Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/f33be0ff-24c5-33cf-975f-4f33a85de390.roa
File:                     f33be0ff-24c5-33cf-975f-4f33a85de390.roa (raw, json)
Hash identifier:          RFU0jExJMTwHtcsZmCVqt4YRxPd9UwzFjuEeSXFEns0=
Subject key identifier:   5C:4F:34:8D:3B:D3:CF:F4:F5:1E:40:EA:02:90:65:83:48:4F:E1:B6
Certificate issuer:       /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
Certificate serial:       010D0C9F4328584CFF4CD6089501093B1E929680
Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/f33be0ff-24c5-33cf-975f-4f33a85de390.roa
Signing time:             Fri 27 Feb 2026 02:00:31 +0000
ROA not before:           Fri 27 Feb 2026 02:00:31 +0000
ROA not after:            Thu 28 May 2026 01:00:31 +0000
asID:                     9009
IP address blocks:        2607:740:62::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ff:4c:d6:08:95:01:09:3b:1e:92:96:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
        Validity
            Not Before: Feb 27 02:00:31 2026 GMT
            Not After : May 28 01:00:31 2026 GMT
        Subject: CN=4f49b7de-a38f-4218-9443-b79335fca381
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:b4:78:1e:5b:c0:a0:47:23:2d:18:2e:c7:32:
                    62:f2:4a:dd:b7:42:db:cb:fb:00:73:5c:79:74:fe:
                    68:73:02:b3:32:c1:96:d3:17:52:5c:b3:95:e7:db:
                    3e:f5:48:9a:04:ee:c7:0c:d7:94:88:af:87:14:ee:
                    e1:0b:2e:34:41:20:0a:56:1e:3e:9b:9b:9b:17:fc:
                    46:92:dc:2a:ea:2b:11:62:10:67:37:05:4e:c2:e1:
                    78:f5:d2:8f:2c:1a:66:80:f9:28:37:63:aa:53:66:
                    b7:a6:9a:af:2e:67:28:45:33:44:ce:9e:99:a1:3c:
                    3a:36:86:05:20:3b:21:9e:1b:e0:34:3b:75:53:61:
                    8c:63:5e:04:05:91:2f:db:ab:95:a7:6f:c4:24:cf:
                    e7:2f:56:fa:fa:70:55:a9:63:73:c0:5d:04:41:9b:
                    9d:2b:48:96:a8:bb:1d:35:eb:48:11:79:0a:e3:9e:
                    76:8c:f9:89:72:bc:02:1c:a5:d3:b0:a0:f7:bb:0a:
                    1e:6a:79:b4:67:1a:d9:73:fb:f5:29:83:b5:53:64:
                    02:bd:0e:64:ca:74:05:8d:4f:80:31:8e:8e:98:5b:
                    b1:00:0f:20:f7:f9:e1:49:87:e9:ab:d4:c5:26:3c:
                    69:6d:a8:88:9a:4e:5e:e4:6a:27:93:47:f4:24:c3:
                    50:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:4F:34:8D:3B:D3:CF:F4:F5:1E:40:EA:02:90:65:83:48:4F:E1:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/f33be0ff-24c5-33cf-975f-4f33a85de390.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl

            X509v3 Authority Key Identifier:
                keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:740:62::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:bb:ad:e6:c5:47:80:65:ab:86:64:26:05:27:29:0f:03:c0:
         99:59:b5:8d:5c:ed:49:7d:48:c6:c7:f3:94:64:65:06:24:62:
         cb:e8:da:11:ff:37:b2:8c:1b:79:34:53:78:b9:4a:b3:98:8c:
         35:ff:e8:6a:ad:44:49:a4:f2:3b:a7:f6:d7:03:96:79:f2:a6:
         46:34:cc:7d:89:2f:0c:62:9a:6c:b1:ad:ed:82:cb:83:38:ec:
         a8:61:3b:84:5f:80:c9:5f:14:7e:51:f6:aa:12:dd:0f:f4:b6:
         37:70:07:2a:fd:ac:ab:fc:24:dc:ba:2c:b1:6c:8f:21:69:57:
         f9:87:46:7b:08:a9:02:4a:7c:8d:eb:30:8e:54:1b:a4:25:c3:
         13:6f:be:f3:bd:25:91:d8:bf:52:cf:be:c4:6c:7b:a7:73:6c:
         d8:3f:e5:a1:c8:8b:fb:f9:1d:55:3f:ee:a9:44:d8:32:eb:2d:
         fc:d4:0f:e7:b7:6b:92:18:fc:d2:87:9c:2b:62:4a:b8:1b:a6:
         7a:d7:48:8a:e8:d6:0e:41:30:0b:50:f9:74:5c:aa:ec:f9:5c:
         1e:8b:bf:d4:42:c0:f0:9b:3b:cd:22:78:bb:78:9c:30:3e:69:
         f9:81:cf:dc:e6:c7:9e:13:61:80:d3:9c:9a:76:18:dd:72:4e:
         86:71:c1:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:02:03 2026 by rpki-client