Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/5be72693-e77e-3018-aaf9-9d1b330f1dd1.roa
File:                     5be72693-e77e-3018-aaf9-9d1b330f1dd1.roa (raw, json)
Hash identifier:          fSAXDouURE3t/03s+PkmLPHw0FABr32FEEyRY11FDEI=
Subject key identifier:   06:4B:A4:1B:63:A4:B0:4D:2D:CF:FA:D1:AA:41:A4:F6:AC:E7:D0:1D
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584A71EB3E39343C2FEE376A8180
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/5be72693-e77e-3018-aaf9-9d1b330f1dd1.roa
Signing time:             Tue 08 Jul 2025 01:00:51 +0000
ROA not before:           Tue 08 Jul 2025 01:00:51 +0000
ROA not after:            Mon 06 Oct 2025 01:00:51 +0000
asID:                     852
IP address blocks:        2001:56b:3ff0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:71:eb:3e:39:34:3c:2f:ee:37:6a:81:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Jul  8 01:00:51 2025 GMT
            Not After : Oct  6 01:00:51 2025 GMT
        Subject: CN=590e2721-1f83-4871-ad78-f088e4245a55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:80:eb:15:cb:ee:b6:0d:de:5d:3a:71:9e:f6:
                    54:07:21:2f:55:26:7c:e1:6f:f5:76:ab:dc:ee:b7:
                    5f:f0:17:89:93:0e:ee:ab:08:7c:60:50:39:d2:c0:
                    96:84:39:ba:74:41:60:b9:c1:f7:26:94:f4:6d:03:
                    8b:4a:7e:81:4f:73:6e:24:33:06:94:78:ad:42:b0:
                    46:06:ad:33:fb:8f:14:e1:ce:a3:77:8f:13:eb:57:
                    58:ec:20:e7:45:7a:89:16:31:9f:16:df:31:f1:c5:
                    68:c5:bc:c2:85:de:07:d2:22:f2:78:f4:31:bd:9b:
                    5c:de:40:6c:9a:2c:8d:f4:9f:5f:99:a4:3c:53:c0:
                    bb:32:2d:ca:f0:0c:8f:4c:96:35:91:d6:e6:b4:41:
                    5b:df:5b:c2:d3:7f:13:37:1d:3b:25:73:a7:bf:31:
                    4c:20:5b:d8:f6:33:64:f8:e8:f5:ab:19:3e:6a:67:
                    f0:2f:23:4e:13:2f:f1:a2:92:17:d9:98:57:19:cc:
                    66:26:c4:f6:b6:96:e3:c1:c4:c3:ad:c8:6b:81:87:
                    be:ba:56:53:47:2e:32:31:d7:0f:47:9a:35:57:d0:
                    02:65:c7:39:cf:67:da:21:67:07:8b:87:b4:b9:f0:
                    5e:32:0f:4f:4e:19:76:da:99:b5:1c:77:e8:58:bf:
                    ea:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:4B:A4:1B:63:A4:B0:4D:2D:CF:FA:D1:AA:41:A4:F6:AC:E7:D0:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/5be72693-e77e-3018-aaf9-9d1b330f1dd1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:56b:3ff0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:47:3b:f4:db:77:2c:35:05:06:63:3c:ef:80:b2:04:43:62:
         da:6b:f6:a2:88:af:13:af:0d:50:be:01:9a:c8:e8:17:c7:71:
         4e:b1:e4:fd:3e:9e:62:84:dd:bc:c3:c2:0d:34:db:fd:0c:74:
         29:9f:32:8f:86:61:00:78:df:19:86:a0:3e:da:d4:1d:bb:65:
         1d:24:fc:74:e8:f0:ee:9a:64:83:bc:2f:f0:98:de:26:91:d9:
         cc:27:c8:d2:6f:06:7c:21:86:ea:4a:35:68:2f:3f:7a:3b:59:
         95:43:b1:62:e2:2a:0b:f0:12:61:b8:09:7e:44:e7:6b:dc:c5:
         73:95:0c:7d:9e:f1:d0:0c:85:64:e0:e8:54:cc:b1:6e:a5:ec:
         5b:c2:f5:1c:76:05:e0:b4:8a:71:d5:bb:9b:30:c1:9f:4d:41:
         b3:38:48:fc:e3:dd:e2:d2:e3:75:8e:fc:b9:0b:75:0e:88:61:
         c8:03:8c:7f:f3:7e:98:34:e8:81:be:4d:ec:77:6d:c4:5e:25:
         97:94:50:34:51:20:dc:de:9f:57:4f:85:f1:b2:bc:b9:bc:62:
         6d:b9:36:bf:0a:42:c0:49:7c:cb:bf:5e:e9:fe:ba:ea:65:f1:
         b2:3d:16:b0:60:94:5e:1c:56:b4:b9:4f:38:11:04:8e:d1:b7:
         07:3f:63:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 19:23:48 2025 by rpki-client