Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/0386289b-1e11-3e7e-ad9b-ae64318e48d9.roa
File:                     0386289b-1e11-3e7e-ad9b-ae64318e48d9.roa (raw, json)
Hash identifier:          2pbVoXXQL0OJAg93e5o0fus5pcXk/9s2TRhRsaMGGGs=
Subject key identifier:   31:C5:BB:DC:FA:0F:91:AD:9B:04:6C:A7:4A:C4:1C:D1:44:61:96:67
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584F4973C148694F5B9879B2BA00
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/0386289b-1e11-3e7e-ad9b-ae64318e48d9.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     852
IP address blocks:        2001:56b:9ff0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:c1:48:69:4f:5b:98:79:b2:ba:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=cf542bc4-a74b-4335-ac9a-1fa4261d69ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:e2:9d:c6:7c:50:98:8c:79:49:79:4c:63:9d:
                    a6:82:ab:d4:0b:fe:53:54:c3:81:40:17:cb:ef:43:
                    60:62:7c:06:ef:7f:e0:10:e2:b4:9d:24:b7:6c:20:
                    cb:85:8f:0c:03:6b:60:6b:06:5e:77:5e:f9:4d:92:
                    5f:a3:ff:a9:da:34:8a:ba:72:5c:ef:f1:87:b7:0b:
                    97:cb:dc:47:b5:1f:9e:5d:c5:9a:f5:f9:30:19:ec:
                    23:62:0c:55:3f:a3:ac:25:7e:60:65:0b:99:ee:9b:
                    1f:33:04:ae:ec:36:61:ad:09:d2:70:95:df:d5:cd:
                    f3:b4:be:1e:ac:5d:53:03:bd:f3:64:76:74:42:65:
                    54:d2:69:76:ad:fa:4f:df:5d:0c:6b:60:03:37:49:
                    43:d3:52:13:4a:49:25:c6:0a:5a:a8:62:4c:51:ac:
                    aa:25:6e:c2:a4:4c:bd:74:6a:8a:b7:8a:ac:c6:c2:
                    e7:11:a3:2b:bf:c9:1c:24:d9:a0:d4:40:2f:63:1f:
                    55:5d:e6:86:7d:55:4a:e8:66:78:e7:b5:4c:f5:8d:
                    90:91:ea:fd:92:1a:94:e5:fa:39:9d:f8:26:bd:d8:
                    dc:c3:02:2c:02:e6:1f:3d:aa:06:7e:00:e7:a5:68:
                    fd:6b:75:3e:61:b8:3e:b1:d6:a4:a6:c3:79:2e:9b:
                    de:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:C5:BB:DC:FA:0F:91:AD:9B:04:6C:A7:4A:C4:1C:D1:44:61:96:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/0386289b-1e11-3e7e-ad9b-ae64318e48d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:56b:9ff0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:af:8e:09:53:e9:cd:ce:07:28:8b:18:bd:3d:b7:e8:62:7c:
         7f:bf:71:be:b3:a9:7a:04:33:8c:b1:c5:5e:61:81:ed:b5:1c:
         93:c1:c3:80:41:cf:91:b0:00:56:45:d7:6b:f0:4a:73:55:9f:
         7d:42:2b:df:c5:24:38:e3:06:ca:17:a6:d0:84:9e:24:82:27:
         d0:cd:34:00:8d:ca:d6:53:65:6b:4a:83:5f:91:81:51:cc:b6:
         ed:56:07:de:14:f2:b1:3f:e2:08:0d:54:92:86:10:ec:9f:b0:
         7b:be:bf:f4:85:51:95:0c:e9:05:a9:d6:1d:5a:ea:4d:b8:9f:
         5e:9d:6b:e8:3e:e8:fc:13:5e:5c:0b:1a:a7:74:08:df:e0:4f:
         0f:f8:d0:73:d0:7a:9a:5c:93:6f:41:90:9e:ee:f5:1c:95:51:
         16:00:ad:fe:c8:85:6d:1a:9e:88:f6:a1:10:2f:cf:cc:0c:f9:
         08:38:88:f2:b9:cd:83:93:91:2a:1d:3c:66:37:34:1e:bb:5f:
         9b:f5:06:6f:ce:94:5a:1d:1c:e6:9e:45:da:8a:07:e9:21:8c:
         1f:ba:3a:cc:dd:15:d5:18:fd:7a:f9:d0:19:98:87:3f:61:80:
         70:3e:d7:12:cc:53:be:81:22:9a:e8:7f:62:30:30:c7:b1:a4:
         1f:55:57:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 21:54:20 2026 by rpki-client