Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/6a1c9f55-490f-3b87-9049-d9573efc73d3.roa
File:                     6a1c9f55-490f-3b87-9049-d9573efc73d3.roa (raw, json)
Hash identifier:          aseFjVATtUxLfFuAR2/+uyNpu2oKDbLW5zdDqrfgEmY=
Subject key identifier:   AB:4B:F9:79:65:50:BC:C2:E0:AA:68:7E:C0:B8:A6:9A:18:F9:FB:D4
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584EA797316426DAF2D352396200
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/6a1c9f55-490f-3b87-9049-d9573efc73d3.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     852
IP address blocks:        2001:56a::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:97:31:64:26:da:f2:d3:52:39:62:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=2a9bb23a-a91a-4c98-9721-3251520e3b9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:89:b5:11:12:59:ef:39:3e:17:ff:0c:cd:ce:
                    1d:96:e4:5e:d5:c4:02:de:84:4b:a3:b0:e7:f0:24:
                    34:74:d1:5d:fd:a2:4f:de:cd:b5:83:e1:9e:9d:d5:
                    fe:db:7b:26:e4:0e:34:bb:54:2a:0d:77:47:4c:c6:
                    b5:59:31:06:ed:90:29:12:d3:ee:98:dd:d4:d4:4c:
                    4a:c2:7d:dd:f9:a8:8e:56:e4:75:09:cf:f2:47:55:
                    2f:c3:ea:96:c5:fb:3f:76:6b:74:ee:6e:4c:83:6f:
                    3d:bb:44:54:82:ec:ad:8a:50:81:7c:01:58:9c:c2:
                    f3:61:73:e6:05:1d:84:1f:da:09:b6:5f:97:bb:ba:
                    e2:80:72:73:1a:8b:b6:95:0b:5a:12:de:f4:54:6e:
                    80:a7:4b:c1:0c:9e:56:1b:9d:2d:1d:b4:be:dc:b6:
                    4c:04:ff:07:04:16:bc:e2:a9:ee:99:e5:24:9c:c5:
                    61:38:ef:b3:80:5d:b3:a6:f6:3f:55:82:82:1c:2f:
                    1d:54:63:9b:31:74:52:78:e0:6f:95:c5:4a:63:f9:
                    aa:a1:93:3a:01:42:67:2d:01:7e:35:85:74:7a:97:
                    56:05:d6:54:f3:50:b4:16:92:3e:6f:79:aa:3b:e7:
                    be:a1:45:71:ec:ef:e1:5d:cf:81:32:8d:e8:43:da:
                    53:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:4B:F9:79:65:50:BC:C2:E0:AA:68:7E:C0:B8:A6:9A:18:F9:FB:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/6a1c9f55-490f-3b87-9049-d9573efc73d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:56a::/33

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:cc:85:df:01:82:55:ba:24:53:55:fc:23:3d:26:38:2b:59:
         62:7e:37:e6:39:27:72:61:8e:37:f0:0d:dd:8b:08:ea:45:ae:
         7e:a4:22:9b:0c:1e:55:e8:60:e6:b8:0b:47:64:77:0b:4a:ff:
         9f:f0:13:db:4c:db:9b:52:30:8f:33:20:25:05:9a:f1:74:c7:
         00:e1:58:88:72:53:f3:61:f3:8d:bc:3c:dc:ae:42:af:67:4a:
         c3:23:9c:03:61:4f:56:8f:38:a3:ea:00:5d:09:1c:73:9e:c7:
         89:5c:91:1e:a4:f3:6b:d2:3a:82:68:45:cd:25:c3:5d:42:4c:
         bf:6e:d3:78:ae:86:50:f6:3c:59:a3:f8:81:7e:9a:7b:9a:af:
         5f:45:13:76:e4:ba:81:43:19:a1:98:22:1e:11:7b:e8:ea:87:
         cb:f4:9a:91:12:6b:f6:9c:0c:31:24:3a:e6:0f:4c:61:20:3f:
         23:13:7a:77:48:12:d7:7a:e7:bb:2d:af:a0:2d:a2:e1:cc:94:
         aa:a1:f1:88:88:f4:4d:47:2d:8b:dd:3d:6e:c6:9f:57:0d:1c:
         15:9a:3f:8b:d4:b0:22:92:eb:95:88:0a:f1:de:a1:74:17:f2:
         7d:0b:1c:9b:73:3d:5c:79:8c:db:4b:a9:b4:fa:ec:24:b4:1a:
         72:d6:ce:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:04:10 2026 by rpki-client