Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/78881f58-b511-3e28-8b21-ca89701623b2.roa
File:                     78881f58-b511-3e28-8b21-ca89701623b2.roa (raw, json)
Hash identifier:          cAxPzyQ9VHfJAg43HKxUINFy0l4B0Dls5yPO4YOTMOo=
Subject key identifier:   3E:67:33:B3:7B:4F:5F:1F:A6:42:B4:9B:BB:19:07:E2:26:15:73:E4
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584F4973FC710E455889F4B4D7C0
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/78881f58-b511-3e28-8b21-ca89701623b2.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     852
IP address blocks:        2001:56b:4000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:fc:71:0e:45:58:89:f4:b4:d7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=102ddad6-e6d0-4a65-9834-9584aaa669df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:e8:27:e1:06:a1:94:84:23:d3:d9:cb:a3:b0:
                    3f:68:19:b3:28:33:2f:ff:1a:40:2a:06:1a:e9:2b:
                    53:4f:81:48:3c:73:92:ee:71:73:70:b7:d8:51:52:
                    87:77:35:9f:51:42:e8:51:ac:1a:d9:28:bf:0a:db:
                    78:2e:97:59:4a:35:9e:76:c7:26:7a:e6:c4:32:5d:
                    b7:b1:a7:c5:39:d3:3f:a7:96:1f:be:b8:15:3e:b7:
                    16:2e:76:a8:2d:67:df:2b:30:3e:f7:e0:92:b4:e5:
                    e5:0d:34:cb:93:b2:34:69:fd:c6:b5:93:45:78:29:
                    dc:7f:c8:3f:fe:c0:ed:66:65:f8:54:4d:2d:fd:b5:
                    fd:44:8b:e2:e0:7b:43:41:41:f8:55:4a:40:d8:02:
                    32:ab:70:61:11:85:bd:8a:3a:5d:84:a1:82:b2:60:
                    50:86:65:a8:63:d7:fd:26:b3:80:d3:6d:d9:93:81:
                    bb:a7:d7:36:99:3a:3f:09:f8:95:ec:a8:9e:6d:ce:
                    5e:93:09:16:34:bb:f2:1d:de:f1:76:1d:dd:e5:80:
                    b1:ec:14:71:a3:70:76:63:14:ad:28:3f:08:48:75:
                    51:52:2e:b9:20:0e:6a:99:d9:d5:7d:2f:c0:d6:6a:
                    75:04:2d:c0:42:b7:c1:13:05:de:d0:01:b3:3c:87:
                    67:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:67:33:B3:7B:4F:5F:1F:A6:42:B4:9B:BB:19:07:E2:26:15:73:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/78881f58-b511-3e28-8b21-ca89701623b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:56b:4000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:43:d6:97:dd:3a:7c:f5:fa:68:b7:2c:5e:91:cd:14:c3:f7:
         ef:bb:77:de:1a:7e:8a:1e:f7:64:6d:1a:b3:19:65:bb:3e:8e:
         49:d2:19:f3:8c:71:38:05:58:84:4e:b5:8b:cf:fb:bd:ad:79:
         ad:49:d0:a3:c6:d5:f3:3e:60:ad:ca:79:36:44:ff:c7:66:91:
         98:f2:3c:90:14:13:53:cf:6e:4d:fd:9c:15:a2:94:20:e0:d7:
         8e:2d:c9:00:5b:94:07:24:99:a5:0f:48:07:ec:c4:21:de:8e:
         91:67:4b:2e:ea:ca:2c:f3:5b:98:1f:37:85:f9:53:69:eb:74:
         d0:c2:bb:30:73:62:0c:8a:00:62:67:6c:d7:f2:2d:ea:a5:0a:
         24:62:7d:bc:d8:1f:4e:99:29:8e:4e:39:3f:9d:5c:9a:83:0b:
         fd:98:d0:f4:9d:fe:66:1d:22:28:95:99:ed:6c:b1:f2:a5:ba:
         a4:67:87:cc:f0:20:06:46:c5:47:47:a4:ee:18:f3:39:90:02:
         e8:6e:8f:b3:5e:f9:14:8e:4b:44:b6:ca:ff:a3:f8:85:3b:c5:
         40:a2:4f:ed:02:13:74:b1:97:60:4b:ce:96:af:3e:eb:09:6f:
         df:2b:b7:6a:b5:5b:f2:58:86:8d:b4:5b:4c:0a:f6:89:88:51:
         de:ea:2a:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 17:40:50 2026 by rpki-client