Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/1c3866cd-264e-3add-bc34-f053e76d5e30.roa
File:                     1c3866cd-264e-3add-bc34-f053e76d5e30.roa (raw, json)
Hash identifier:          SrmgiBsqYucEw07uEDXgIj8ACx3JtnUQWoOBWGDr3do=
Subject key identifier:   00:94:6B:D7:1A:DF:8B:40:02:7B:74:94:1A:B3:E1:89:48:81:FC:28
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584DF4DB492E45D74DF11A5C0800
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/1c3866cd-264e-3add-bc34-f053e76d5e30.roa
Signing time:             Tue 26 May 2026 01:00:24 +0000
ROA not before:           Tue 26 May 2026 01:00:24 +0000
ROA not after:            Mon 24 Aug 2026 01:00:24 +0000
asID:                     852
IP address blocks:        2001:56b:9fe0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f4:db:49:2e:45:d7:4d:f1:1a:5c:08:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: May 26 01:00:24 2026 GMT
            Not After : Aug 24 01:00:24 2026 GMT
        Subject: CN=afb01cfb-6a27-49d5-9bb7-1e5398972cec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:62:2a:00:04:7b:22:55:25:d6:c3:56:74:08:
                    50:4b:d7:d3:05:69:25:ad:fb:82:f8:96:a9:c4:92:
                    68:e5:36:28:a2:d0:cd:73:fe:cf:00:d2:6c:af:c6:
                    c2:6a:6d:fe:d3:32:3e:63:ea:77:fb:c3:2c:05:12:
                    0e:1e:bb:41:22:84:6c:6e:d1:0b:6a:eb:e0:ed:8c:
                    85:be:31:e3:4d:f1:52:7b:08:68:a8:87:f3:51:0c:
                    54:79:4c:ec:f6:4a:c8:d5:95:96:da:96:6d:ac:9c:
                    92:f8:b7:29:00:ca:c9:ed:85:6c:5e:02:e7:e3:f5:
                    ad:96:41:e2:30:56:73:aa:da:8a:e6:4e:20:21:95:
                    c7:0b:d1:6f:e9:d9:52:73:ef:43:d3:18:5a:ee:2b:
                    13:57:fa:b7:1d:67:e1:61:b9:f0:4d:fd:7a:3b:6a:
                    2a:89:37:f5:6d:45:83:14:42:38:1d:73:f3:9c:43:
                    93:64:18:00:b6:e1:2c:9a:c2:a3:f2:56:91:4f:d5:
                    9d:37:70:80:a3:19:a2:cc:81:0a:59:1f:ca:f4:25:
                    5a:4e:4d:a2:fe:67:81:33:74:cd:3b:94:46:8d:bb:
                    f8:5a:71:ce:2f:2a:8b:f5:96:52:d5:1b:e4:a0:26:
                    e7:07:da:f3:53:25:e0:64:ea:bf:e8:01:f9:92:38:
                    10:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:94:6B:D7:1A:DF:8B:40:02:7B:74:94:1A:B3:E1:89:48:81:FC:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/1c3866cd-264e-3add-bc34-f053e76d5e30.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:56b:9fe0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         f3:f0:2d:45:a8:13:8e:8c:ee:5f:cb:e7:84:8c:2a:37:99:c0:
         42:59:16:bd:07:3c:8c:5d:22:c4:09:6d:04:d2:62:73:df:20:
         ca:b1:cc:e7:cc:c8:b1:65:98:5b:d4:c3:ba:dd:71:18:e7:74:
         57:77:b4:6c:1d:26:7c:c1:e7:49:fb:75:bd:f1:38:ab:dc:63:
         a5:5e:e8:d6:18:59:43:74:78:80:c4:92:ee:3a:8b:5f:22:c4:
         03:b7:fb:cb:0d:5a:a7:22:7c:1c:b6:ef:31:1b:fb:c6:c7:88:
         d7:04:42:51:97:a7:40:d8:94:d7:07:8f:44:94:ef:6a:a1:0e:
         c0:39:05:ba:85:33:7d:45:45:8f:6c:90:cd:98:8d:39:32:dc:
         a2:98:8d:50:ea:0b:a9:81:1a:fe:de:e1:fd:18:da:b8:3b:5d:
         a5:84:f8:fa:ac:41:17:84:97:18:75:bb:7f:a7:28:61:a7:e1:
         a2:91:20:36:4b:ca:f6:ca:94:02:a3:e6:01:8f:0d:14:d5:33:
         1a:81:cb:27:6b:b5:70:35:27:13:ae:43:ce:4b:37:22:d2:30:
         b0:f2:3a:78:de:61:f9:49:66:85:3b:3d:6a:36:88:22:b0:88:
         ca:25:2c:ff:ad:36:11:c8:b1:2a:a6:b3:68:e7:b0:ee:48:91:
         81:2d:fb:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 22:47:40 2026 by rpki-client