Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/e59c1ef8-d0f2-32cf-aa96-f81c05ff3eb1.roa
File:                     e59c1ef8-d0f2-32cf-aa96-f81c05ff3eb1.roa (raw, json)
Hash identifier:          pyrnRUZ2GllXFi9wA09Go8+Yv21TzYOGQoeRgf80j4A=
Subject key identifier:   9B:B9:18:EB:12:9B:92:B7:6E:03:C7:74:F4:AE:B5:CA:14:06:3F:C1
Certificate issuer:       /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
Certificate serial:       010D0C9F4328584F4973F35A58FD4E287DDA2740
Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/e59c1ef8-d0f2-32cf-aa96-f81c05ff3eb1.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     9009
IP address blocks:        2607:740:2a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:f3:5a:58:fd:4e:28:7d:da:27:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=91c057cc-e499-4637-8a6e-a8c01859ae40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:7d:38:c7:4b:e6:12:0f:3c:f0:cd:0f:21:28:
                    ff:f2:2c:80:e7:b1:a2:fb:ae:29:d5:f6:2f:6a:18:
                    5a:b9:dd:e5:1f:f9:7b:33:8e:48:7a:36:ae:2f:87:
                    52:e6:a6:3b:70:8f:5c:92:55:04:74:4b:7c:f2:69:
                    54:df:bb:e2:89:9e:a7:d3:19:37:1a:cb:30:19:56:
                    70:e2:4d:9e:39:89:87:6c:e8:92:e5:fa:f5:fb:ed:
                    89:b0:99:96:87:a6:76:2f:41:1c:ab:13:ff:ec:d6:
                    2b:67:66:8b:82:ec:ff:ae:bf:30:d5:74:3c:d0:52:
                    7b:90:3d:03:ec:9e:c9:84:6d:c3:b0:76:bd:94:c8:
                    9e:3d:fc:30:ec:c2:d8:4b:62:2b:4d:f7:ba:52:b9:
                    b7:e4:73:b8:b1:a4:62:27:db:64:82:da:e8:10:3e:
                    56:07:80:ac:50:b0:83:7f:2c:28:f2:0e:cd:69:7e:
                    a2:ff:cf:1c:54:ef:67:5f:df:68:b8:43:ce:f1:2f:
                    fe:f5:0f:40:6d:7d:28:3b:f1:ef:3c:f6:e4:85:89:
                    19:c5:c2:ba:e9:5b:b6:d2:80:8c:44:77:0b:2e:a9:
                    e3:da:81:25:8f:eb:cc:2a:8d:29:b9:b4:8c:f0:d9:
                    f8:35:c4:8b:2d:0d:b2:c1:42:a7:f3:02:d6:38:8f:
                    af:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:B9:18:EB:12:9B:92:B7:6E:03:C7:74:F4:AE:B5:CA:14:06:3F:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/e59c1ef8-d0f2-32cf-aa96-f81c05ff3eb1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl

            X509v3 Authority Key Identifier:
                keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:740:2a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:58:4f:31:9b:83:c8:5f:ed:4d:c8:7e:ab:69:ee:15:09:4b:
         f7:8c:e8:9b:92:ad:24:86:bd:6f:25:ce:9a:c2:26:08:3a:34:
         67:dd:b2:e5:dc:00:f7:80:7b:05:bc:ca:c8:cf:e2:d7:74:0d:
         23:60:31:42:3e:d4:14:dc:2d:34:e7:58:8d:35:d4:73:e9:84:
         00:f5:93:a1:ef:e2:52:cf:39:93:03:59:e1:40:4c:e9:42:18:
         76:fc:53:75:71:d1:bc:58:3b:65:11:1f:e9:2c:bc:f7:e6:ae:
         0c:cf:39:90:bd:b9:10:4a:9c:15:7a:a5:39:fe:7a:ad:da:e8:
         6d:47:5e:df:c8:ba:6e:f0:39:84:1f:85:90:d4:20:eb:9c:de:
         e0:d7:c4:04:9e:30:c9:5a:46:ea:cf:f8:8a:14:4f:ac:f1:13:
         2a:9e:70:96:a5:a7:b2:ad:c5:e3:22:98:18:2b:a4:72:96:b7:
         85:85:a7:d3:e3:68:3a:88:e4:59:eb:79:8a:94:d9:eb:5b:f5:
         4c:a1:bf:65:69:0c:34:1a:66:d1:46:23:9c:b5:ae:4f:15:50:
         e6:1a:1a:2d:c1:1f:88:3b:4a:7a:1f:71:d2:52:a6:19:ff:b3:
         be:1e:e8:0c:64:e9:3a:63:70:49:c8:75:5e:22:3b:de:27:8b:
         63:fe:58:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 07:38:16 2026 by rpki-client