Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/a193d12d-457d-325b-8197-aad7ef2b9787.roa
File:                     a193d12d-457d-325b-8197-aad7ef2b9787.roa (raw, json)
Hash identifier:          lvlIoGqla/BVsDq/zOv37ci+TPWEHki2rXlzhQHJ8W8=
Subject key identifier:   BD:BB:C4:F5:36:18:BF:4B:A0:81:3E:68:81:F7:91:20:5D:58:0C:18
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584D143D2E8750844BA9FB3C6820
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/a193d12d-457d-325b-8197-aad7ef2b9787.roa
Signing time:             Fri 06 Mar 2026 14:00:40 +0000
ROA not before:           Fri 06 Mar 2026 14:00:40 +0000
ROA not after:            Thu 04 Jun 2026 13:00:40 +0000
asID:                     852
IP address blocks:        2001:56b:9f70::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:14:3d:2e:87:50:84:4b:a9:fb:3c:68:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Mar  6 14:00:40 2026 GMT
            Not After : Jun  4 13:00:40 2026 GMT
        Subject: CN=0ee20c2d-a451-4c04-b64d-7c959fdd9444
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:d7:19:49:4a:00:b4:8c:19:83:e3:1b:f8:57:
                    2f:bf:2a:0f:43:94:85:d4:11:c9:79:01:e3:ce:5d:
                    d8:46:95:68:5b:b6:5f:c7:6d:3f:63:87:3b:71:2f:
                    8b:4f:e6:b0:03:ee:7b:20:71:52:95:b5:7f:14:8c:
                    48:07:25:8a:44:64:f0:7c:16:32:47:7c:7b:53:0d:
                    9f:b1:ec:32:9e:3e:8f:84:9f:59:44:0e:63:f2:4c:
                    a1:6b:78:91:3f:1e:9d:73:5b:8a:99:4b:1b:07:8a:
                    67:14:b6:b3:03:e5:5c:c9:81:d4:a6:9f:87:7f:c8:
                    d8:7d:fa:7a:a2:b5:f9:e7:74:2f:d5:42:bc:93:e0:
                    39:91:23:11:5d:a3:2f:45:97:d6:20:c1:a5:87:53:
                    e7:62:35:0a:38:ef:e7:34:39:ba:b1:34:b4:dc:e9:
                    f1:a0:26:a8:eb:a3:6e:69:74:e6:a4:84:39:e3:ab:
                    e6:b2:15:c8:c0:c5:8f:52:39:59:77:3b:a6:9a:6a:
                    fb:33:61:1c:bf:b3:17:30:d7:d1:d9:e7:35:ca:3d:
                    05:fd:d9:2f:db:64:9f:f1:8b:35:bc:04:2b:42:cc:
                    91:74:e5:89:50:dc:17:19:05:0a:61:b7:b3:87:a2:
                    40:5f:68:23:11:f0:f4:57:61:2a:b9:f1:17:fe:19:
                    86:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:BB:C4:F5:36:18:BF:4B:A0:81:3E:68:81:F7:91:20:5D:58:0C:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/a193d12d-457d-325b-8197-aad7ef2b9787.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:56b:9f70::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:26:2e:de:36:a7:04:7f:5a:41:fa:5a:19:36:86:e8:0f:67:
         c4:a9:6b:2f:15:0f:84:36:e5:a2:7a:75:7e:d7:6b:d9:66:85:
         ce:bc:45:58:63:2b:2d:1b:f2:a0:2a:83:4f:7c:58:43:a6:9e:
         95:0c:46:40:43:43:ff:9c:35:69:13:8f:c5:32:69:f3:38:ef:
         3d:b0:45:7e:3e:0f:cf:81:bf:af:9c:93:b6:e2:25:23:c2:c1:
         57:aa:10:58:bf:45:d5:06:0d:75:0f:de:84:bf:c7:c8:b3:c0:
         66:d4:38:03:68:f4:30:30:d5:15:9c:c0:cd:32:e2:a4:c8:8f:
         31:9a:17:73:76:0f:eb:f1:be:25:3c:74:a1:4e:f4:66:b8:9b:
         f6:61:8f:32:5b:42:73:9b:fb:80:5e:b3:b4:44:b7:9a:65:73:
         41:1d:db:3f:dd:e7:00:da:5b:31:f1:8c:76:90:eb:71:1c:dd:
         98:ea:38:ac:a9:10:fc:77:41:23:0d:c4:99:3f:4d:f9:0c:14:
         79:a6:5c:fc:dc:19:4b:71:6e:15:38:e3:3f:61:58:08:09:01:
         9f:9e:e4:84:62:d4:81:93:92:d9:40:51:a0:d0:93:a1:4e:d6:
         9e:5b:5c:fa:07:db:3a:32:96:62:be:fc:75:a9:e8:a4:98:f8:
         94:49:ca:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 23:53:55 2026 by rpki-client