Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/c9742980-b03c-3933-a5f7-2e8db38a20b9.roa
File:                     c9742980-b03c-3933-a5f7-2e8db38a20b9.roa (raw, json)
Hash identifier:          VzMCXw6rWEszgZFPWt5C7VKZe5EDj14Wz7zsaWwejjo=
Subject key identifier:   26:6E:84:B3:BF:C1:39:83:E8:FE:E3:13:D5:03:04:8E:44:1B:56:D9
Certificate issuer:       /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
Certificate serial:       010D0C9F4328584CDB020B03670E5A0DFEF09980
Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/c9742980-b03c-3933-a5f7-2e8db38a20b9.roa
Signing time:             Sat 14 Feb 2026 02:00:32 +0000
ROA not before:           Sat 14 Feb 2026 02:00:32 +0000
ROA not after:            Fri 15 May 2026 01:00:32 +0000
asID:                     9009
IP address blocks:        2607:740:57::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:db:02:0b:03:67:0e:5a:0d:fe:f0:99:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
        Validity
            Not Before: Feb 14 02:00:32 2026 GMT
            Not After : May 15 01:00:32 2026 GMT
        Subject: CN=4ce2bf13-4ed2-46f5-8a9e-2521bc48d615
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:87:00:88:41:1a:9c:45:41:9e:64:d5:bb:13:
                    f1:8d:96:5c:f4:6e:49:2e:22:96:6c:3b:c3:e3:87:
                    a3:d6:ac:2e:a0:62:26:a7:2e:d8:27:2a:7d:df:ca:
                    06:bf:6f:7b:fb:0a:1a:bb:a0:ce:1e:7e:02:3e:bc:
                    16:43:64:b5:56:b4:09:13:fa:5e:e9:25:f3:4c:8c:
                    bc:b1:5b:06:6f:74:53:cf:34:81:d1:66:44:e8:b3:
                    75:00:e2:c3:79:f1:ca:30:ce:04:65:62:d0:ae:9d:
                    cf:fb:f9:a9:0c:c8:64:a8:d8:a7:17:f8:42:ec:4c:
                    84:b9:bd:6e:8a:5b:25:8a:a9:c2:77:e4:43:e2:8c:
                    0b:99:02:fe:c5:d0:bc:5c:9b:db:85:bd:98:0b:f9:
                    50:aa:d2:1f:c2:39:06:ad:08:49:b9:1f:dc:9b:b7:
                    0d:c8:4a:34:ed:4a:42:c3:33:58:67:11:f5:80:d3:
                    ff:b6:9e:3d:79:1c:70:d1:b7:bd:3f:af:5c:18:a6:
                    b9:f5:9c:b9:3f:43:e4:c0:f7:e0:db:f9:9f:03:58:
                    0f:2e:cd:85:27:cb:ce:15:9a:4d:37:c8:0e:f6:0f:
                    52:da:d7:ff:89:d5:08:0e:a3:e9:81:2d:d8:9f:87:
                    c8:4a:7b:ac:be:fa:4d:42:ce:df:80:39:9f:c2:32:
                    62:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:6E:84:B3:BF:C1:39:83:E8:FE:E3:13:D5:03:04:8E:44:1B:56:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/c9742980-b03c-3933-a5f7-2e8db38a20b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl

            X509v3 Authority Key Identifier:
                keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:740:57::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:6d:92:f7:ae:26:24:c2:50:2f:20:f7:9e:9f:09:1e:25:ca:
         bb:7e:16:f6:c8:0a:df:88:dd:44:b1:14:d9:98:43:f2:79:4c:
         b0:33:ac:74:47:e9:bf:f7:ce:ba:b8:56:e4:32:5f:fa:04:09:
         8d:65:e1:ca:3c:c1:0f:5c:bb:dc:cf:92:1f:0d:51:af:c0:9c:
         43:92:79:d0:73:8d:12:fc:0d:a3:8c:3a:95:58:34:d7:1f:97:
         8a:2c:2c:be:3c:39:62:40:53:4d:ae:f9:68:e1:9e:9b:44:7d:
         26:a3:75:e6:f2:03:56:88:fa:04:43:86:5e:e5:0f:a5:47:f6:
         91:48:77:fa:d1:37:45:ef:81:62:ec:ac:48:9f:ed:e0:2a:6a:
         5b:ab:49:de:d5:39:dc:ad:37:ba:e5:3c:ee:14:11:f2:ac:e8:
         a8:3d:6e:6b:a9:64:4f:f1:41:1b:f8:81:6b:1b:c5:84:8f:db:
         4c:86:64:5c:89:b7:c7:3a:1f:dc:2e:5f:b9:09:f5:0b:02:e2:
         6b:06:16:74:55:47:30:77:6d:70:0e:72:37:3a:0f:38:14:c8:
         5c:35:96:43:aa:d6:53:fe:6a:38:b0:e9:c0:ce:65:80:76:e9:
         c6:c9:1f:8d:5b:80:9f:03:19:65:78:c5:9f:b9:29:5a:9f:f1:
         e1:2b:99:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:31:07 2026 by rpki-client