Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/16d0c577-bf2f-3261-80ac-c7ca5f476093.roa
File:                     16d0c577-bf2f-3261-80ac-c7ca5f476093.roa (raw, json)
Hash identifier:          LZWU29Mu2DVtcETtvqafj5/SIMOXYwIuy0MFtmfJ6XY=
Subject key identifier:   7B:5C:33:F6:B7:ED:07:1D:39:5F:E8:34:C5:9C:0D:7B:B1:44:87:FC
Certificate issuer:       /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
Certificate serial:       010D0C9F4328584D4D5A7120804C0C16F46DE080
Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/16d0c577-bf2f-3261-80ac-c7ca5f476093.roa
Signing time:             Fri 27 Mar 2026 01:00:31 +0000
ROA not before:           Fri 27 Mar 2026 01:00:31 +0000
ROA not after:            Thu 25 Jun 2026 01:00:31 +0000
asID:                     9009
IP address blocks:        2607:740:58::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:4d:5a:71:20:80:4c:0c:16:f4:6d:e0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
        Validity
            Not Before: Mar 27 01:00:31 2026 GMT
            Not After : Jun 25 01:00:31 2026 GMT
        Subject: CN=0df4bb92-6d61-43df-9aea-60e6ea55804c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:bf:6b:14:36:1c:df:44:8e:1d:cd:1a:e1:92:
                    3d:a7:15:ba:33:ab:61:a6:d1:cd:d9:7a:19:ff:f8:
                    7e:ca:e5:7e:8d:91:1b:f0:12:4c:f4:c0:38:0a:2d:
                    a8:c3:fc:b9:08:7a:4c:f0:41:0f:12:08:89:c3:bb:
                    2a:17:83:73:9b:c1:c3:f6:53:85:d8:38:f3:5b:f0:
                    84:d1:90:2b:53:20:e1:28:81:92:c1:e0:0e:b8:a0:
                    1a:78:69:c6:6d:27:c3:96:50:fc:24:19:ce:cc:e9:
                    3d:e2:37:be:47:53:2c:3e:7d:99:c9:a1:55:9c:e3:
                    a2:aa:67:ef:b3:be:24:d0:93:2f:78:98:d5:78:29:
                    86:5e:04:25:5b:29:0a:24:df:6e:d7:16:8d:75:9e:
                    7c:cf:e5:0e:26:0f:df:ce:86:6f:44:4f:97:63:7e:
                    20:a9:8b:9d:46:00:82:c0:95:69:68:26:53:24:16:
                    59:d4:87:c5:36:34:3d:55:e0:f3:63:64:fa:77:84:
                    b3:20:80:8f:c8:35:14:2b:2c:67:29:14:fd:ad:5d:
                    a8:d1:db:1d:15:f1:a7:1b:e7:c4:bf:76:a8:39:ae:
                    e9:bf:b7:a8:12:bc:17:ea:e5:7a:29:87:75:cc:d4:
                    fe:b7:3d:fd:1b:ad:4c:ff:14:eb:14:47:73:96:be:
                    29:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:5C:33:F6:B7:ED:07:1D:39:5F:E8:34:C5:9C:0D:7B:B1:44:87:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/16d0c577-bf2f-3261-80ac-c7ca5f476093.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl

            X509v3 Authority Key Identifier:
                keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:740:58::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:bb:67:92:45:2a:cf:27:7e:c5:1b:55:9d:7a:b3:d9:c0:37:
         db:77:87:f5:50:6a:c7:4b:60:4a:2d:20:6e:8b:25:0d:6e:10:
         26:b2:6b:bd:3c:2c:84:d1:f8:dd:20:82:b0:89:46:51:3d:dc:
         29:59:09:dd:68:db:0d:5c:bb:da:1c:f2:58:fa:14:2b:de:30:
         59:68:c6:51:a2:36:19:bb:ef:a7:6a:41:2b:f3:3b:94:89:92:
         c6:f2:28:f9:5f:c1:55:f5:ed:fc:47:a6:5e:f8:53:0b:c9:38:
         71:65:21:b9:2d:8e:42:a1:90:0a:e8:07:29:f7:30:94:33:8c:
         ad:db:1b:75:77:97:f3:8e:77:36:c8:e8:07:fb:ed:97:31:a8:
         c3:eb:ab:8d:22:a5:72:22:94:0d:81:aa:38:94:9a:27:a4:7c:
         5f:92:56:73:87:07:e5:5a:75:a7:f2:91:56:b4:7f:8b:3b:bb:
         4c:33:85:7b:b8:27:81:33:0b:77:07:cc:8d:16:e2:63:37:29:
         9e:f6:05:ad:2a:21:4b:7a:9f:55:4f:e7:7f:1c:f8:db:9c:51:
         a3:38:ad:bb:60:f8:aa:f6:41:d8:8d:4e:18:29:c8:ff:e0:3c:
         6d:77:4a:05:9c:7d:96:c8:69:b5:90:cc:af:a5:4d:b7:6d:d3:
         31:7b:01:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:59:18 2026 by rpki-client