Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/f33be0ff-24c5-33cf-975f-4f33a85de390.roa
File:                     f33be0ff-24c5-33cf-975f-4f33a85de390.roa (raw, json)
Hash identifier:          B8dfKTkHrLp+TStabilxe+hRKQaYwe/A8aXRRpzRhUs=
Subject key identifier:   BC:BE:82:5A:77:1D:25:E9:29:B3:5D:1E:EA:CF:57:04:50:B3:6C:04
Certificate issuer:       /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
Certificate serial:       010D0C9F4328584DDFEB2189BA771CBD36C7C840
Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/f33be0ff-24c5-33cf-975f-4f33a85de390.roa
Signing time:             Mon 18 May 2026 13:00:31 +0000
ROA not before:           Mon 18 May 2026 13:00:31 +0000
ROA not after:            Sun 16 Aug 2026 13:00:31 +0000
asID:                     9009
IP address blocks:        2607:740:62::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 04 Jun 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:df:eb:21:89:ba:77:1c:bd:36:c7:c8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
        Validity
            Not Before: May 18 13:00:31 2026 GMT
            Not After : Aug 16 13:00:31 2026 GMT
        Subject: CN=be50a227-b0ad-4511-a9d7-1a4e3b6921bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:4c:29:b8:51:4d:13:49:e0:cb:45:be:26:c3:
                    99:11:20:dd:9e:26:39:e0:ad:56:cd:37:b2:1a:1e:
                    c2:98:fd:5c:56:23:a4:38:76:ba:a9:7a:2c:b8:72:
                    64:d3:b1:f7:a0:3d:4f:ad:47:c0:72:15:05:2e:ca:
                    3e:82:74:84:e1:e9:d4:59:e4:65:4e:36:33:e5:be:
                    4d:15:2f:56:42:f3:22:d4:1f:cf:73:a8:27:e0:2c:
                    ce:d9:c9:ff:3d:70:92:4f:97:46:0a:e5:68:e8:d1:
                    74:d3:78:b1:8c:8f:c9:c8:2f:82:c6:11:9b:82:ca:
                    1c:e7:32:be:d3:38:31:f7:3e:37:f8:e0:17:2a:4a:
                    e8:ff:7d:94:af:39:2c:84:24:23:7b:e1:6f:bb:5e:
                    33:d7:c1:33:de:c4:bb:53:b8:38:ba:aa:79:d4:4b:
                    36:dd:09:cd:c5:ff:c4:17:1c:f6:4e:46:63:0e:ff:
                    e9:7f:c4:3b:c0:b8:69:9e:da:c9:3f:8c:30:b1:52:
                    49:de:45:6e:26:71:76:10:a2:3f:4b:e9:13:90:4e:
                    f7:36:3c:0e:94:41:bc:b4:2e:38:41:ae:a1:60:c7:
                    81:32:e9:1d:7a:b0:e2:1f:04:0e:73:35:65:25:2d:
                    0e:b0:72:d1:ff:46:39:de:50:59:11:56:bd:74:49:
                    a6:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:BE:82:5A:77:1D:25:E9:29:B3:5D:1E:EA:CF:57:04:50:B3:6C:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/f33be0ff-24c5-33cf-975f-4f33a85de390.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl

            X509v3 Authority Key Identifier:
                keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:740:62::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:2e:66:50:45:e1:db:19:a7:ff:e9:7b:fa:13:3c:60:f1:e2:
         57:bc:89:a3:4f:b2:95:63:b5:7e:43:18:f9:1e:99:bc:5a:2b:
         49:12:c6:7e:8b:03:f3:26:84:27:96:66:1e:6e:c6:35:93:8f:
         83:81:e0:88:e5:3c:64:51:16:47:ce:c6:24:fe:e7:04:8b:2b:
         32:25:39:49:5b:16:fe:e1:9b:98:56:f9:e9:c8:42:c9:75:bb:
         d1:f4:d0:33:f3:5d:d8:ca:ed:1a:3a:d9:17:72:cb:cd:7f:fa:
         bd:de:d0:ea:42:11:fb:b5:5b:68:67:8a:5e:e8:59:b0:42:17:
         85:c8:3a:b7:40:e7:a1:41:8d:03:95:eb:93:cb:90:78:cf:11:
         a1:24:fe:e3:6f:b5:70:25:0d:fe:af:c7:d0:4e:7e:75:5d:b2:
         76:2f:e5:1f:b1:fb:3c:76:38:8b:e5:fb:da:14:7a:26:ef:3e:
         5f:e5:84:83:23:9f:b9:97:65:ae:11:c2:a9:88:df:a9:a9:da:
         99:1d:d1:9e:5b:58:6b:72:87:d2:e2:e4:5d:49:2b:2b:a7:f5:
         cf:57:9c:00:4d:99:8f:7b:95:7d:e6:69:1b:0d:07:d2:d0:19:
         bb:e9:3b:32:43:26:6e:50:ee:f0:4f:b4:6a:d0:18:36:7d:b0:
         73:de:33:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 22:06:13 2026 by rpki-client