Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/2189e87f-7779-3596-9c34-f01904d2e2a0.roa
File:                     2189e87f-7779-3596-9c34-f01904d2e2a0.roa (raw, json)
Hash identifier:          EhnJUpesYpfts5tqirL3bx9C+prkJDff8CAmnZByzAY=
Subject key identifier:   FA:D0:D9:F8:C1:47:AF:6B:00:8D:58:5C:93:41:7A:A7:8B:94:7D:86
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584F4973C169752A16F54403DD80
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/2189e87f-7779-3596-9c34-f01904d2e2a0.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     852
IP address blocks:        2001:56b:3f60::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:c1:69:75:2a:16:f5:44:03:dd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=353a18d4-239c-446f-9c7d-b61fd60203b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:47:14:63:f5:69:9f:18:bc:f8:9f:56:dc:99:
                    3c:61:e5:22:32:28:cf:3d:38:09:2d:4a:09:5c:10:
                    f3:90:eb:ad:b3:82:80:bb:db:03:dc:31:8c:d2:c6:
                    7f:7a:6b:14:3f:bf:bc:28:7b:84:4a:a0:85:5e:64:
                    ce:db:d4:c8:c7:8c:45:28:45:a8:70:4f:8f:66:3d:
                    3d:67:93:dc:be:73:4b:5c:6e:2b:86:77:0d:47:4c:
                    7f:c0:56:aa:ed:ba:ce:4e:a5:f2:a5:fe:8c:e2:fb:
                    39:b5:99:57:c9:5e:6a:22:3b:e2:fc:d6:8b:05:18:
                    e6:6c:c5:91:dd:67:dd:c3:95:ac:dc:6a:49:2a:5d:
                    01:f6:7d:dc:c4:28:7c:9b:f4:ae:52:98:a4:b2:80:
                    37:3b:f9:7a:ae:36:6a:89:fb:0e:83:38:ba:17:e0:
                    59:ad:b0:8f:a0:76:d1:da:91:b6:1c:d3:78:21:df:
                    98:c8:0e:69:62:2c:20:b9:6f:93:60:8d:8c:e7:d5:
                    f5:6e:d4:11:0b:d7:90:66:68:68:a5:d6:2c:2a:03:
                    3a:9c:a1:59:a9:cc:f0:f5:fa:d0:bb:b9:79:6e:f2:
                    bb:3c:8f:79:a2:20:a0:3f:2a:b5:fa:c3:f7:42:95:
                    c0:cd:12:72:12:81:46:4c:e9:96:0f:2f:29:42:79:
                    3d:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:D0:D9:F8:C1:47:AF:6B:00:8D:58:5C:93:41:7A:A7:8B:94:7D:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/2189e87f-7779-3596-9c34-f01904d2e2a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:56b:3f60::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:33:5e:21:4d:20:bb:27:b1:37:64:cf:30:3f:df:56:fd:90:
         01:74:25:9c:83:11:38:6c:fd:93:19:b4:c9:5c:d6:5d:96:07:
         9d:23:83:ff:0e:32:06:a8:67:80:c6:4d:ee:3f:2c:a6:05:5c:
         11:6a:83:4f:bc:de:59:49:87:1c:ee:ac:62:00:26:07:0b:0b:
         93:23:b5:c1:37:71:42:f1:ff:b9:e7:86:e4:db:8d:e8:05:b5:
         0f:2f:23:e3:b5:0a:87:7d:95:15:e3:1d:49:d0:11:43:a0:47:
         02:57:bd:9c:9f:9c:d4:06:b8:71:37:36:25:17:59:51:be:e3:
         77:58:d9:6e:89:60:96:3a:ce:ad:59:35:15:ec:c5:ec:ac:39:
         1a:af:7a:64:56:a4:21:af:28:36:96:b1:36:c4:f5:94:39:c1:
         24:c8:66:e3:ec:25:69:1a:bc:ab:5c:74:e6:02:11:39:fe:6c:
         89:cc:5c:eb:62:4b:c1:05:6e:40:b4:15:89:00:19:5a:d6:12:
         a1:0e:70:07:07:39:be:50:c6:f9:67:45:2c:d4:26:da:f0:29:
         df:90:3b:00:86:61:be:0a:e4:e7:4f:bb:59:c1:48:ea:fd:d4:
         fa:79:2d:d7:15:15:41:6d:ea:b0:ad:25:fd:29:0f:34:de:ed:
         0f:cd:0c:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 18:22:34 2026 by rpki-client