Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/a193d12d-457d-325b-8197-aad7ef2b9787.roa
File:                     a193d12d-457d-325b-8197-aad7ef2b9787.roa (raw, json)
Hash identifier:          TbAnSKlxftf1RB2fs7xpqx8cJMa3W+Zw62Vr71mLOsA=
Subject key identifier:   02:C8:69:B2:F1:51:91:4C:F5:86:39:B7:68:B6:C8:DE:66:34:AA:25
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584DF4DB493AB3664F89B2F914A0
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/a193d12d-457d-325b-8197-aad7ef2b9787.roa
Signing time:             Tue 26 May 2026 01:00:24 +0000
ROA not before:           Tue 26 May 2026 01:00:24 +0000
ROA not after:            Mon 24 Aug 2026 01:00:24 +0000
asID:                     852
IP address blocks:        2001:56b:9f70::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f4:db:49:3a:b3:66:4f:89:b2:f9:14:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: May 26 01:00:24 2026 GMT
            Not After : Aug 24 01:00:24 2026 GMT
        Subject: CN=9d2cdcfa-4e3d-4b53-bc2c-14d894c7ab84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:08:c5:e5:41:d0:4a:bf:cd:e0:06:7c:75:58:
                    6a:12:00:47:57:2a:85:95:96:8a:0e:13:72:c9:b9:
                    eb:8b:e8:f4:e7:c3:c7:45:d7:7e:56:fc:87:b0:2b:
                    1f:6a:cc:0c:82:8a:04:24:e3:93:2e:dc:18:12:e5:
                    46:b7:48:4f:4c:33:c8:23:4a:98:ce:86:dc:bc:16:
                    15:f2:db:77:db:aa:45:9c:17:ad:55:91:d4:f4:cd:
                    2f:71:14:de:27:07:d4:48:cd:d7:a9:75:cc:ce:28:
                    1b:54:65:e1:28:ae:a3:f0:62:87:02:44:e5:43:f7:
                    61:01:ad:ee:b8:75:90:2f:44:4a:8c:04:f8:1e:c9:
                    8b:6e:3b:28:59:c8:aa:15:e9:0f:0e:5e:c9:63:02:
                    34:de:66:76:72:fd:07:7a:dc:be:7d:08:55:95:eb:
                    6d:4d:a9:d8:eb:d3:47:a8:35:e6:a7:a0:04:e1:f7:
                    38:22:f9:f9:0a:a2:a7:7e:5a:b6:30:92:e6:bd:92:
                    77:31:eb:7c:e3:9c:19:ae:6c:f3:eb:ac:1f:96:2d:
                    98:67:cf:84:bf:be:3e:3b:1b:ce:0a:f8:5a:0e:80:
                    93:94:b0:b8:00:21:7a:51:4c:09:1a:53:15:89:94:
                    3d:8f:25:da:c5:d7:72:97:4f:e4:e4:a4:89:52:08:
                    7e:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:C8:69:B2:F1:51:91:4C:F5:86:39:B7:68:B6:C8:DE:66:34:AA:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/a193d12d-457d-325b-8197-aad7ef2b9787.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:56b:9f70::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d3:e2:02:6c:f5:57:a1:33:9d:8b:de:3c:97:e3:7e:3b:33:2a:
         19:ce:59:63:8e:33:0f:7d:a6:9b:e3:9f:15:93:5e:b2:dc:f1:
         b3:d7:d5:82:7b:90:05:6a:1e:51:35:f2:65:97:36:7e:a1:f6:
         d2:80:55:fa:b2:f0:45:d0:a8:8d:fc:ed:e5:1f:a7:4c:b2:b5:
         4e:0a:9f:f3:0e:e3:5a:10:ef:c2:cd:db:b4:74:74:aa:b1:7e:
         94:3f:ac:4e:e5:95:39:9b:90:da:31:6a:0f:87:46:f4:93:72:
         52:f9:66:46:01:cc:8a:be:6f:7a:00:f4:6d:d0:66:2c:dc:0d:
         5a:ae:0f:96:69:15:57:b9:a5:17:63:bf:14:72:f3:27:00:1c:
         59:52:6c:4d:bf:8d:5e:4e:18:8f:06:e6:f0:80:fa:30:95:22:
         d3:63:d6:a1:97:19:b7:3a:c6:fc:33:8e:5c:81:47:b1:91:33:
         44:43:16:bd:39:59:3f:bd:83:6e:f0:d5:e1:e5:ac:16:4b:99:
         02:a2:05:c9:89:89:1f:58:86:9e:d6:f0:ff:21:22:c3:a8:ae:
         be:28:0e:da:04:be:6a:75:cb:be:fd:9f:3f:e1:ba:a6:ff:ac:
         e0:6b:d2:0c:20:94:3d:f0:68:21:65:80:d8:08:fe:71:49:89:
         02:e3:df:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 22:53:38 2026 by rpki-client