Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0cbd7d11-5d6b-43e8-95af-8f22df70ae10/56eb46a4-ce70-3335-9f2d-bc016978086e.roa
File:                     56eb46a4-ce70-3335-9f2d-bc016978086e.roa (raw, json)
Hash identifier:          w9nvDYVH+sCEApM0zNhE3a5XFOKecvufnylVNN8zXj8=
Subject key identifier:   FE:6F:17:10:D8:BB:C7:D2:B9:B2:C4:65:DA:CE:07:FE:06:3F:D1:FD
Certificate issuer:       /CN=0cbd7d11-5d6b-43e8-95af-8f22df70ae10
Certificate serial:       010D0C9F4328584B4FAD347B9626F020AEC08480
Authority key identifier: 5F:E8:42:A0:DC:43:05:81:66:46:2E:57:CD:B6:54:7B:19:F5:65:4F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0cbd7d11-5d6b-43e8-95af-8f22df70ae10.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0cbd7d11-5d6b-43e8-95af-8f22df70ae10/56eb46a4-ce70-3335-9f2d-bc016978086e.roa
Signing time:             Thu 25 Sep 2025 11:25:33 +0000
ROA not before:           Thu 25 Sep 2025 11:25:33 +0000
ROA not after:            Wed 24 Dec 2025 12:25:33 +0000
asID:                     16509
IP address blocks:        168.100.6.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0cbd7d11-5d6b-43e8-95af-8f22df70ae10/0cbd7d11-5d6b-43e8-95af-8f22df70ae10.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0cbd7d11-5d6b-43e8-95af-8f22df70ae10/0cbd7d11-5d6b-43e8-95af-8f22df70ae10.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0cbd7d11-5d6b-43e8-95af-8f22df70ae10.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4f:ad:34:7b:96:26:f0:20:ae:c0:84:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0cbd7d11-5d6b-43e8-95af-8f22df70ae10
        Validity
            Not Before: Sep 25 11:25:33 2025 GMT
            Not After : Dec 24 12:25:33 2025 GMT
        Subject: CN=3012ca79-d401-4727-8f4d-78f0e8b218fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:20:ab:b9:3a:68:fa:fd:28:f8:2e:69:d2:d6:
                    ae:76:a8:92:f4:52:4e:d5:f5:48:d8:46:a0:65:86:
                    ad:f0:72:aa:a0:51:8a:ce:16:5a:73:65:d7:bf:1b:
                    12:0f:cd:3d:10:a4:df:44:60:2f:79:d6:8d:ca:d7:
                    df:81:3a:5d:ee:2a:85:44:b6:1d:1f:a5:24:f3:af:
                    c2:95:a4:8a:ad:60:0f:ea:17:56:17:94:5a:bc:35:
                    0c:7c:ea:7b:cc:d7:d0:d9:38:7a:24:79:3f:ad:2f:
                    8e:df:3d:f8:60:1f:23:72:d7:27:0e:84:c7:e4:12:
                    e4:87:45:91:e2:d2:dd:e1:68:55:7a:08:77:e5:3e:
                    6f:45:de:83:77:50:dc:26:bc:db:7a:2f:54:6f:9e:
                    34:d9:df:d3:c2:6d:55:6c:57:e9:4b:95:ae:e3:0f:
                    a9:1a:8b:45:a8:56:56:cf:63:94:6b:95:86:4a:a3:
                    f9:de:45:ca:fc:e2:84:16:fb:1e:67:5a:7a:af:85:
                    0b:23:3a:ac:f4:14:71:01:d5:16:48:9b:4e:b4:80:
                    30:de:75:30:6a:8a:aa:7a:31:be:a7:3b:54:02:7d:
                    17:df:75:d5:8a:f6:1b:ec:3d:2f:2b:f2:7b:2d:46:
                    49:bc:26:f3:ca:82:60:00:ba:7b:e1:c2:12:c3:87:
                    2e:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:6F:17:10:D8:BB:C7:D2:B9:B2:C4:65:DA:CE:07:FE:06:3F:D1:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0cbd7d11-5d6b-43e8-95af-8f22df70ae10/56eb46a4-ce70-3335-9f2d-bc016978086e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0cbd7d11-5d6b-43e8-95af-8f22df70ae10/0cbd7d11-5d6b-43e8-95af-8f22df70ae10.crl

            X509v3 Authority Key Identifier:
                keyid:5F:E8:42:A0:DC:43:05:81:66:46:2E:57:CD:B6:54:7B:19:F5:65:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0cbd7d11-5d6b-43e8-95af-8f22df70ae10.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.100.6.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:b1:0d:24:f4:f2:4e:5b:1e:70:a5:ed:dc:70:82:13:3e:17:
         7b:63:67:75:29:12:f1:25:ef:7f:fd:61:66:4b:18:c3:71:be:
         3b:ed:8b:9b:2c:4c:0d:c8:a7:3b:68:63:63:d4:37:f8:a4:b2:
         e5:f9:40:5a:e9:69:3b:33:72:05:19:2b:87:66:23:56:36:30:
         9b:6d:94:82:f2:5a:5d:4c:e8:63:50:d5:b4:23:bc:bd:7f:ad:
         e4:b9:dc:4d:51:a0:e2:8f:37:a5:99:93:d9:98:ec:9f:34:c7:
         61:bd:88:94:0f:74:8e:11:3b:74:c9:5c:ac:e7:91:1f:0a:47:
         a9:34:85:c7:31:77:36:e8:47:66:b2:b1:2d:31:aa:64:57:9c:
         44:eb:ca:4a:7a:e1:25:23:48:a2:1b:b5:df:0f:fa:98:d2:6a:
         0d:ee:9a:51:33:b7:7a:0d:36:dd:09:14:e4:cd:02:94:bb:20:
         2a:90:55:4f:89:cb:22:77:a5:d1:9b:c6:aa:9c:11:38:03:98:
         9f:43:6a:54:d7:85:c2:0c:68:99:ce:c2:89:20:2a:df:17:f6:
         fa:3c:2a:16:a5:3d:13:aa:c8:26:aa:73:0e:df:91:22:8e:b1:
         ed:71:1e:7c:a3:7b:08:02:5e:af:dd:fe:d6:d3:27:af:72:75:
         e1:98:91:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 22:55:39 2025 by rpki-client