Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/9f12aa87-6a5c-3cd2-a4e3-81e2498c1cc7.roa
File:                     9f12aa87-6a5c-3cd2-a4e3-81e2498c1cc7.roa (raw, json)
Hash identifier:          6SMHTomsymDdSvwlKtcZ0W0KSjvHGXgfOSfOipYLY40=
Subject key identifier:   7C:6A:19:81:4E:AE:20:0A:2A:22:FC:17:7B:B8:12:94:30:31:AC:8C
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584D15A25CDB8F41514818076400
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/9f12aa87-6a5c-3cd2-a4e3-81e2498c1cc7.roa
Signing time:             Sat 07 Mar 2026 02:00:32 +0000
ROA not before:           Sat 07 Mar 2026 02:00:32 +0000
ROA not after:            Fri 05 Jun 2026 01:00:32 +0000
asID:                     852
IP address blocks:        2001:569:c000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:15:a2:5c:db:8f:41:51:48:18:07:64:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Mar  7 02:00:32 2026 GMT
            Not After : Jun  5 01:00:32 2026 GMT
        Subject: CN=9697ba33-188d-45bf-bec6-955d20e6ea41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:7b:6e:99:88:8a:58:c7:f1:c1:a0:82:69:8a:
                    99:d1:54:b4:f2:2e:98:b1:b9:62:04:2a:a9:87:7c:
                    57:5d:39:41:2a:42:ca:33:b4:d0:40:b8:12:c5:5b:
                    e2:28:e0:40:42:59:c1:f8:9d:16:bc:ed:42:65:1e:
                    ad:67:b1:55:56:35:ba:f4:a6:20:30:f1:ec:21:9e:
                    28:16:4d:44:95:b3:78:ee:f9:c9:74:f9:de:e1:a7:
                    8a:46:90:c1:c2:6c:d1:b1:3e:1d:f6:57:78:75:a1:
                    01:a9:20:87:72:ff:41:1d:f4:1d:88:99:76:61:d7:
                    16:df:be:e9:68:19:1b:72:43:a7:ea:a6:83:d7:26:
                    5d:c2:26:d5:fa:08:6f:f4:4d:6f:02:b8:d3:5d:68:
                    00:c3:ee:24:bd:b8:75:5c:10:b9:a4:62:98:88:62:
                    3e:f6:79:2b:6b:8e:a0:d1:85:8c:20:90:21:e3:fd:
                    bc:c0:96:87:75:87:4f:6f:63:06:27:28:32:c2:57:
                    8e:72:68:98:61:07:cd:96:e7:01:90:68:5e:bf:38:
                    cb:ae:f5:12:96:96:35:e1:d6:c5:a0:e4:c3:fc:37:
                    d0:b5:48:7b:e2:a6:a2:30:9a:ca:80:19:0b:26:e0:
                    95:88:47:d8:c2:3b:e1:b0:af:2c:12:c5:9e:0c:cd:
                    5a:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:6A:19:81:4E:AE:20:0A:2A:22:FC:17:7B:B8:12:94:30:31:AC:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/9f12aa87-6a5c-3cd2-a4e3-81e2498c1cc7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:569:c000::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cc:35:82:ea:43:f2:cb:59:a3:a4:fd:41:60:78:4e:13:01:85:
         d2:b6:c2:af:52:10:f2:a2:f7:5a:18:ba:cd:9d:25:6a:2e:40:
         f4:93:10:21:7f:0c:e0:be:d1:30:9b:9c:9d:b9:7a:66:2f:2b:
         90:c8:c2:e1:a9:da:3a:81:2d:6f:c9:9f:b8:97:62:aa:16:b8:
         16:77:b0:ad:f5:95:6b:35:2a:a1:61:15:57:5d:30:34:b4:ab:
         c6:ff:11:f5:1f:c0:19:58:ae:17:61:69:1b:70:7c:70:a1:8a:
         1d:b0:87:6f:56:64:01:07:80:aa:46:e6:ec:9f:ff:42:11:09:
         26:8d:0f:4d:7f:26:c6:3c:46:26:c4:01:2c:45:11:1b:88:dd:
         f0:eb:a6:40:0c:ba:d5:e6:d2:f0:ec:04:ca:bd:e7:3a:f9:c2:
         f7:bc:44:fe:a2:2a:62:6f:b8:aa:07:d3:35:2a:63:8e:65:d5:
         bc:fd:c8:43:00:ec:ad:06:1b:b4:a2:0f:76:f1:5e:f1:f4:65:
         85:06:e3:a6:7a:af:4e:ab:44:3c:63:67:79:2d:7f:f1:c5:95:
         e0:68:29:57:c5:c1:2e:fa:65:97:8b:67:17:89:f8:95:1d:10:
         e1:bb:ed:d2:18:67:b4:7c:cc:a0:87:f7:77:64:1a:8f:34:37:
         87:1a:7e:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 23:52:27 2026 by rpki-client