Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/c245ad1d-4f49-308e-befb-c8aefcc82f22.roa
File:                     c245ad1d-4f49-308e-befb-c8aefcc82f22.roa (raw, json)
Hash identifier:          ef+yqEEjrhaR0ZRweuUGKEMGeL1JPfvFTuLomxRDap8=
Subject key identifier:   13:D3:6F:4E:09:4D:0D:EE:28:49:FE:62:22:48:2B:22:57:89:66:8A
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584E736A265115C9A93CDD1E9220
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/c245ad1d-4f49-308e-befb-c8aefcc82f22.roa
Signing time:             Fri 10 Jul 2026 09:00:12 +0000
ROA not before:           Fri 10 Jul 2026 09:00:12 +0000
ROA not after:            Thu 08 Oct 2026 09:00:12 +0000
asID:                     7861
IP address blocks:        2001:56b:e00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:73:6a:26:51:15:c9:a9:3c:dd:1e:92:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Jul 10 09:00:12 2026 GMT
            Not After : Oct  8 09:00:12 2026 GMT
        Subject: CN=21a33456-76c0-46b3-b948-1040a4517ebe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:95:b0:61:be:1a:bc:cc:58:67:f9:13:97:c4:
                    3d:b4:ad:45:73:11:7e:f0:74:53:92:96:62:41:0f:
                    f8:94:bd:b1:00:80:74:b8:19:c8:1e:6f:a8:3b:12:
                    fc:02:62:e5:b2:ca:1b:5e:85:a4:58:33:4d:4a:87:
                    e7:ef:c2:53:a4:cb:ea:f9:bd:90:cd:96:69:29:a8:
                    59:81:d4:4d:b4:b2:61:2b:7f:b2:be:36:b4:57:70:
                    f9:70:ee:86:74:13:f3:1b:b5:03:4c:33:46:ba:49:
                    a6:e2:fc:95:48:7a:0a:75:a6:07:da:1c:fd:3e:b0:
                    92:4e:32:e4:47:ec:3b:01:2d:9b:b0:ec:0e:17:a1:
                    eb:83:dd:b8:51:b4:38:d9:19:0b:aa:26:5f:d7:07:
                    b2:19:74:8a:71:ff:29:f8:d0:50:f5:78:d1:7f:5f:
                    e9:b7:d1:d6:90:1a:e2:0b:42:c7:86:9d:05:fa:c1:
                    c7:48:dc:8e:36:b9:5b:9f:18:7b:4b:93:38:34:68:
                    92:1e:a1:d3:a7:45:d9:ea:b7:4d:38:60:79:e4:55:
                    58:22:a8:f1:46:e1:f7:48:d9:46:5e:5d:b3:a5:0f:
                    47:6c:ad:27:d4:a8:9a:2e:c2:62:f7:20:ec:eb:0e:
                    a5:66:d0:97:38:12:e8:0d:a9:39:c6:3a:be:27:36:
                    1d:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:D3:6F:4E:09:4D:0D:EE:28:49:FE:62:22:48:2B:22:57:89:66:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/c245ad1d-4f49-308e-befb-c8aefcc82f22.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:56b:e00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bf:32:f7:2c:99:a9:96:28:43:72:0b:6d:ef:46:8a:91:30:e1:
         4d:b3:a0:21:93:d2:22:10:9c:ce:50:9f:7f:d1:0f:de:c1:13:
         a1:b7:73:d5:c8:b7:50:be:b9:da:01:d2:79:73:e4:f4:c3:c5:
         75:c0:af:61:6a:7d:15:2d:68:45:fa:0b:db:2f:70:a3:e0:36:
         a3:e8:a3:ff:dd:9b:2a:52:f8:f2:99:43:58:b2:59:bc:13:7a:
         15:fa:01:09:1b:66:07:75:e7:6a:e8:ab:cf:f0:dc:05:9a:9e:
         8b:f1:46:1e:d5:c8:b9:74:f0:32:dc:c9:14:6e:a3:a6:69:c7:
         19:50:a8:93:b4:6e:4f:53:1e:1e:23:8a:ea:d3:3a:cf:c8:5d:
         59:dc:fe:a4:5a:49:f2:60:1c:72:3a:21:23:cb:90:7a:2e:e4:
         ab:b0:0a:c4:42:4b:24:88:84:2c:d3:6c:7c:9e:2c:fb:fb:d5:
         d0:97:b7:6f:4a:a6:a2:95:f0:41:3f:25:8c:f8:91:2a:5e:55:
         5d:35:ae:a0:0e:5a:d1:fd:82:9e:b7:fe:25:67:6c:eb:93:7d:
         e1:e5:85:c4:7d:03:7b:b1:b6:c6:25:f3:34:64:1a:84:5d:4e:
         23:1d:17:13:43:15:f2:6e:9e:f6:c1:61:6c:19:94:e9:bf:9c:
         2e:f0:62:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:11:04 2026 by rpki-client