Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/1dba0f14-dad9-34cb-a232-c6cb22a53113.roa
File:                     1dba0f14-dad9-34cb-a232-c6cb22a53113.roa (raw, json)
Hash identifier:          cDh+DOT25clD0tZbqli0HDUAbNRsqm4En03jp0vHVRc=
Subject key identifier:   28:11:F7:CD:6E:ED:F4:EE:46:9D:36:0F:7A:23:57:F3:D2:DA:16:F9
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584F15CCF04D56D932AD2D2A5940
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/1dba0f14-dad9-34cb-a232-c6cb22a53113.roa
Signing time:             Sun 06 Sep 2026 13:00:12 +0000
ROA not before:           Sun 06 Sep 2026 13:00:12 +0000
ROA not after:            Sat 05 Dec 2026 14:00:12 +0000
asID:                     7861
IP address blocks:        2001:56b:f00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 16 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:15:cc:f0:4d:56:d9:32:ad:2d:2a:59:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Sep  6 13:00:12 2026 GMT
            Not After : Dec  5 14:00:12 2026 GMT
        Subject: CN=f710763a-762c-446f-9709-ac15111d570c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:02:79:06:66:92:e3:31:a2:84:96:8b:cb:8b:
                    76:fe:75:6c:60:31:47:db:09:b3:fa:eb:6e:28:f7:
                    b9:fe:10:1d:fa:c9:ac:e9:d3:92:ad:e5:41:fd:31:
                    0a:10:06:6d:2d:bf:18:2a:01:39:08:0b:0c:1e:3d:
                    37:d2:72:f8:4d:1d:6d:22:9d:8d:67:7f:14:41:7b:
                    c6:11:a9:2e:e2:bd:84:d3:cd:24:99:59:73:15:8f:
                    95:ef:95:67:60:29:73:75:aa:bb:14:86:3c:b4:42:
                    de:29:f0:e6:99:25:9e:5e:a9:84:7a:24:28:91:90:
                    d2:95:a7:a9:65:77:ba:e7:62:7c:84:bb:ce:f6:e4:
                    cd:66:5a:60:11:f9:7b:d4:00:2c:4c:86:8c:d7:20:
                    85:56:6d:5a:79:95:9c:04:17:c0:7d:b1:62:39:ba:
                    5a:af:3c:c2:e6:cb:e3:50:2c:39:79:54:c6:5e:10:
                    2a:36:e5:1e:24:99:a2:79:09:8b:d9:db:72:58:07:
                    78:c3:dd:67:ec:ce:b3:fe:cf:93:3a:3b:5a:e9:37:
                    d4:ea:f1:da:03:47:0f:da:49:94:5f:e2:62:05:e7:
                    9f:23:49:b2:a4:88:bb:e7:81:d3:ae:a0:0a:9c:9a:
                    25:52:6c:5e:7f:4c:8f:98:1a:04:9b:c7:fb:dd:04:
                    2c:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:11:F7:CD:6E:ED:F4:EE:46:9D:36:0F:7A:23:57:F3:D2:DA:16:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/1dba0f14-dad9-34cb-a232-c6cb22a53113.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:56b:f00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:ca:5b:8c:60:27:7f:b9:75:36:18:11:a9:f8:51:6b:25:6c:
         1b:40:36:80:e5:e1:aa:96:50:41:16:0b:d8:7e:80:6e:0c:73:
         a4:f0:1d:3b:a3:37:09:c8:56:9c:cb:fb:bd:12:ab:5d:7d:23:
         e1:70:2a:5d:c4:6f:dc:39:e2:64:48:d6:7f:5f:c8:d4:a3:04:
         7d:99:93:19:b5:a5:05:06:05:2b:0b:bc:df:b5:17:59:d5:c0:
         db:4f:68:26:bb:17:f6:f5:16:05:50:ad:d4:63:ed:5d:57:9f:
         ae:1b:8d:ac:c4:e9:f8:86:0d:c4:0d:4c:1e:02:6d:ec:d1:ad:
         b2:09:05:6d:98:a6:27:f8:76:bf:0b:5e:b9:28:04:9b:74:01:
         1e:d0:7c:99:37:3c:f6:bd:a1:75:4c:75:30:73:89:96:e2:5f:
         f2:82:67:45:14:20:8b:f2:62:cf:6a:28:55:12:65:05:11:b1:
         b6:a1:27:2b:de:cf:19:db:c3:71:d3:ed:80:05:86:04:40:49:
         20:32:b1:e9:9a:f3:9b:54:43:89:41:eb:a9:e1:85:0c:75:2f:
         9a:d4:39:19:9d:38:32:ab:91:e7:30:5f:eb:19:3c:fc:c5:21:
         fc:f8:54:d8:c3:d2:3a:48:2d:25:3d:df:27:dc:1a:1f:f8:fa:
         b4:b3:c1:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 14 22:29:27 2026 by rpki-client