Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/f137003b-910b-3db6-a967-866681d68404.roa
File:                     f137003b-910b-3db6-a967-866681d68404.roa (raw, json)
Hash identifier:          TWGIgitVBXuWvy64IZZYH4o6snON9hPSYsOcZTfceMk=
Subject key identifier:   C0:EF:55:44:D7:D7:64:2A:72:89:A4:58:6B:B1:88:65:65:FA:77:43
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584EA79612DD00DE6B640185E7C0
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/f137003b-910b-3db6-a967-866681d68404.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     852
IP address blocks:        2001:56b:3f20::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 01 Aug 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:96:12:dd:00:de:6b:64:01:85:e7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=a8ab37c3-1d47-49c1-9e0f-4fff1b302ebe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:d1:4e:27:a8:36:6e:1e:07:28:73:72:7a:89:
                    11:3d:e6:56:f1:f5:a1:df:f9:0a:aa:4b:7f:67:67:
                    2b:86:e1:4f:c2:a1:d8:c5:89:14:56:91:16:05:88:
                    3b:1d:05:67:95:f0:d4:73:3f:74:64:51:32:a8:88:
                    22:b5:08:0b:c3:f4:83:56:b2:45:94:80:eb:12:99:
                    bd:03:5e:a1:01:ce:24:73:59:51:df:f1:11:c7:03:
                    ba:be:5b:d1:e7:5d:64:37:d2:b2:53:da:b9:a8:47:
                    05:76:a0:e3:74:90:ab:49:74:7a:3a:72:e7:c5:e8:
                    fc:e9:53:1d:b2:c2:b7:b7:0f:c1:2b:c3:86:04:50:
                    77:36:e3:46:bf:74:38:2b:91:37:a7:69:3a:25:5f:
                    e4:7e:48:05:7b:c8:09:8a:ca:6c:84:b6:62:f9:63:
                    0a:cd:2f:f8:1f:2d:f9:ed:59:75:48:e0:a3:a6:02:
                    1b:21:65:46:ea:f6:4f:ea:88:ab:a9:25:50:d5:2e:
                    63:aa:9b:ed:0f:d1:1d:9e:eb:76:c6:76:06:91:b6:
                    39:ba:17:28:5d:b2:a1:98:65:11:93:4c:03:6b:96:
                    bd:7f:84:42:74:a4:b7:fe:2e:78:2f:cf:45:d5:33:
                    58:0e:ec:5d:63:99:60:38:f1:dc:a8:bd:af:80:24:
                    3c:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:EF:55:44:D7:D7:64:2A:72:89:A4:58:6B:B1:88:65:65:FA:77:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/f137003b-910b-3db6-a967-866681d68404.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:56b:3f20::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:5a:4f:15:bf:5c:c6:33:70:12:43:f8:06:44:58:4c:e3:f2:
         90:58:b4:cf:12:6f:50:3e:c5:34:66:bc:e3:d0:f7:40:f3:b5:
         7f:af:07:c6:81:cb:46:33:8f:92:42:c8:b5:51:ee:b7:23:d9:
         8a:d2:f5:fd:16:45:c2:23:fd:fd:5c:9e:4d:58:f1:4c:5f:65:
         36:ab:89:ad:4b:6c:17:56:d2:c9:20:17:3e:fb:16:d2:12:75:
         03:67:60:22:87:03:6f:4f:c2:b2:10:e7:55:c4:42:93:86:3a:
         48:9b:30:1d:42:5b:ca:be:d7:a5:ce:4d:4b:1a:c1:9a:73:9e:
         58:36:97:e6:c9:ee:c7:2b:d1:da:5c:31:d3:f6:7c:29:ff:b6:
         7b:14:87:a9:3c:aa:ef:83:99:b9:f1:03:b2:8c:26:20:db:25:
         40:4b:72:1c:29:bf:4f:61:93:b6:0a:59:a3:91:85:6a:2c:52:
         c2:1b:80:8c:6f:ce:fa:c7:1b:3c:26:fb:e2:f7:99:db:b5:2c:
         e6:be:ec:d8:3c:eb:bf:c6:74:93:e0:b8:ce:d3:ff:37:03:06:
         7e:b2:82:3c:51:29:0c:d7:d2:44:63:3a:92:c9:d6:07:cc:af:
         a5:66:0d:46:74:40:2e:56:19:c2:af:aa:4b:a2:21:48:3a:b2:
         d2:7e:b2:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 30 08:42:41 2026 by rpki-client