Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/2fac2b11-eae6-352f-b5f0-44e1af5f9416.roa
File:                     2fac2b11-eae6-352f-b5f0-44e1af5f9416.roa (raw, json)
Hash identifier:          vzdEgVRmrqQVG/vjHQl5h+oCROVku3y+kKbJFoQVr9I=
Subject key identifier:   A1:6E:D7:33:33:24:B7:63:BC:5D:3E:48:A1:11:8E:59:9B:F2:66:0A
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584D15A25CED7348FF4878036D80
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/2fac2b11-eae6-352f-b5f0-44e1af5f9416.roa
Signing time:             Sat 07 Mar 2026 02:00:32 +0000
ROA not before:           Sat 07 Mar 2026 02:00:32 +0000
ROA not after:            Fri 05 Jun 2026 01:00:32 +0000
asID:                     852
IP address blocks:        2001:56b::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:15:a2:5c:ed:73:48:ff:48:78:03:6d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Mar  7 02:00:32 2026 GMT
            Not After : Jun  5 01:00:32 2026 GMT
        Subject: CN=723f716e-c5cf-454f-b04f-ee17037e756c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:06:fb:b2:10:29:bd:71:2d:56:ae:93:c8:97:
                    a0:c2:43:56:75:34:10:27:40:75:b9:ea:6d:e8:ac:
                    ea:f4:7b:8f:d8:b1:83:59:d4:f0:63:26:51:f2:9f:
                    ba:fc:83:1f:41:7e:70:53:a1:06:a7:33:ea:44:d6:
                    73:5a:0d:a6:df:c7:0d:24:3e:0b:1a:4a:33:6d:a6:
                    88:9d:6f:97:01:06:11:87:fb:70:98:c5:ba:09:dd:
                    ad:5b:20:b4:78:86:f3:21:ea:86:5b:94:b0:48:cc:
                    9c:76:ac:27:e6:39:68:e8:c9:14:fa:cc:db:90:2f:
                    a7:bd:d4:2b:09:8e:c4:33:3a:59:92:dd:d5:be:60:
                    0a:21:1f:af:aa:a8:69:02:bf:fe:2c:22:8e:23:ed:
                    bc:b4:86:52:a0:5a:3a:ee:38:90:ff:fa:4e:d7:33:
                    31:25:2a:19:e8:dd:dc:93:42:20:50:b9:0d:7f:1e:
                    17:b9:fc:12:66:57:2d:25:cb:27:e4:a5:4f:47:2e:
                    04:6d:da:ff:f4:ba:cb:c6:86:9f:76:a4:a1:b7:c7:
                    a6:4a:40:72:22:ea:14:db:b9:c6:89:7a:1d:da:2b:
                    65:44:69:49:96:9c:2d:58:a4:ca:54:b8:0b:43:71:
                    12:a8:3c:2a:e0:eb:ae:ac:51:5d:67:48:17:c6:f5:
                    d6:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:6E:D7:33:33:24:B7:63:BC:5D:3E:48:A1:11:8E:59:9B:F2:66:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/2fac2b11-eae6-352f-b5f0-44e1af5f9416.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:56b::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:d4:cf:26:d8:83:46:13:78:95:d2:f1:37:3b:99:56:51:c9:
         d3:0d:d0:39:ac:9d:b4:d8:0f:a5:b8:bc:cd:57:0f:d0:19:81:
         db:f0:73:5a:86:56:cf:9b:5e:3b:fa:ad:07:df:46:bc:7d:e1:
         8c:e5:e7:2c:c6:69:d8:51:cc:11:46:8e:f7:c5:5a:e1:b1:c4:
         e4:56:21:c4:df:0c:df:f6:de:b6:98:fe:19:7b:4b:e4:3d:24:
         a8:2d:18:b9:fa:8e:90:32:69:e2:ca:a4:40:82:b5:bb:80:6f:
         f8:c6:37:c8:57:ad:d4:3f:b5:5a:61:e7:8d:55:2c:e0:65:4a:
         1b:7e:6e:55:45:9c:81:a0:72:e5:c1:56:ef:87:f8:34:db:96:
         6c:e2:4e:74:21:cc:e6:35:9c:29:27:f5:03:b4:22:ae:b1:e2:
         92:1d:3d:62:74:fa:38:fb:ea:62:de:dd:e6:fe:4f:22:b1:6c:
         08:83:4a:1c:bf:d0:78:8f:c6:3d:81:06:1a:cf:7b:71:57:ac:
         f7:59:c0:6a:9d:f4:39:92:69:63:19:13:26:52:2b:17:d0:61:
         25:ca:7a:4b:af:18:a6:b1:21:13:37:04:c5:55:3c:0e:ad:1a:
         10:0e:5b:42:a1:20:31:36:9a:bd:75:90:70:bc:b1:44:f0:c5:
         ea:5a:70:ec
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE0Volztc0j/SHgDbYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl
YjI0MB4XDTI2MDMwNzAyMDAzMloXDTI2MDYwNTAxMDAzMlowLzEtMCsGA1UEAxMk
NzIzZjcxNmUtYzVjZi00NTRmLWIwNGYtZWUxNzAzN2U3NTZjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqAb7shApvXEtVq6TyJegwkNWdTQQJ0B1uept
6Kzq9HuP2LGDWdTwYyZR8p+6/IMfQX5wU6EGpzPqRNZzWg2m38cNJD4LGkozbaaI
nW+XAQYRh/twmMW6Cd2tWyC0eIbzIeqGW5SwSMycdqwn5jlo6MkU+szbkC+nvdQr
CY7EMzpZkt3VvmAKIR+vqqhpAr/+LCKOI+28tIZSoFo67jiQ//pO1zMxJSoZ6N3c
k0IgULkNfx4XufwSZlctJcsn5KVPRy4Ebdr/9LrLxoafdqSht8emSkByIuoU27nG
iXod2itlRGlJlpwtWKTKVLgLQ3ESqDwq4OuurFFdZ0gXxvXWWwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFKFu1zMzJLdjvF0+SKERjlmb8mYKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm
OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvMmZhYzJiMTEtZWFlNi0z
NTJmLWI1ZjAtNDRlMWFmNWY5NDE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky
NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh
ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi
NzcyYWViMjQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYGIAEFawAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAMdTPJtiDRhN4ldLxNzuZVlHJ0w3QOaydtNgPpbi8zVcP0BmB2/Bz
WoZWz5teO/qtB99GvH3hjOXnLMZp2FHMEUaO98Va4bHE5FYhxN8M3/betpj+GXtL
5D0kqC0YufqOkDJp4sqkQIK1u4Bv+MY3yFet1D+1WmHnjVUs4GVKG35uVUWcgaBy
5cFW74f4NNuWbOJOdCHM5jWcKSf1A7QirrHikh09YnT6OPvqYt7d5v5PIrFsCINK
HL/QeI/GPYEGGs97cVes91nAap30OZJpYxkTJlIrF9BhJcp6S68YprEhEzcExVU8
Dq0aEA5bQqEgMTaavXWQcLyxRPDF6lpw7A==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:34:34 2026 by rpki-client