Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/0386289b-1e11-3e7e-ad9b-ae64318e48d9.roa
File:                     0386289b-1e11-3e7e-ad9b-ae64318e48d9.roa (raw, json)
Hash identifier:          uXBJ0ohcS3CLQ6im8AGEpHZf/wMFJ1CyQEraQLhTtlc=
Subject key identifier:   12:17:1B:6E:B8:01:C0:7F:D1:B1:DB:3F:F8:AD:5A:34:66:F9:44:73
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584D143D2B22E9E38B60D2003700
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/0386289b-1e11-3e7e-ad9b-ae64318e48d9.roa
Signing time:             Fri 06 Mar 2026 14:00:40 +0000
ROA not before:           Fri 06 Mar 2026 14:00:40 +0000
ROA not after:            Thu 04 Jun 2026 13:00:40 +0000
asID:                     852
IP address blocks:        2001:56b:9ff0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:14:3d:2b:22:e9:e3:8b:60:d2:00:37:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Mar  6 14:00:40 2026 GMT
            Not After : Jun  4 13:00:40 2026 GMT
        Subject: CN=fca3f7d8-20ff-4763-8050-5fafeb03ac61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a2:c4:bb:cd:8e:04:81:8a:f5:fe:de:77:06:
                    8e:db:29:d3:d3:42:ae:14:75:eb:33:92:52:de:15:
                    1c:f2:ad:68:dc:06:1f:fd:0d:d2:75:be:50:34:40:
                    d9:08:27:e3:94:be:09:dc:ed:0b:11:4b:8b:13:92:
                    e4:e3:d3:d3:a4:3f:78:67:12:05:7c:a6:e7:d8:d6:
                    b7:db:32:ce:55:af:12:9e:1b:91:b7:b9:d6:23:8c:
                    f3:b7:54:12:e0:10:76:23:fc:2f:76:2c:e6:f8:5b:
                    fb:d8:b2:15:30:1d:1e:6c:a7:6a:5a:ec:5c:2a:b8:
                    74:e3:33:f7:e6:64:45:09:ad:13:dc:48:37:64:a8:
                    f3:19:bf:9a:d4:26:c0:d1:95:19:be:27:38:66:96:
                    ba:71:7e:d6:cb:74:c8:b1:f9:29:74:68:8c:6e:2b:
                    b7:a1:b4:a5:64:9b:95:21:96:10:d6:db:2d:7e:36:
                    b7:79:14:97:8c:16:8b:9f:93:c6:b8:2d:e3:e6:5c:
                    ff:6c:77:dd:e1:a9:2f:36:41:56:29:f4:3f:d0:ec:
                    a4:ad:cb:39:9d:fa:dd:91:bc:48:87:09:22:c9:bc:
                    07:d9:2e:50:bb:10:f2:9e:45:67:02:1f:b3:4d:78:
                    6c:43:0a:ca:c3:c7:c0:a4:04:00:42:25:ea:c5:69:
                    ee:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:17:1B:6E:B8:01:C0:7F:D1:B1:DB:3F:F8:AD:5A:34:66:F9:44:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/0386289b-1e11-3e7e-ad9b-ae64318e48d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:56b:9ff0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:51:21:f2:f9:7d:71:c2:76:4b:64:c7:c2:1b:4f:c0:99:d9:
         77:5d:ad:1e:6a:f2:40:14:5f:fe:a7:3e:45:0d:32:ba:dc:2a:
         21:b7:3c:74:25:d9:5b:dd:5e:76:43:93:ec:e9:5b:e1:f9:04:
         a6:32:0c:1e:44:6b:bb:0e:3b:4a:e5:24:29:f9:e9:4b:db:cb:
         7a:1a:fe:af:ad:2e:bf:a3:73:4d:4d:76:ba:eb:0f:05:49:a9:
         c3:c4:de:14:b0:48:e3:cd:1d:47:43:a0:b1:b0:a0:21:6e:cc:
         98:3f:4c:aa:ca:59:b3:f1:11:da:24:f7:19:76:34:cd:a5:ff:
         2c:65:61:3a:2c:0e:1f:12:35:af:57:b0:6d:91:4f:f8:3d:e3:
         77:a7:06:5e:19:70:f2:a1:2b:28:ee:16:c9:3c:28:e5:38:d1:
         60:58:da:3f:5d:b8:36:89:41:2f:65:89:f5:2b:fe:c8:f4:e3:
         50:9d:0d:cb:ed:05:af:00:5f:f4:74:2c:9c:f1:91:67:ea:dc:
         43:18:a9:e9:9b:95:82:f8:95:be:95:9b:34:9a:9f:2d:47:71:
         6d:2b:66:79:0f:4f:19:f7:3d:38:f0:4b:a7:42:cf:c5:72:2a:
         6d:03:98:50:51:b3:bf:da:8b:cc:b7:4a:ef:d3:ee:67:b5:65:
         70:8f:f3:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 23:54:49 2026 by rpki-client