ8OxGt5+UlGX7OBl08fXPwflmKLMdS6ImE
eTRtxcEPszOMqQdkiZUKlRKu6SIAqemgLXMttfSqfr75OHEYGZjavvyDNU6h1xT6
Qa3/X9yyN1ZtcjlF1g83VFZtQ1vFJVCYXQ0RhRdt32ZvLhmX13YJ9/4Ed9R07QuK
uS4oqyVxRR0QsnX833FaXh0W+lWcXAiYqgo05F3u2ELyHZv73Voh1923UpYPWCk9
bb+qiadtT6Bl77WO3rsdUU16Bm9/t5/VhrMfqjW3+Kx8+2QRX80+8A/GcdtvxkXM
f5We53nwLtJeVBfxvCvCP01l5dqJdeKtZ/J8wEBqiJvGRiuYvwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFImq2j4ff2khVAMEaCAML35YaPrtMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5
OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvZjMzYmUwZmYtMjRjNS0z
M2NmLTk3NWYtNGYzM2E4NWRlMzkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4
NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz
N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5
NGI0MzdkM2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgcHQABi
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACD5lSErUiTwBWHegFHZyv+A4hL8oi3X5yhaxONUV4K279L1zjeA
B4/1U4+Dciti79Ny4aWJI44HzO/odjcZ5f1iudFzjsJjecbncDGHrsakmTqjty1l
n2hgqF+wPPQoZar0bqwkEXK/aMDXybII6Yp4iRLGQgBFQ/MITyceRn33WZVJIhaZ
x75SMrSUpYJqRLDSLvoBCsbqlOlySj1PBoWa8Rd8t6i7DYVpqTb2/fgWhwJdkVsC
HR6u/GsX8TAm1viIaWUNDirXgQCYCOWMkpi/SOVMf62/tHOwDryzCXXvlkEZjOaB
zvxPrPG5k0XdZefPGeApOyvA16nRC2kpOoY=
-----END CERTIFICATE-----
Generated at Tue Sep 1 04:21:34 2026 by rpki-client