Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/def16803-04ad-3e2d-b114-2580adfdbd46.roa
File:                     def16803-04ad-3e2d-b114-2580adfdbd46.roa (raw, json)
Hash identifier:          XQcBUjnTF2wrXYErs7ISTfhOREurnRzH9nU5UDxx/sQ=
Subject key identifier:   AC:26:90:DD:9E:E6:60:ED:18:13:CF:C0:24:21:D4:75:1B:F7:3C:A1
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584D93254E1295D3183454D66CA0
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/def16803-04ad-3e2d-b114-2580adfdbd46.roa
Signing time:             Tue 21 Apr 2026 01:00:24 +0000
ROA not before:           Tue 21 Apr 2026 01:00:24 +0000
ROA not after:            Mon 20 Jul 2026 01:00:24 +0000
asID:                     7861
IP address blocks:        2001:56a:8f00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 29 Apr 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:93:25:4e:12:95:d3:18:34:54:d6:6c:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Apr 21 01:00:24 2026 GMT
            Not After : Jul 20 01:00:24 2026 GMT
        Subject: CN=a5254fa7-4034-4fbd-ac3c-6b1c5d625b49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:28:3e:f4:13:4a:ab:91:29:4b:07:c6:43:b0:
                    1e:47:95:68:2e:b2:6f:26:54:cc:25:4f:9e:59:0d:
                    59:35:c9:ca:f1:d3:bb:ad:24:72:f4:5c:db:fd:0b:
                    15:42:47:0c:19:3c:8a:dd:21:cc:15:ba:e7:b3:f3:
                    42:13:16:ce:49:c1:56:4a:9c:2d:17:7a:a2:a1:00:
                    35:04:51:1c:4b:be:b1:48:d8:ce:bf:ac:f3:54:c5:
                    c6:f7:4a:c2:05:bb:7d:f1:2e:be:54:a2:c1:60:07:
                    6c:4f:93:25:f4:00:5c:04:81:64:4a:fd:4b:44:ae:
                    f8:66:f7:38:a4:5e:2f:91:d3:06:3e:a8:7b:87:e7:
                    33:4c:f0:81:92:9c:90:64:64:b6:4e:d0:00:c2:db:
                    54:e6:d0:ec:b5:75:b9:40:5d:18:4b:99:14:6c:28:
                    72:93:93:27:66:97:6f:ad:c1:f9:3a:7a:b5:6f:2b:
                    39:3b:cb:58:e0:2e:6f:a2:69:ac:b9:94:44:16:b8:
                    c8:b7:c4:9a:2c:d4:b6:26:e6:7c:3e:eb:23:f6:52:
                    fd:34:d3:90:fd:7e:10:55:56:75:0e:88:2d:83:84:
                    e6:c4:92:3c:32:0d:4d:06:10:4e:17:80:35:5b:00:
                    ee:a3:e6:3a:9f:f8:7c:c0:e4:c0:74:88:75:f6:0c:
                    56:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:26:90:DD:9E:E6:60:ED:18:13:CF:C0:24:21:D4:75:1B:F7:3C:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/def16803-04ad-3e2d-b114-2580adfdbd46.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:56a:8f00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:83:0c:43:8e:d6:1e:c7:59:5d:5b:10:cb:53:ef:28:ae:86:
         68:e3:9c:4e:89:02:a1:e9:49:cb:05:91:b2:94:1f:96:76:b7:
         df:2c:f4:e1:be:f4:a2:6a:87:f2:80:6d:b4:95:c8:9a:00:de:
         58:e1:c8:8f:e0:76:69:3d:f9:37:4e:03:4a:a3:97:71:8e:f9:
         c2:91:8b:7d:e5:d7:b9:c6:a8:fa:9e:f4:8a:84:af:b7:f1:2d:
         6c:e2:d2:4c:d4:2f:bf:c1:56:2a:30:43:30:ad:31:00:bb:6c:
         e6:ab:78:22:8b:f0:ac:fc:b2:7f:e4:f2:b0:8c:cf:73:88:87:
         28:59:4b:54:ad:ec:f1:a1:4e:33:ec:5c:95:9b:e9:45:da:dc:
         4c:f3:3e:93:65:b5:42:52:fa:b3:fb:45:2c:11:ad:da:b9:09:
         a4:b3:d2:20:97:a8:11:29:6e:87:a7:19:fc:98:5f:15:5d:28:
         1a:82:33:87:dd:cc:a9:24:e0:bc:0f:a6:3c:bc:ac:a1:25:4a:
         f4:7e:e2:1c:5b:57:94:51:f6:8b:09:0e:e2:1a:51:0d:2a:ad:
         c3:d2:61:fb:55:9a:60:3a:23:e9:a3:e3:d2:49:46:2b:97:e9:
         c6:39:1a:29:84:e1:46:d7:00:e3:98:c0:42:49:d0:5b:db:c2:
         83:be:76:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 08:45:55 2026 by rpki-client