Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/ff649511-ea14-3e9b-a2b4-e25d41d1dcf1.roa
File:                     ff649511-ea14-3e9b-a2b4-e25d41d1dcf1.roa (raw, json)
Hash identifier:          k4Rt9pqGO/nCGtDe4elgf2s1LTdfzdQeozM1i+wK0A4=
Subject key identifier:   D6:22:D9:94:1C:5A:16:2E:0D:42:FE:6C:36:71:DC:3C:02:AF:0F:65
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584D143D2FC727E5F402DEC6E540
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/ff649511-ea14-3e9b-a2b4-e25d41d1dcf1.roa
Signing time:             Fri 06 Mar 2026 14:00:40 +0000
ROA not before:           Fri 06 Mar 2026 14:00:40 +0000
ROA not after:            Thu 04 Jun 2026 13:00:40 +0000
asID:                     852
IP address blocks:        2001:56b:8000::/35 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:14:3d:2f:c7:27:e5:f4:02:de:c6:e5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Mar  6 14:00:40 2026 GMT
            Not After : Jun  4 13:00:40 2026 GMT
        Subject: CN=249e1e92-a9d1-4666-8067-09ef51d97804
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:17:2e:82:20:68:b8:a5:fe:eb:64:af:60:4f:
                    5a:ab:2d:59:7e:22:f8:15:09:fe:b9:66:87:65:f7:
                    e4:8a:35:60:b6:a5:2a:7c:39:b6:f6:89:ea:29:bf:
                    a0:ff:1d:ef:32:c8:b1:af:09:45:05:78:52:97:7a:
                    37:ad:53:e1:22:53:8d:8f:df:f4:cc:14:f6:d0:b7:
                    0d:bf:5f:bf:7b:bd:cb:86:0f:d4:e5:ad:e6:bc:c0:
                    d1:40:1d:78:7f:4f:e2:57:2a:62:2d:e8:18:c5:2d:
                    27:ef:bf:be:5d:83:6f:1b:1c:c6:59:d5:88:e0:f3:
                    2e:b9:c2:f4:a5:e1:34:df:89:5c:c0:aa:0a:3e:8c:
                    21:39:6b:8a:32:0c:3b:0a:e0:ab:1c:93:a4:59:1f:
                    f8:de:4a:6c:ed:26:ec:09:b9:31:c0:53:31:aa:6c:
                    6b:6e:aa:49:0e:c5:d9:b7:36:53:30:a7:8a:90:55:
                    de:5b:9a:aa:6b:ae:40:cd:6e:56:9f:71:c4:28:47:
                    0f:d0:81:39:77:e7:92:f3:94:85:2d:63:d0:88:5a:
                    56:2c:3a:71:ba:14:0b:07:25:37:66:08:a2:a8:25:
                    42:83:85:16:36:a3:a4:ad:a0:11:1c:a4:3b:1d:0e:
                    7a:ba:59:2f:2b:64:d4:86:fb:04:93:ed:f5:41:89:
                    b4:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:22:D9:94:1C:5A:16:2E:0D:42:FE:6C:36:71:DC:3C:02:AF:0F:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/ff649511-ea14-3e9b-a2b4-e25d41d1dcf1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:56b:8000::/35

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:b6:15:17:1a:d9:b6:c7:3d:aa:06:2b:47:9d:51:cc:72:a9:
         93:77:05:bd:36:12:f5:82:d1:08:61:5c:35:5f:10:ac:65:a7:
         0b:e6:40:af:53:61:ba:ae:c4:20:be:ed:7c:1c:98:46:c2:2f:
         8d:7a:2b:7f:19:6f:1d:9b:e1:fd:a6:80:22:53:4e:23:01:13:
         b7:66:ee:ac:52:b1:16:4e:e8:fb:e8:09:aa:74:b5:ca:2d:b0:
         eb:26:4b:83:08:66:40:a9:cf:56:0f:11:b7:df:b1:df:b6:5a:
         b2:ee:7e:b5:00:90:99:4b:49:77:3c:87:81:d7:ae:7c:31:ba:
         e1:fe:3f:dc:a4:89:43:87:15:67:95:b7:17:e0:64:4a:d7:1c:
         9c:4a:33:cc:0b:80:94:5e:7e:5e:bd:97:c8:1d:a0:38:68:7b:
         8c:ae:ff:c0:2c:bf:03:d5:32:0c:34:4e:20:fd:00:91:95:7e:
         a9:24:26:f0:4d:cb:dd:dc:4f:98:7a:dd:11:aa:00:ff:3d:d2:
         b8:80:b0:6a:16:6c:bd:6e:43:68:5b:30:f2:ca:ec:26:9c:fc:
         97:ce:06:df:fa:82:98:24:cd:05:c6:fd:7a:83:0e:44:e5:1f:
         34:61:07:f1:9b:d7:3a:6d:f6:f7:08:df:84:05:e9:0c:21:7f:
         70:4e:b5:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 23:51:53 2026 by rpki-client