Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/f7d21d96-d256-3aab-9e7e-57e21046fd47.roa
File:                     f7d21d96-d256-3aab-9e7e-57e21046fd47.roa (raw, json)
Hash identifier:          HBRxRfxp1EySJ8L9Sy4VtoT2YeRB1furbgdFry6LHJc=
Subject key identifier:   B6:2B:C8:3A:42:69:B6:AC:47:12:EE:74:41:74:DE:98:FB:4D:CC:98
Certificate issuer:       /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
Certificate serial:       010D0C9F4328584F4973B9F2063644D6F8417B80
Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/f7d21d96-d256-3aab-9e7e-57e21046fd47.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     9009
IP address blocks:        2607:740:35::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:b9:f2:06:36:44:d6:f8:41:7b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=98133750-2b6e-4a8f-a151-9ebdd72a799a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:7b:27:3e:97:06:fc:9a:c9:52:7a:e1:04:58:
                    de:d2:59:cf:32:8c:a4:98:85:d0:17:91:9b:88:6c:
                    d3:74:d1:8d:42:01:c1:20:71:a9:82:c9:8a:1d:af:
                    08:ff:3a:8e:78:77:f2:5d:ec:6f:65:59:c0:71:82:
                    37:3c:6f:3b:2b:8c:c6:f7:d9:7d:d5:bb:cd:c4:29:
                    86:f4:8f:0c:a7:4f:67:f6:48:6c:5e:87:57:a8:13:
                    49:42:8f:62:0c:f9:11:6c:05:a0:89:c4:ed:7d:46:
                    a6:20:a8:2f:bd:9d:87:74:f3:08:07:21:78:ff:c2:
                    f0:6a:be:73:ab:5b:0c:e0:eb:c4:d0:29:b6:21:f6:
                    5c:2f:69:e5:0e:ee:5c:94:39:f9:50:5e:3e:7f:31:
                    0a:73:38:ff:3d:dc:c3:6d:49:05:50:c0:6c:f3:43:
                    e6:74:21:33:c3:a4:86:bb:ab:96:98:bd:c4:fb:4b:
                    9e:26:42:eb:dc:78:8b:c6:5c:a3:1b:8e:4d:42:92:
                    72:ec:db:9f:59:a0:77:99:fc:bb:4a:84:f8:46:83:
                    be:40:7d:f1:8f:0a:f4:d9:e3:12:52:bb:d7:10:6a:
                    8c:f7:22:1e:9c:4a:9a:1f:19:9c:1f:ff:30:c8:11:
                    da:c7:c4:be:75:0f:b6:c5:19:9b:10:3e:8e:b9:11:
                    01:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:2B:C8:3A:42:69:B6:AC:47:12:EE:74:41:74:DE:98:FB:4D:CC:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/f7d21d96-d256-3aab-9e7e-57e21046fd47.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl

            X509v3 Authority Key Identifier:
                keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:740:35::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:af:20:21:dc:41:ff:ca:3a:4b:a9:4f:28:63:c9:bf:61:bf:
         12:68:31:56:aa:4b:e9:61:5a:c7:eb:1d:da:7c:8d:34:ae:78:
         0f:9f:c4:34:b2:45:6b:d9:bf:e4:f5:d8:e9:28:22:78:36:46:
         ea:c8:15:31:ed:b9:b9:5a:8c:3f:e9:b1:3d:7f:fb:26:f7:cb:
         29:48:49:3b:fc:a6:78:78:28:98:a2:6f:ad:84:55:5f:49:c9:
         53:e1:5a:88:1e:ab:e9:4e:79:3d:e6:4a:bd:44:18:df:74:f6:
         a9:ac:22:0a:27:52:84:70:a3:56:be:cb:aa:81:1a:31:45:86:
         4b:00:03:6c:2a:74:84:d7:d7:e4:b8:46:26:91:90:98:aa:8b:
         57:68:f7:7c:79:b5:87:bc:4c:a3:5d:f0:03:2a:0c:91:09:7d:
         d6:eb:92:6d:f0:4b:cc:df:61:47:f7:99:7a:03:ea:29:bc:36:
         94:06:28:ce:46:7f:18:f5:39:1d:e3:f0:1e:49:b1:7b:b6:5f:
         48:fe:84:67:34:9a:ed:0d:01:3c:03:87:9f:61:ed:d3:b9:a7:
         34:87:95:99:8a:15:20:f6:e7:25:2e:f6:44:b4:e0:63:bf:e0:
         b6:44:43:5d:8b:2c:9b:e3:b2:5d:0c:71:ea:a3:0c:68:06:74:
         b8:56:af:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 20:13:41 2026 by rpki-client