Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/5aa51862-3d2c-39bf-be77-93452e666607.roa
File:                     5aa51862-3d2c-39bf-be77-93452e666607.roa (raw, json)
Hash identifier:          su5bP1OpWS8p3cL9zk6L8DTR5b0fx7upqqdBQyhcsxI=
Subject key identifier:   1D:6A:E4:82:0D:C8:82:C2:48:4A:00:97:C3:17:97:5D:32:74:E0:8C
Certificate issuer:       /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
Certificate serial:       010D0C9F4328584EA01531C0A0B5D4D9BCDB3580
Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/5aa51862-3d2c-39bf-be77-93452e666607.roa
Signing time:             Sun 26 Jul 2026 09:00:12 +0000
ROA not before:           Sun 26 Jul 2026 09:00:12 +0000
ROA not after:            Sat 24 Oct 2026 09:00:12 +0000
asID:                     133480
IP address blocks:        2607:740:41::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a0:15:31:c0:a0:b5:d4:d9:bc:db:35:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
        Validity
            Not Before: Jul 26 09:00:12 2026 GMT
            Not After : Oct 24 09:00:12 2026 GMT
        Subject: CN=e295180d-039f-47dd-88f1-52546063d86f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:c9:7f:50:fe:b6:bb:ec:aa:4f:78:fc:0d:20:
                    f8:9a:e8:4a:bb:a4:66:66:4b:bc:42:13:fc:37:c6:
                    c8:61:eb:43:ce:14:4f:6b:c0:60:1d:9e:d6:81:87:
                    f0:ba:29:c7:bd:cb:e0:a3:36:d4:36:b8:ad:22:52:
                    90:d8:18:f8:ec:5a:a4:60:20:f2:a6:98:74:48:bb:
                    5a:50:93:50:20:e9:37:43:b0:de:88:e8:ba:01:fa:
                    4d:8a:e4:f1:24:f0:8e:c3:6f:fb:a0:b1:84:a2:b5:
                    51:9f:0d:f6:be:04:2a:66:75:2f:e9:4e:b6:61:f4:
                    59:c4:28:85:cc:ff:b3:bb:39:97:cc:0c:a7:70:fa:
                    c8:33:05:ea:1e:30:85:90:03:44:f3:8d:f1:3c:53:
                    f5:e3:b3:1c:bc:18:fd:79:67:44:c4:e4:38:f7:fc:
                    a3:6c:34:75:33:51:76:f1:2a:5e:5d:e5:8c:1e:f3:
                    7e:89:17:de:15:98:bf:3f:a4:ed:1b:70:01:2f:11:
                    52:d3:4e:8f:de:f2:a2:8a:e3:db:b1:01:0a:57:e2:
                    17:66:df:bd:3f:fa:44:cc:db:11:4a:87:e0:c1:27:
                    76:98:dc:80:92:b7:48:ae:65:ab:0d:d2:bf:9e:88:
                    d8:fb:44:87:eb:f9:fe:ac:b3:24:eb:37:b4:e6:1f:
                    27:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:6A:E4:82:0D:C8:82:C2:48:4A:00:97:C3:17:97:5D:32:74:E0:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/5aa51862-3d2c-39bf-be77-93452e666607.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl

            X509v3 Authority Key Identifier:
                keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:740:41::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:02:95:da:17:67:d3:82:92:55:e6:46:39:dc:ca:d7:0f:28:
         1e:68:0e:54:f3:8d:d5:9d:72:93:30:b3:2f:46:37:2e:fd:f9:
         54:61:87:53:48:e1:86:bd:16:6f:b4:de:a2:bc:b0:1e:c1:88:
         23:d5:bd:65:ef:6f:9f:56:c4:ad:2a:39:b6:96:cb:97:7b:11:
         ee:27:d7:55:21:e3:9b:22:65:26:6c:fa:00:6f:9e:16:16:8e:
         11:da:7b:33:03:c6:5a:5a:9b:02:20:9b:ae:7f:a0:d9:e2:5c:
         86:48:7a:ab:e3:65:f2:ed:60:b4:97:66:41:d0:99:49:82:df:
         e4:47:5d:1b:25:1f:0e:a0:ca:97:fc:3a:93:52:f3:c6:2f:b9:
         bb:08:5e:1e:6d:76:63:b6:e4:04:15:fb:e2:0f:19:40:be:bd:
         bc:68:ec:6b:fe:10:51:ae:c0:ac:94:a7:99:ed:10:8a:06:2c:
         1b:96:fa:fd:1c:50:19:bb:04:52:dc:03:c1:54:61:40:2b:98:
         be:5e:24:b0:e8:e1:c3:d0:de:77:62:29:5b:4f:ea:77:80:88:
         55:fa:09:e8:db:53:a1:39:ca:4c:3f:1f:69:14:0f:c0:51:da:
         82:40:44:7b:13:dd:ca:8b:6a:b6:2b:34:cd:66:9a:9c:2c:9e:
         7a:75:bf:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:16:04 2026 by rpki-client