Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/0add0c68-6307-3a1c-9a64-fd4561e55abd.roa
File:                     0add0c68-6307-3a1c-9a64-fd4561e55abd.roa (raw, json)
Hash identifier:          razbjM3pbLyqFicj20VnUiGVx6RFxnm0fxgkWq4Sv/0=
Subject key identifier:   5E:6B:C8:BC:58:05:66:26:ED:A4:F9:CA:C5:1E:EE:B6:1E:F5:76:15
Certificate issuer:       /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
Certificate serial:       010D0C9F4328584D4D5A7112F4E2ED266EDCBF80
Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/0add0c68-6307-3a1c-9a64-fd4561e55abd.roa
Signing time:             Fri 27 Mar 2026 01:00:31 +0000
ROA not before:           Fri 27 Mar 2026 01:00:31 +0000
ROA not after:            Thu 25 Jun 2026 01:00:31 +0000
asID:                     52000
IP address blocks:        2607:740:5f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:4d:5a:71:12:f4:e2:ed:26:6e:dc:bf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
        Validity
            Not Before: Mar 27 01:00:31 2026 GMT
            Not After : Jun 25 01:00:31 2026 GMT
        Subject: CN=edf97052-3eac-40a4-8544-c9a5f1d5376b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:9b:eb:e8:f8:99:55:0a:28:e1:1c:d9:54:0e:
                    ec:a2:62:ee:37:7b:e3:02:f9:0b:b2:ad:7a:9c:18:
                    d5:7b:5c:7d:11:71:5e:05:77:90:51:2b:18:7f:79:
                    77:fa:51:fa:0e:66:93:d4:b1:57:4f:66:d7:6c:e0:
                    c3:f0:47:c2:44:7d:92:c1:f1:e3:2b:42:0c:3c:5d:
                    7d:7c:d4:c0:60:66:fe:8f:af:da:54:b8:e9:06:dd:
                    f6:55:3a:dc:2d:b8:fa:b8:00:89:4a:f5:dd:f0:d1:
                    87:5f:4f:36:74:85:31:57:ad:ec:b5:ad:13:1f:6c:
                    b8:0e:db:91:8a:c2:46:c1:dd:6d:de:87:57:14:79:
                    89:2d:95:08:e4:13:63:e1:04:20:81:02:95:02:1d:
                    1d:64:df:4e:0d:2e:14:e3:2a:0d:30:9c:dc:ae:61:
                    2d:f0:2d:3d:1a:d8:ed:bd:1c:e4:11:30:c9:c7:e7:
                    93:b1:5a:4b:39:56:63:ef:9f:b8:1a:2d:d7:b6:f2:
                    dc:1f:17:c1:d8:e1:a3:b3:0d:71:83:97:07:4f:88:
                    2c:3e:6b:59:6c:d3:84:9c:f8:24:66:ce:a7:89:a1:
                    d7:57:4c:b0:d6:e1:a6:3c:da:fc:24:11:c9:92:fc:
                    c0:27:24:61:93:b8:de:b0:7d:cb:9c:f1:a1:5e:22:
                    90:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:6B:C8:BC:58:05:66:26:ED:A4:F9:CA:C5:1E:EE:B6:1E:F5:76:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/0add0c68-6307-3a1c-9a64-fd4561e55abd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl

            X509v3 Authority Key Identifier:
                keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:740:5f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:60:0a:4c:b4:65:b1:04:b1:e3:2a:71:5c:8a:3e:1b:54:56:
         53:ff:32:c0:7c:8a:07:fe:11:b2:44:12:dd:cb:c8:e8:7b:88:
         c4:91:0a:bc:fa:ec:65:be:57:19:83:06:45:9c:df:c8:b6:5e:
         f1:bb:d9:37:a8:43:e0:30:ae:6f:09:8f:6c:46:fd:61:fa:72:
         60:99:f8:4c:c9:00:64:bf:1c:ed:de:54:56:e6:98:4d:30:a5:
         94:83:91:05:b8:88:fb:b5:5c:c9:09:c8:71:89:e3:fe:60:12:
         91:c5:60:3d:3b:48:3b:b9:71:99:74:58:6b:8b:a2:85:cc:1c:
         d2:ff:3a:68:44:89:4f:5e:41:dc:8b:e6:4e:b5:0c:0b:f4:cd:
         52:9e:c0:4f:ad:d3:ec:a6:81:fe:6b:3c:a9:21:e9:68:af:7f:
         57:0a:bb:36:58:01:13:d3:74:75:73:26:b5:3e:3f:5c:ef:61:
         75:4b:da:bc:98:3d:9a:5b:5c:30:c1:e7:1d:c9:47:48:77:42:
         3e:36:da:93:5a:e4:e8:c6:a7:6d:97:58:1a:7d:29:b3:38:8a:
         ad:cf:8d:f0:43:3b:21:62:11:02:88:38:d2:82:66:d6:fa:1a:
         36:01:52:5a:d3:4d:22:d4:36:fe:ba:28:34:a9:19:26:95:41:
         18:ee:71:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:54:04 2026 by rpki-client