Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/7e9ef1db-d8a9-3e74-9999-752b5f58583a.roa
File:                     7e9ef1db-d8a9-3e74-9999-752b5f58583a.roa (raw, json)
Hash identifier:          4wjN5mZSk44TBB8gJntiZCbYshOoMY1FBiaArHUc+N8=
Subject key identifier:   A5:53:AB:5B:EA:DD:6C:5B:AA:76:3C:BD:F5:60:6E:B0:3A:6E:F1:59
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584F4973FD1920EA28FD8F582F80
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/7e9ef1db-d8a9-3e74-9999-752b5f58583a.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     852
IP address blocks:        2001:56a:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:fd:19:20:ea:28:fd:8f:58:2f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=fb247edf-79de-4774-b024-8e14feb79d7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:0e:5c:18:c2:18:4a:4c:76:8f:e4:03:a7:5d:
                    e3:4e:43:d8:bb:7d:f3:63:1b:b1:b6:cd:00:7b:d3:
                    82:c1:3f:c9:9c:03:a7:11:1c:a6:f7:16:42:27:79:
                    b1:de:79:da:f6:3d:bf:83:41:e3:50:62:19:c8:d4:
                    c5:5d:b2:72:9f:e6:e4:27:e5:22:6d:cd:29:e4:e7:
                    49:74:78:a0:31:54:8e:9b:c4:21:4c:62:62:07:71:
                    0e:04:25:21:60:5d:63:8f:f6:ec:c8:a9:1b:ee:91:
                    e0:0d:8d:be:62:ea:43:bc:c5:6d:9f:2c:a0:48:b3:
                    37:6e:77:dd:f8:36:a9:e9:ba:ee:35:6d:10:6f:a4:
                    50:57:81:ee:91:aa:fd:1c:d7:e0:05:19:f9:52:a7:
                    e0:b3:5a:68:af:4a:22:a9:c8:df:95:0f:f1:4d:9d:
                    6b:75:24:62:0a:68:ab:b2:89:4d:fb:aa:e1:91:1d:
                    09:31:a1:9b:53:0e:a9:08:69:13:49:2d:c3:85:dd:
                    fe:70:b0:47:42:1d:68:89:cf:4e:1e:77:7c:d3:65:
                    99:97:86:34:65:96:ae:d5:63:ac:17:d2:c4:c2:12:
                    a1:bb:f0:86:3c:3f:74:56:b0:32:79:59:df:f9:73:
                    2f:6c:29:42:23:cc:85:35:95:e9:60:dd:c2:9d:e9:
                    57:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:53:AB:5B:EA:DD:6C:5B:AA:76:3C:BD:F5:60:6E:B0:3A:6E:F1:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/7e9ef1db-d8a9-3e74-9999-752b5f58583a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:56a:8000::/33

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:75:a0:10:97:46:15:6d:a6:1b:0b:1e:f9:55:b7:2b:c3:98:
         e7:70:93:a4:31:e0:80:b3:d9:b4:de:ad:e1:2d:af:5a:0c:fc:
         d2:24:3e:3e:34:3c:7b:12:77:5e:a6:5f:c0:4d:c4:d7:2c:1a:
         e8:be:3f:7b:35:28:d6:fc:df:3b:5b:eb:b7:70:72:84:e9:ba:
         4d:06:7d:82:33:9b:48:20:99:a5:72:c5:8f:58:27:59:8e:74:
         24:71:30:f5:5c:ec:37:50:cb:e3:51:3f:30:23:4f:4b:b0:77:
         73:6b:b9:22:26:51:70:6b:be:98:e6:38:e4:a1:49:fe:fb:91:
         df:45:d0:cc:4e:f3:b0:d6:ca:a9:5f:f4:49:3a:f7:69:a7:ed:
         cf:73:ca:e0:c2:10:5f:47:f3:5d:eb:79:90:f5:09:7a:88:8b:
         48:a5:ae:7f:8c:80:f8:7c:aa:d4:a3:29:da:90:32:98:51:52:
         01:4e:d7:01:1c:27:ad:b8:31:8a:cb:ab:6a:95:29:4c:0e:5c:
         f3:48:49:23:3f:e7:fc:75:60:d6:6e:13:ba:10:46:b1:ff:d4:
         23:66:3a:06:bc:16:3d:b0:1f:54:b9:d8:ef:51:b3:b9:d4:f9:
         47:b2:2a:cc:85:c4:8a:da:19:0f:fe:b1:36:24:2c:7b:95:43:
         a4:40:2c:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 12:21:22 2026 by rpki-client