Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/611dbbed-256e-489b-8656-320fdaca032f/ff11d196-488e-3232-b5a8-49623fac902f.roa
File:                     ff11d196-488e-3232-b5a8-49623fac902f.roa (raw, json)
Hash identifier:          MfNI8dQaVZ1e0+Adw+fxgRXALfXjqlcvPZ7sKGlnzqk=
Subject key identifier:   C6:1E:28:3F:17:D5:90:38:C4:A7:C8:30:08:85:4D:48:41:30:28:55
Certificate issuer:       /CN=611dbbed-256e-489b-8656-320fdaca032f
Certificate serial:       010D0C9F4328584DBBA042F272F33AEE0DDBC4C8
Authority key identifier: 34:01:17:47:F4:DB:06:E2:96:FB:D7:3F:F5:17:E1:AF:C6:1C:D6:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/611dbbed-256e-489b-8656-320fdaca032f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/611dbbed-256e-489b-8656-320fdaca032f/ff11d196-488e-3232-b5a8-49623fac902f.roa
Signing time:             Tue 05 May 2026 13:00:31 +0000
ROA not before:           Tue 05 May 2026 13:00:31 +0000
ROA not after:            Mon 03 Aug 2026 13:00:31 +0000
asID:                     11796
IP address blocks:        2603:b000::/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/611dbbed-256e-489b-8656-320fdaca032f/611dbbed-256e-489b-8656-320fdaca032f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/611dbbed-256e-489b-8656-320fdaca032f/611dbbed-256e-489b-8656-320fdaca032f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/611dbbed-256e-489b-8656-320fdaca032f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 09 May 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:bb:a0:42:f2:72:f3:3a:ee:0d:db:c4:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=611dbbed-256e-489b-8656-320fdaca032f
        Validity
            Not Before: May  5 13:00:31 2026 GMT
            Not After : Aug  3 13:00:31 2026 GMT
        Subject: CN=2123f07a-515d-4008-b260-f137a9531adf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:5e:bf:db:be:47:8d:89:3b:3b:d4:44:b0:ca:
                    e9:85:85:77:a4:ed:b8:ea:6d:d2:01:e4:dc:51:ee:
                    cf:a6:58:f7:af:98:f1:15:fa:de:38:1e:26:0d:b8:
                    fd:8b:91:da:76:68:38:b6:43:04:f5:28:89:24:bc:
                    89:6b:18:68:0a:98:d0:30:b7:97:32:6a:8e:19:a0:
                    c9:8d:6f:85:a1:3e:c3:c0:f6:88:db:10:74:ec:c7:
                    2e:ce:c0:05:05:5d:ab:12:66:e5:a4:66:4f:32:11:
                    c1:ac:be:55:29:2c:12:c8:36:c6:27:6b:92:c6:c6:
                    b8:25:e8:ba:16:3f:c9:5a:9e:81:e5:e8:d1:0c:67:
                    92:e5:a3:8d:b7:a4:0f:f0:da:c9:d2:f0:3f:37:e0:
                    3a:0f:28:e5:b6:df:b7:ee:ce:10:08:fe:2f:7d:16:
                    d9:e3:66:74:fe:1d:95:c8:66:31:aa:a6:51:0e:f4:
                    ce:86:d9:aa:c2:30:9a:cc:d6:a8:80:15:2c:57:d5:
                    37:ae:70:7e:24:df:7f:f6:3a:08:8c:d2:5a:46:40:
                    bb:17:c3:fa:ac:f5:0b:c7:35:90:80:db:20:38:5d:
                    21:68:d6:93:bd:d0:3b:f0:93:c7:08:3a:76:32:6e:
                    3e:74:15:e9:c5:b4:f5:d0:de:6a:eb:f2:3d:9c:43:
                    ee:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:1E:28:3F:17:D5:90:38:C4:A7:C8:30:08:85:4D:48:41:30:28:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/611dbbed-256e-489b-8656-320fdaca032f/ff11d196-488e-3232-b5a8-49623fac902f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/611dbbed-256e-489b-8656-320fdaca032f/611dbbed-256e-489b-8656-320fdaca032f.crl

            X509v3 Authority Key Identifier:
                keyid:34:01:17:47:F4:DB:06:E2:96:FB:D7:3F:F5:17:E1:AF:C6:1C:D6:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/611dbbed-256e-489b-8656-320fdaca032f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:b000::/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:a5:bf:9d:3d:45:e8:27:32:25:b8:58:02:03:30:71:c2:32:
         f7:63:9c:ec:cf:a6:15:87:a0:b1:dc:5f:41:9b:77:8d:45:61:
         df:8d:17:59:1d:ed:85:84:8e:dd:ae:22:c5:60:c4:3d:fc:99:
         2b:c5:f9:97:87:52:e8:33:fe:6d:84:c9:8c:12:0c:c7:40:5b:
         7e:08:5c:26:6f:be:e0:93:f0:d5:d2:8f:28:6c:a3:c5:a6:53:
         92:dd:68:4d:6b:e1:9a:76:27:a1:8d:63:e1:2c:85:87:6c:30:
         a5:40:45:41:11:1d:fc:3a:ce:4d:e5:56:30:a5:3a:1f:82:7f:
         f8:33:70:a1:08:67:85:1f:b2:3e:c5:ac:c3:b0:3d:d5:2a:2d:
         37:e6:6a:dd:e7:9d:d5:1e:c0:c6:fb:dd:20:85:65:b2:5f:2d:
         14:9e:a4:0f:d5:2d:74:de:fa:d3:17:5a:62:63:e3:8a:8a:33:
         2c:7d:41:2d:62:ce:08:cf:39:99:be:c9:90:66:cc:9e:68:c4:
         5c:e0:70:de:3f:f9:0e:1c:7f:f0:c8:06:da:8f:de:73:a9:54:
         52:c2:1c:e1:6d:70:bc:61:f4:59:9f:25:be:a7:6a:2f:54:0e:
         f8:18:99:36:47:e5:34:da:c0:f0:c3:39:95:90:8d:ac:73:9f:
         20:98:de:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 02:55:35 2026 by rpki-client