Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/2fac2b11-eae6-352f-b5f0-44e1af5f9416.roa
File:                     2fac2b11-eae6-352f-b5f0-44e1af5f9416.roa (raw, json)
Hash identifier:          a9CMTYfESyArzvhIAj47l+08hK6ymH2Wez5jJs8ty6o=
Subject key identifier:   D5:A7:88:A8:EA:6C:D7:19:93:6F:90:E0:C2:0A:02:BD:FF:B9:7A:79
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584DF640A128864DA6D620567300
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/2fac2b11-eae6-352f-b5f0-44e1af5f9416.roa
Signing time:             Tue 26 May 2026 13:00:31 +0000
ROA not before:           Tue 26 May 2026 13:00:31 +0000
ROA not after:            Mon 24 Aug 2026 13:00:31 +0000
asID:                     852
IP address blocks:        2001:56b::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f6:40:a1:28:86:4d:a6:d6:20:56:73:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: May 26 13:00:31 2026 GMT
            Not After : Aug 24 13:00:31 2026 GMT
        Subject: CN=6d671fbd-3f71-448a-86f4-8540bd061e56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:a6:a4:ae:ba:bb:e7:2d:c2:ae:fd:c7:cd:17:
                    b1:57:22:4c:51:fb:24:27:3d:72:f9:73:e1:12:ca:
                    61:d4:38:44:90:3e:5c:52:8b:50:1f:81:60:d2:a1:
                    5d:6f:ad:fa:da:7d:ee:8a:ea:11:c6:62:e1:b3:cd:
                    d8:fe:2e:28:72:90:de:ed:a9:9c:e7:ca:b7:07:5a:
                    56:c3:c3:0d:ed:21:a4:cc:e8:6b:dd:db:20:1e:ae:
                    21:10:d9:74:7c:ba:24:8b:97:01:a6:c7:c6:98:67:
                    89:20:a9:75:7d:9e:41:1a:37:e7:12:fb:60:db:eb:
                    07:97:76:ad:87:e3:0b:e6:f7:97:32:3f:5a:bb:6d:
                    09:9d:72:41:85:ff:c5:c3:86:3a:fe:7f:9f:ca:48:
                    be:f0:3b:2d:31:f2:80:44:91:0b:5b:dd:db:bb:18:
                    34:4a:46:6d:d2:a4:02:b8:83:3a:1d:89:f1:6a:53:
                    d1:51:5f:d2:ab:f9:a6:2c:d8:18:ae:32:4d:a0:d7:
                    d7:93:72:f9:e8:b8:3b:2d:06:21:3d:bf:1f:ef:aa:
                    9c:35:b5:9a:0d:6d:d1:b8:7a:86:7b:a1:ef:69:88:
                    b5:6b:84:e7:c3:f0:35:3a:81:95:56:40:61:9e:78:
                    9f:76:ef:c2:89:42:2d:71:11:0e:7d:c5:7a:aa:7a:
                    74:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:A7:88:A8:EA:6C:D7:19:93:6F:90:E0:C2:0A:02:BD:FF:B9:7A:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/2fac2b11-eae6-352f-b5f0-44e1af5f9416.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:56b::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:23:62:0d:bf:15:e4:8e:93:ce:90:a4:6e:f9:5b:08:b3:62:
         4e:61:d4:59:3f:95:e1:34:4b:d1:1b:a2:ff:26:14:a3:82:96:
         75:de:e9:6f:9b:86:72:13:48:51:e8:74:5e:8a:18:ef:54:cc:
         da:02:33:8e:e8:58:ea:2b:34:e2:ac:9d:c1:3b:fe:9d:85:55:
         2b:a9:7c:78:05:df:4b:93:d5:3c:27:31:b6:47:3e:1f:fb:3e:
         3e:c3:66:6b:5e:e2:d2:21:84:2a:39:a2:68:a4:cd:89:49:6c:
         6d:18:17:96:fd:35:e4:98:f0:7f:b5:98:25:3f:19:5c:86:38:
         4a:2a:b8:d4:5a:b0:12:d0:e1:a5:10:9e:11:e3:28:a6:41:61:
         49:2d:f9:8e:ab:6d:ad:7f:6e:96:93:9f:6e:9a:c5:e3:1c:96:
         4f:b7:8d:80:49:34:79:3f:83:af:90:57:50:9f:64:3c:47:2f:
         77:b9:e4:27:cd:6c:cf:e9:49:58:a3:69:3b:42:b7:b1:4c:f4:
         e4:9f:b9:35:93:47:e5:8b:dd:14:c9:51:b1:bf:32:9d:83:65:
         96:a8:87:d7:23:a7:ba:00:b9:fd:f0:2f:7a:cd:ec:30:bc:31:
         d0:d6:2a:38:bd:74:a5:56:23:47:a1:75:4e:3c:47:98:aa:61:
         bd:69:a0:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 22:49:47 2026 by rpki-client