Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/8b49ade0-7e7a-3fe9-a8f6-6ee7f304e743.roa
File:                     8b49ade0-7e7a-3fe9-a8f6-6ee7f304e743.roa (raw, json)
Hash identifier:          U86GGC9JevJksywPP2W94eMg/smh0WhGBjmg2QcyoO0=
Subject key identifier:   A0:BC:56:B3:82:D2:15:E6:86:61:D1:DB:EF:35:54:26:FE:7A:06:43
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584EA79A2BE2D1A36CB720019100
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/8b49ade0-7e7a-3fe9-a8f6-6ee7f304e743.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     852
IP address blocks:        2001:56b:800b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9a:2b:e2:d1:a3:6c:b7:20:01:91:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=ff0a0213-9060-40af-9131-dc15294bee76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:48:ba:cc:4e:3e:1b:85:04:f4:e2:39:e5:2a:
                    0c:31:3c:ae:6d:b5:a7:fd:56:c0:07:4b:cb:46:6f:
                    d3:ca:eb:b3:fd:d0:58:6a:54:d3:a3:28:41:ac:8d:
                    29:90:78:66:b5:27:dd:1c:1f:74:f2:e5:d6:6d:c8:
                    ee:a2:32:f7:95:a2:a7:16:a9:37:29:79:d7:d2:ca:
                    36:ed:10:08:48:67:00:61:81:07:22:22:8d:f4:f8:
                    e1:e6:23:53:5c:8d:b2:48:4d:1e:a7:97:0a:10:db:
                    5d:e9:58:a1:89:d4:a3:0b:26:13:10:d3:78:1f:43:
                    4c:46:8e:fb:de:c6:3f:33:12:10:b0:93:a8:c9:85:
                    69:7d:0d:ad:3d:27:94:93:fb:b5:a6:c0:ad:8d:46:
                    6f:cf:e1:54:cc:8b:37:50:17:78:7b:79:cb:fd:40:
                    b0:a7:45:23:d7:12:82:85:37:fb:d7:13:92:3a:1f:
                    cb:80:f9:c8:d7:c2:b4:85:00:b9:27:1c:a1:ba:67:
                    2f:6a:52:a0:d2:24:f2:ee:f6:8e:70:29:54:b0:4b:
                    e0:58:13:ef:38:c8:c2:7c:13:53:b8:37:15:a9:57:
                    1b:d5:03:56:41:fd:2a:03:ac:50:8c:d4:10:41:98:
                    82:4f:da:69:df:41:bb:fd:a2:a1:75:32:87:13:31:
                    75:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:BC:56:B3:82:D2:15:E6:86:61:D1:DB:EF:35:54:26:FE:7A:06:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/8b49ade0-7e7a-3fe9-a8f6-6ee7f304e743.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:56b:800b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:e0:18:04:07:db:48:19:b5:b0:08:76:c3:3b:6e:a6:0a:44:
         5a:22:71:a3:87:5a:f3:af:26:f8:58:7f:48:20:49:75:ea:1c:
         71:d5:34:87:d8:88:d5:51:02:81:77:29:4f:45:b8:12:63:49:
         b6:60:8a:8e:0a:76:e0:46:f9:1e:97:bb:fb:81:0a:73:bf:ff:
         10:b6:f8:05:78:44:ae:f9:60:03:2d:75:14:98:a6:1f:f9:3b:
         66:35:f5:0f:5d:b3:f3:65:a5:40:3c:2c:d4:a7:bb:f3:25:15:
         4e:35:8b:7b:32:de:e5:6c:00:40:11:b6:f9:4d:b7:98:cd:e2:
         2d:5c:2d:6b:0f:3d:7e:21:95:90:f6:59:ca:6b:f4:1f:3d:ab:
         b4:0b:1e:6d:a7:34:d0:cf:34:2a:61:fb:ff:7c:1d:cb:6c:a2:
         e0:4b:b7:0f:eb:0b:9c:a5:23:4d:12:c4:02:50:54:ef:1f:22:
         d0:cd:9d:dd:b1:de:c6:8e:fb:52:1e:68:78:7a:ab:ff:d6:d9:
         0a:f6:78:26:0d:fd:01:95:fa:d4:77:f0:1d:df:22:0f:ad:88:
         d4:36:57:e8:d9:94:d2:df:f6:94:00:a4:ec:7a:7d:b2:3e:1b:
         ee:d1:f1:ef:8f:d2:00:c8:4c:6e:81:07:52:28:2d:9f:b9:69:
         3e:47:98:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:36:12 2026 by rpki-client