Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/ce737920-6a3d-3e73-a193-0d96b59805a8.roa
File:                     ce737920-6a3d-3e73-a193-0d96b59805a8.roa (raw, json)
Hash identifier:          IsyFEO3I0/xkmkvf/Iggdm6XT4t/1qA5oDPEdmTjLIc=
Subject key identifier:   A3:75:1E:D2:EF:5E:F4:82:D7:05:12:1F:F6:38:CC:DC:95:92:1B:5F
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584D143D2E99C2358E5F3A732580
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/ce737920-6a3d-3e73-a193-0d96b59805a8.roa
Signing time:             Fri 06 Mar 2026 14:00:40 +0000
ROA not before:           Fri 06 Mar 2026 14:00:40 +0000
ROA not after:            Thu 04 Jun 2026 13:00:40 +0000
asID:                     852
IP address blocks:        2001:56b:9f60::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:14:3d:2e:99:c2:35:8e:5f:3a:73:25:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Mar  6 14:00:40 2026 GMT
            Not After : Jun  4 13:00:40 2026 GMT
        Subject: CN=c1db3fd4-f3ee-4046-87c1-66ba5c8309fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:27:32:a0:7b:6f:55:2c:2a:11:68:77:e1:13:
                    de:cb:fa:3a:dc:c3:a3:96:5d:e1:e7:e9:8f:20:3c:
                    13:b6:43:f6:11:b6:03:55:91:06:17:27:06:14:a1:
                    ee:b7:18:e7:92:cb:e7:ce:8b:5c:97:20:95:db:1d:
                    b8:d4:47:1c:35:a6:6c:fe:bc:ed:e6:50:ba:5f:72:
                    1a:8d:9d:73:d3:69:92:bf:ac:56:10:bb:cc:da:7e:
                    fc:77:27:0e:73:7f:0e:ea:5a:3b:0a:3d:74:1a:27:
                    d8:d0:7a:6c:62:0c:3a:f8:16:fb:1b:f7:eb:d0:ef:
                    84:ba:f0:62:83:94:41:fb:9f:36:b8:1c:31:cc:7d:
                    e8:4f:b0:79:9c:23:47:84:d8:8f:a2:a5:c3:b4:77:
                    82:cd:d7:18:0f:ce:0e:41:2b:47:55:23:4c:30:bc:
                    8d:a8:ff:7b:24:ef:16:26:14:1d:da:26:a5:36:25:
                    50:69:bb:0c:0d:bf:0a:1e:03:cf:56:ab:b2:9b:2b:
                    09:92:6c:55:8f:69:9f:0b:5a:7d:67:94:e8:5a:00:
                    08:08:86:e6:66:20:e0:5f:bc:a8:b8:e3:16:67:1e:
                    6c:fa:13:58:51:59:9d:69:91:be:f1:c4:ff:c6:21:
                    fb:5f:e7:76:60:15:6c:4e:1f:d1:a9:7b:1a:63:68:
                    81:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:75:1E:D2:EF:5E:F4:82:D7:05:12:1F:F6:38:CC:DC:95:92:1B:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/ce737920-6a3d-3e73-a193-0d96b59805a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:56b:9f60::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:b0:e9:50:32:8e:ec:97:8a:71:a8:73:64:e9:ff:22:26:b5:
         41:03:c3:d5:9e:42:40:c5:6d:c0:7f:5b:2e:e5:6b:d6:2a:00:
         71:3a:7e:fe:d3:64:7e:e4:50:45:76:bf:35:87:61:20:b5:03:
         90:5b:b0:9f:2e:47:8e:5c:4f:e7:4c:88:5a:e5:43:bf:d6:aa:
         76:41:51:d6:17:b7:ff:bd:6a:e5:a0:fa:11:74:d8:b9:c3:bd:
         79:6e:5a:6b:6f:e5:bb:d9:61:fa:4c:ca:b8:ec:3a:ad:b7:bd:
         e0:c3:44:d2:c1:34:17:d2:26:13:c7:44:12:85:5b:d7:59:ba:
         f8:9d:fd:f2:21:b4:2b:0f:d7:fd:5f:ed:35:d5:46:8b:e1:51:
         7e:d6:fb:f8:e0:80:88:df:8b:00:fc:30:b6:2d:0d:88:90:22:
         d6:f7:f7:26:4e:f9:b9:8a:a5:a4:ce:20:c4:cd:30:96:bd:c9:
         5c:af:39:be:78:b2:ab:36:ab:07:23:48:00:69:6e:cf:9c:95:
         2b:8b:34:17:70:8d:7c:d2:2e:c8:41:9e:fd:35:0a:40:2c:a1:
         d1:4d:fc:4d:0c:72:cb:1d:76:8f:32:9d:b5:2a:57:68:ea:5e:
         18:0f:16:de:d7:ad:3f:ce:45:40:56:10:1b:4e:7a:24:96:b8:
         9e:46:e5:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 23:54:24 2026 by rpki-client