Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/56b85935-4ce1-48c7-a19f-f7ab026f59a3/5c78cad0-3ad2-33d3-91f8-8162ca042994.roa
File:                     5c78cad0-3ad2-33d3-91f8-8162ca042994.roa (raw, json)
Hash identifier:          xX8Gpv7ZzlYxcqRfNzLOY1kMUDqOMYIgA5TPQM251Ic=
Subject key identifier:   D9:1C:95:DC:06:31:A4:48:C3:B6:46:39:F7:6D:FD:D8:E4:2B:5B:D1
Certificate issuer:       /CN=56b85935-4ce1-48c7-a19f-f7ab026f59a3
Certificate serial:       010D0C9F4328584B56D74BB1613141107F2EDE80
Authority key identifier: 9B:EC:E6:5C:34:B1:AF:71:C0:5C:11:CC:2C:F7:E9:DD:3A:DA:0E:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/56b85935-4ce1-48c7-a19f-f7ab026f59a3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/56b85935-4ce1-48c7-a19f-f7ab026f59a3/5c78cad0-3ad2-33d3-91f8-8162ca042994.roa
Signing time:             Sun 28 Sep 2025 01:00:33 +0000
ROA not before:           Sun 28 Sep 2025 01:00:33 +0000
ROA not after:            Sat 27 Dec 2025 02:00:33 +0000
asID:                     13654
IP address blocks:        68.171.16.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/56b85935-4ce1-48c7-a19f-f7ab026f59a3/56b85935-4ce1-48c7-a19f-f7ab026f59a3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/56b85935-4ce1-48c7-a19f-f7ab026f59a3/56b85935-4ce1-48c7-a19f-f7ab026f59a3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/56b85935-4ce1-48c7-a19f-f7ab026f59a3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:56:d7:4b:b1:61:31:41:10:7f:2e:de:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56b85935-4ce1-48c7-a19f-f7ab026f59a3
        Validity
            Not Before: Sep 28 01:00:33 2025 GMT
            Not After : Dec 27 02:00:33 2025 GMT
        Subject: CN=28a9f1d6-6593-4256-878d-e79d86e85dba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:7e:18:51:56:bb:5c:f5:6f:41:46:87:c4:d2:
                    72:3e:f8:2d:bb:82:94:10:17:dc:d6:08:21:a1:54:
                    d9:4c:ea:80:87:ae:2f:93:ed:ad:33:69:38:ef:22:
                    62:73:b8:6c:d3:71:e3:75:de:44:07:eb:c9:55:67:
                    f0:96:5e:cd:16:d0:4f:72:39:75:29:0a:22:b9:06:
                    13:a2:4a:b1:f6:17:9e:38:15:63:05:c2:be:be:05:
                    aa:45:7f:53:7e:cc:10:c5:2d:e5:63:09:38:cb:b7:
                    90:8f:02:ef:74:72:ea:36:aa:bd:f5:73:b8:69:1e:
                    73:4d:fe:81:69:db:d0:3b:6c:29:d7:c4:ad:c0:14:
                    64:cd:da:a3:55:aa:2b:93:03:04:51:0a:40:74:4c:
                    5d:df:2d:7d:e9:ad:30:03:c1:95:ce:66:0e:69:7f:
                    4d:5c:1e:28:06:b1:3a:f2:fa:e3:e0:7a:c9:c8:7b:
                    c6:15:ae:cf:ac:27:6e:45:4d:85:9c:c9:f6:11:05:
                    87:a4:3a:ae:b9:16:2c:e1:25:4d:16:26:dd:9c:47:
                    d1:2d:a9:10:8f:ad:37:45:47:5c:5d:be:a3:b5:9b:
                    0e:ff:56:ca:00:6c:7d:b8:69:64:f4:ce:d2:08:b6:
                    03:98:4a:98:44:57:05:ba:93:a0:7c:52:bc:33:7b:
                    31:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:1C:95:DC:06:31:A4:48:C3:B6:46:39:F7:6D:FD:D8:E4:2B:5B:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/56b85935-4ce1-48c7-a19f-f7ab026f59a3/5c78cad0-3ad2-33d3-91f8-8162ca042994.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/56b85935-4ce1-48c7-a19f-f7ab026f59a3/56b85935-4ce1-48c7-a19f-f7ab026f59a3.crl

            X509v3 Authority Key Identifier:
                keyid:9B:EC:E6:5C:34:B1:AF:71:C0:5C:11:CC:2C:F7:E9:DD:3A:DA:0E:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/56b85935-4ce1-48c7-a19f-f7ab026f59a3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.171.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:1e:e5:66:e0:dc:6e:be:8f:96:e2:29:e4:b5:51:3d:c2:09:
         bc:58:3a:47:5a:d0:35:32:df:2a:85:51:82:08:55:d9:19:5f:
         46:f3:e5:47:4a:9d:de:9a:29:24:00:63:61:5e:d1:1d:bd:89:
         92:35:d8:3b:9a:0e:6b:e1:10:55:1b:25:61:5d:81:ef:56:f4:
         4f:e5:48:fa:bb:44:19:ea:48:88:5a:d8:b3:1b:65:d2:c2:3c:
         0b:f1:fc:43:6c:6f:94:45:34:4b:ac:e0:1f:db:ad:6a:fa:96:
         aa:0e:3a:57:fc:0b:e1:9e:52:f4:83:ab:3a:b2:12:81:a3:da:
         19:30:47:38:89:65:2e:56:b2:f1:58:4f:61:c2:63:11:35:97:
         e9:5c:68:49:7b:8f:9c:9e:6a:f5:1a:3a:6b:25:ab:03:ef:a4:
         d0:8e:8d:d9:14:c9:32:e4:46:9d:f1:6a:65:f7:bd:fb:0e:e8:
         7a:1d:54:76:79:2f:04:b2:5f:d7:fb:8c:ca:41:9c:bc:56:8f:
         2c:68:6b:c1:be:12:e5:9e:a3:b5:03:8f:09:e2:cb:52:1f:6a:
         a6:bb:a2:17:70:07:f6:0f:9b:1d:98:15:3c:9b:db:55:7c:1f:
         1f:98:6e:9e:69:0e:a0:e3:34:c9:49:1b:c0:bd:b8:11:f3:61:
         96:74:f5:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 21:15:12 2025 by rpki-client