Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/d9d5ced5-8d7a-384e-a047-9db809fa8081.roa
File:                     d9d5ced5-8d7a-384e-a047-9db809fa8081.roa (raw, json)
Hash identifier:          5GnWaAq6gLKkZUhtoW/qnHPAIqc3JhCjyCTF/l+b46g=
Subject key identifier:   BE:B6:CB:AF:4B:C9:C0:90:37:A2:5A:32:60:FD:61:0C:05:1F:0F:FA
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584F4973CA1077D648FEFEBE1140
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/d9d5ced5-8d7a-384e-a047-9db809fa8081.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     852
IP address blocks:        2001:56a:800b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 01 Nov 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:ca:10:77:d6:48:fe:fe:be:11:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=6121ad23-d2bc-43f0-b4b1-d1dce830a4e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:0a:18:16:b9:55:b0:39:99:de:03:64:bf:dd:
                    85:b2:47:fa:fd:c6:92:b6:06:ea:de:8f:e9:e3:ce:
                    5a:62:d6:52:ec:b2:bc:20:a8:7a:7d:a2:0f:5a:94:
                    7f:65:f9:c3:70:ac:00:8c:16:69:e4:c9:6e:79:f6:
                    99:45:09:11:a2:97:da:6d:0b:68:05:f5:82:6d:87:
                    06:72:00:df:f7:53:64:d9:bf:ea:b2:2f:64:19:06:
                    d0:bd:98:93:de:5e:b6:29:00:ce:20:0b:82:d7:49:
                    d2:7f:c1:c2:98:3b:e4:0a:4f:e3:89:7e:45:2f:7f:
                    76:f1:19:8f:d2:5e:7c:f4:54:07:74:ab:7a:33:32:
                    53:22:41:04:c1:59:a2:8b:9c:86:ff:f4:8b:a0:d0:
                    af:2b:5e:36:e4:ad:b9:ac:60:ec:58:11:d0:ab:b8:
                    23:5e:75:b4:fa:18:91:d5:c3:30:a4:1c:4e:96:2d:
                    fe:3a:2d:ac:09:e4:06:5f:0a:bd:a3:94:76:f1:aa:
                    ca:58:04:93:b8:30:56:f6:ce:52:84:47:44:54:2a:
                    30:0f:fa:7e:49:ef:d8:97:4a:ad:c3:f0:10:3e:46:
                    cf:2e:c2:da:07:c6:35:f9:c1:92:7e:2a:9c:89:4d:
                    05:c9:3b:78:39:60:45:79:31:b7:3b:7e:e2:8d:74:
                    09:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:B6:CB:AF:4B:C9:C0:90:37:A2:5A:32:60:FD:61:0C:05:1F:0F:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/d9d5ced5-8d7a-384e-a047-9db809fa8081.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:56a:800b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:8e:0c:74:d3:ac:40:c3:56:0a:b4:6b:6c:6c:b5:c9:83:75:
         84:2b:e5:7c:67:c5:c4:ee:ad:d5:4c:0b:ea:f1:3e:be:21:91:
         87:94:59:1c:fe:37:f1:30:11:74:1e:5b:64:3a:11:a9:ae:9f:
         8d:a1:39:37:13:ee:ed:43:ba:e6:27:32:a4:c0:04:cc:cf:1f:
         66:73:3c:73:29:e2:e2:62:93:fc:f5:a4:ca:f0:0d:02:1d:e4:
         42:c5:11:ef:86:70:cf:57:8c:69:b6:74:b5:95:00:10:0f:e8:
         52:57:86:ce:07:d4:7a:2d:ce:b6:c0:f4:7d:49:21:45:55:0b:
         78:2b:1c:be:b6:bf:52:ca:a6:a6:8e:0d:b9:bf:c8:e2:38:61:
         ac:a1:36:6e:7f:82:bf:64:c1:8e:ad:49:43:fd:e7:6e:9d:e3:
         ba:6f:fa:ef:af:58:79:3a:37:11:b4:dc:85:aa:07:73:0e:ff:
         4c:e8:e2:cd:9c:93:b5:d0:18:2c:61:f3:d9:a4:39:2d:f2:18:
         14:0a:da:36:1f:c3:fe:db:0c:10:56:7b:73:cc:e6:1d:5c:eb:
         e0:97:65:d6:ce:1d:e1:ca:b0:ad:11:cf:90:d2:71:71:49:cd:
         b1:45:1e:2b:a1:43:8e:29:78:6d:58:32:5f:1f:4b:2a:63:cd:
         e1:7d:73:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 12:41:32 2026 by rpki-client