Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/14ed9dee-5979-34ce-b91e-2db8c5253a7c.roa
File:                     14ed9dee-5979-34ce-b91e-2db8c5253a7c.roa (raw, json)
Hash identifier:          OaGdONmDCJ97bXd8Uk5BcPOve4XUbvmMG/S5NiBme+g=
Subject key identifier:   9A:49:58:12:FB:8C:23:D9:06:3F:2E:CB:B2:99:E6:BF:CA:7B:B6:56
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584D143D2F2145D3FCEA24BF2C60
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/14ed9dee-5979-34ce-b91e-2db8c5253a7c.roa
Signing time:             Fri 06 Mar 2026 14:00:40 +0000
ROA not before:           Fri 06 Mar 2026 14:00:40 +0000
ROA not after:            Thu 04 Jun 2026 13:00:40 +0000
asID:                     852
IP address blocks:        2001:56b:3f70::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:14:3d:2f:21:45:d3:fc:ea:24:bf:2c:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Mar  6 14:00:40 2026 GMT
            Not After : Jun  4 13:00:40 2026 GMT
        Subject: CN=c4a91f98-8423-4091-a8ea-f966946d6076
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:4e:5f:cb:b2:a5:d9:db:8a:b0:d1:5a:b0:e8:
                    7d:d7:0e:51:c8:4b:0d:93:ec:66:64:e3:2c:63:0d:
                    d2:d9:ca:f2:1c:38:8d:fa:00:cb:b4:40:e3:e7:03:
                    c8:d2:50:3e:ab:bd:e2:42:83:55:1b:75:f3:bf:42:
                    64:27:16:96:72:0e:5c:cd:31:c8:4b:32:85:8b:e6:
                    cb:7a:86:38:b1:52:6f:fa:ae:53:f2:97:06:74:72:
                    5c:de:95:70:71:3f:a5:cb:46:72:00:69:c4:ff:08:
                    0a:a7:01:5e:2b:48:d0:11:3d:32:a6:95:6a:94:89:
                    59:7a:b5:85:a6:5b:1c:6d:3c:de:6c:ab:98:6a:96:
                    65:e7:20:1c:24:7a:f0:4c:3f:fe:7d:be:47:fb:0e:
                    36:4c:ca:5e:17:4b:4d:c3:62:bc:70:9c:d1:1c:26:
                    00:aa:9c:80:1c:e3:ab:ee:9d:57:39:8c:36:a5:a2:
                    7d:1a:67:d3:35:3b:04:f7:4f:9b:e0:b1:33:fd:f6:
                    3f:01:5a:3e:a1:e7:b6:b8:2a:1a:9c:c3:85:36:80:
                    c6:0c:d4:ca:ca:c3:b8:db:0a:a6:f5:f5:1e:12:50:
                    53:e0:da:3a:32:e9:e1:67:90:27:07:43:64:19:df:
                    41:c7:ca:61:2a:c0:16:4d:62:51:8d:b4:a4:a6:ef:
                    35:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:49:58:12:FB:8C:23:D9:06:3F:2E:CB:B2:99:E6:BF:CA:7B:B6:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/14ed9dee-5979-34ce-b91e-2db8c5253a7c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:56b:3f70::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:45:36:a8:0f:18:f4:0d:81:e6:d8:89:99:4b:d3:64:c3:cc:
         43:5c:13:9f:ee:67:37:37:19:d8:e2:3e:c0:b7:7c:ab:7d:5c:
         6b:7f:7f:ce:25:04:6b:8e:2b:10:9a:17:b4:9a:57:9c:3e:5a:
         7f:3e:d6:fd:2a:c6:64:c8:a3:9b:18:8f:de:db:9e:22:8c:bb:
         e9:79:9c:ee:ae:75:08:47:63:c1:e7:d8:86:c2:81:e0:8e:cb:
         85:7b:a3:b6:d0:a4:bb:85:e2:11:92:37:d6:e8:be:15:4a:5c:
         c3:b2:89:10:8b:ba:7c:56:24:7f:9d:b8:92:84:98:44:18:21:
         d5:fb:1f:35:7a:2d:05:0c:59:8c:e1:ba:94:33:cd:3d:8e:2e:
         7f:0b:28:7d:ad:a6:ac:b2:04:89:95:b3:9b:2b:30:a8:53:3e:
         70:13:08:f5:5a:53:30:74:01:58:10:9d:0d:d7:f2:01:41:5a:
         cd:10:d0:66:3e:c6:6b:fa:84:86:30:a6:75:f0:5d:85:73:49:
         a4:b0:c4:74:8d:d0:8e:df:51:5b:fa:07:1a:a2:16:e2:0d:f0:
         83:e6:01:8b:89:51:9f:16:01:b9:a7:63:60:08:7d:2d:b1:94:
         f7:b7:ee:54:8f:3a:9d:12:c8:c3:20:05:23:36:03:e6:86:62:
         05:52:29:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 23:53:06 2026 by rpki-client