Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/a193d12d-457d-325b-8197-aad7ef2b9787.roa
File:                     a193d12d-457d-325b-8197-aad7ef2b9787.roa (raw, json)
Hash identifier:          xIoaAbO8dwDxBe+aMMdjOCzH6k0CRTgBpIUgeSgSdhE=
Subject key identifier:   32:F8:D8:B6:33:03:0F:66:87:50:8E:D8:72:4B:43:39:72:D3:34:DC
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584F4973FC0F78C2F176DFDDDD40
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/a193d12d-457d-325b-8197-aad7ef2b9787.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     852
IP address blocks:        2001:56b:9f70::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:fc:0f:78:c2:f1:76:df:dd:dd:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=faebd287-7b0d-4ab0-8492-06d8109d5613
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:c4:7f:19:8d:14:b6:40:da:43:6a:47:4a:18:
                    b9:15:6f:97:90:98:28:7a:bf:e2:72:bc:ee:07:fb:
                    85:53:0c:f0:be:85:c2:53:0f:4f:e9:15:40:7f:ba:
                    de:b6:b3:16:39:22:f5:7d:96:08:8c:08:55:77:54:
                    e0:a6:72:d0:de:ba:8b:dd:7a:64:bc:58:91:0e:28:
                    13:0c:7a:3b:11:42:d6:3c:91:85:53:8d:90:af:4d:
                    53:36:92:d3:e1:1d:dd:7d:61:ca:c7:c6:51:aa:7a:
                    0f:0f:c1:4a:eb:e8:e2:f3:e7:00:68:49:56:09:58:
                    e6:f1:d2:e6:9f:ae:c9:1b:36:cb:a8:28:65:ef:26:
                    42:7e:91:ee:f7:d5:82:47:aa:a4:23:46:34:68:fa:
                    cd:31:92:ff:0b:19:73:8d:62:dd:a4:ec:97:a4:d2:
                    3b:6d:4a:27:c8:0a:1d:c1:05:87:ed:7a:59:86:b8:
                    0f:da:fc:f0:f7:c2:dc:d3:44:d5:9c:6e:76:13:a7:
                    59:20:cd:3c:67:19:bf:8b:6e:14:50:5b:6b:cd:19:
                    3e:60:dd:2f:30:20:5a:1c:6b:2f:dc:9c:95:b0:c6:
                    25:87:a6:c7:f2:6e:56:e8:12:b3:87:48:0d:77:08:
                    c1:d8:b4:a4:55:c5:97:08:bf:e1:65:c8:b3:4e:51:
                    5b:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:F8:D8:B6:33:03:0F:66:87:50:8E:D8:72:4B:43:39:72:D3:34:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/a193d12d-457d-325b-8197-aad7ef2b9787.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:56b:9f70::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:3d:6c:92:16:53:c8:1b:d4:46:cd:50:00:ce:76:ea:cf:ab:
         4a:02:ce:f5:dc:05:08:6a:f3:50:cb:ec:cc:c1:7c:d4:23:31:
         80:4f:76:6b:91:c9:81:fd:58:44:cf:ad:56:62:25:6f:48:90:
         5e:8b:2b:cb:bf:02:5b:a8:52:eb:9e:18:c7:18:8b:90:86:80:
         12:9e:0c:31:e3:80:5e:eb:a2:da:6c:1d:29:c8:d6:02:6c:05:
         25:b3:a0:5a:3c:02:47:2e:b5:11:ff:fa:d5:42:b3:2f:32:03:
         4e:c2:91:ed:24:93:5a:45:a5:93:05:20:d1:31:e2:e7:87:13:
         a7:38:3f:20:bf:1c:92:37:20:e6:e9:91:55:29:f6:dc:e3:bb:
         99:50:bc:84:1a:9b:76:f5:be:c7:12:03:10:e8:11:88:e1:5a:
         c6:ab:1c:81:86:ee:3e:73:a9:73:ee:0c:16:65:62:f4:65:2c:
         6c:ed:04:85:74:30:96:b0:5a:24:e6:1f:34:25:18:98:b2:2a:
         50:4a:31:e3:f3:06:66:e8:1a:5d:b1:95:84:da:f3:65:f7:07:
         06:94:fc:f0:82:c4:96:62:44:db:9c:69:37:d3:c2:b3:67:1c:
         cc:68:7e:5a:0f:48:5b:e2:8f:40:25:89:d2:40:cc:31:f2:22:
         25:cf:af:9b
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9Jc/wPeMLxdt/d3UAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl
YjI0MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
ZmFlYmQyODctN2IwZC00YWIwLTg0OTItMDZkODEwOWQ1NjEzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAocR/GY0UtkDaQ2pHShi5FW+XkJgoer/icrzu
B/uFUwzwvoXCUw9P6RVAf7retrMWOSL1fZYIjAhVd1TgpnLQ3rqL3XpkvFiRDigT
DHo7EULWPJGFU42Qr01TNpLT4R3dfWHKx8ZRqnoPD8FK6+ji8+cAaElWCVjm8dLm
n67JGzbLqChl7yZCfpHu99WCR6qkI0Y0aPrNMZL/CxlzjWLdpOyXpNI7bUonyAod
wQWH7XpZhrgP2vzw98Lc00TVnG52E6dZIM08Zxm/i24UUFtrzRk+YN0vMCBaHGsv
3JyVsMYlh6bH8m5W6BKzh0gNdwjB2LSkVcWXCL/hZcizTlFbJQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFDL42LYzAw9mh1CO2HJLQzly0zTcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm
OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvYTE5M2QxMmQtNDU3ZC0z
MjViLTgxOTctYWFkN2VmMmI5Nzg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky
NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh
ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi
NzcyYWViMjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEIAEFa59w
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAK49bJIWU8gb1EbNUADOdurPq0oCzvXcBQhq81DL7MzBfNQjMYBP
dmuRyYH9WETPrVZiJW9IkF6LK8u/AluoUuueGMcYi5CGgBKeDDHjgF7rotpsHSnI
1gJsBSWzoFo8AkcutRH/+tVCsy8yA07Cke0kk1pFpZMFINEx4ueHE6c4PyC/HJI3
IObpkVUp9tzju5lQvIQam3b1vscSAxDoEYjhWsarHIGG7j5zqXPuDBZlYvRlLGzt
BIV0MJawWiTmHzQlGJiyKlBKMePzBmboGl2xlYTa82X3BwaU/PCCxJZiRNucaTfT
wrNnHMxofloPSFvij0AlidJAzDHyIiXPr5s=
-----END CERTIFICATE-----
Generated at Thu Oct 8 16:23:48 2026 by rpki-client