Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/1e8e09ca-ea86-3a45-88b7-142a56500e73.roa
File:                     1e8e09ca-ea86-3a45-88b7-142a56500e73.roa (raw, json)
Hash identifier:          AF6dCyzBvRrvgzXhCY9y6WxbbVE5BKOZ3ACYgf7pfiw=
Subject key identifier:   28:E4:05:FB:6E:8D:A4:71:AB:0F:55:01:80:B0:31:FF:52:F5:9F:36
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584F4973FCD6FE01AF1BD9B61480
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/1e8e09ca-ea86-3a45-88b7-142a56500e73.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     852
IP address blocks:        2001:56b:e000::/35 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:fc:d6:fe:01:af:1b:d9:b6:14:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=bdf36d62-15d7-4c45-b59c-4ce8740ae4ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:78:6a:0e:03:b2:9b:87:eb:05:fa:ce:19:c2:
                    7f:4a:fe:4e:14:6d:29:9a:bf:b4:24:38:5c:ce:a8:
                    d8:00:b2:aa:1b:c2:e3:ca:0a:15:c7:17:6f:4a:6e:
                    6d:3f:c5:8c:72:d5:4d:0d:fa:3e:35:ec:52:b9:eb:
                    55:4b:01:18:9c:9f:f5:6c:54:0f:7f:3d:81:f1:e1:
                    da:c4:87:5b:12:72:24:01:e7:f3:c7:5d:0c:a6:5c:
                    db:35:bc:4d:80:69:85:4d:62:54:67:62:4b:46:cd:
                    5e:2b:82:00:23:e2:a4:16:33:42:37:61:01:1c:f9:
                    23:7a:fa:66:c6:ca:2c:b2:b6:fa:a6:a9:5f:f3:a6:
                    23:d3:83:78:97:42:f1:d7:f0:8a:13:44:66:dd:9f:
                    41:58:fd:02:6e:8d:66:ba:ef:56:4f:45:21:b2:02:
                    3e:66:0a:63:fe:1a:25:16:68:3f:48:f4:7c:12:ba:
                    71:ce:90:46:01:95:1c:aa:f2:6e:df:53:26:fb:80:
                    bc:9d:6c:df:c7:17:9f:84:83:bc:6d:21:79:e5:1f:
                    fa:6e:48:43:3e:47:e0:b5:0b:a1:05:f8:e5:c9:e4:
                    b9:97:e0:a0:0f:86:76:62:42:14:66:68:ef:96:d3:
                    b2:40:d5:af:c4:ca:5d:96:a4:78:2c:ac:02:56:25:
                    0a:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:E4:05:FB:6E:8D:A4:71:AB:0F:55:01:80:B0:31:FF:52:F5:9F:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/1e8e09ca-ea86-3a45-88b7-142a56500e73.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:56b:e000::/35

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:81:bf:15:47:01:af:96:e7:d7:d0:c1:dd:8b:aa:a4:75:ee:
         26:be:ab:99:c6:13:2c:26:5b:3f:c0:10:47:7c:9d:91:dc:be:
         8f:6d:f1:43:ac:03:35:f5:82:66:c9:2d:16:5f:bd:4d:65:8d:
         e1:89:52:7d:43:0e:81:36:7c:55:cf:c8:89:34:31:48:09:a4:
         11:a2:b0:d4:dd:ab:fa:c3:36:74:50:05:0b:dd:17:af:3b:3a:
         4a:c4:50:7b:94:49:a0:7e:ed:6d:b6:8e:ab:50:17:1b:df:69:
         f0:d4:fb:28:bd:b2:a9:0a:c0:36:19:79:ff:40:e3:48:04:86:
         a4:e4:25:4a:a5:cb:cd:05:de:a1:ef:22:a2:82:a7:69:b5:12:
         f6:0f:34:2d:dc:0c:86:eb:55:9a:57:eb:ec:af:70:b1:32:bb:
         af:35:10:d7:6a:b8:11:7c:9c:6c:7e:9f:b8:b1:e2:cd:db:f7:
         6a:34:7f:b7:97:c9:45:b9:38:cc:f9:35:c2:0d:ab:31:15:7e:
         25:5a:2d:90:e7:77:d6:35:9b:40:bf:b5:85:ea:c4:c9:46:22:
         73:01:82:32:9b:0d:0b:7f:4e:fe:ab:d0:a6:73:3a:8f:66:36:
         52:3b:d6:18:9a:a9:e7:05:63:ff:23:18:a2:af:1a:aa:ad:6b:
         8a:81:34:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 14:50:38 2026 by rpki-client