Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/56fa51ee-649a-3e1d-930b-7c259acccfac.roa
File:                     56fa51ee-649a-3e1d-930b-7c259acccfac.roa (raw, json)
Hash identifier:          us7eTYkPUJnKZNKhZWlwA1I7+xDNf3K9xlb7oK26RA8=
Subject key identifier:   01:BA:DA:F3:A8:D3:F1:2A:12:1F:93:48:56:E1:D2:9F:5D:DD:E3:33
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584ED86204D5A72D032AAF7174C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/56fa51ee-649a-3e1d-930b-7c259acccfac.roa
Signing time:             Sat 15 Aug 2026 13:00:11 +0000
ROA not before:           Sat 15 Aug 2026 13:00:11 +0000
ROA not after:            Fri 13 Nov 2026 14:00:11 +0000
asID:                     33490
IP address blocks:        71.63.252.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d8:62:04:d5:a7:2d:03:2a:af:71:74:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 15 13:00:11 2026 GMT
            Not After : Nov 13 14:00:11 2026 GMT
        Subject: CN=b847ac0e-7a03-402a-a684-80f39b0a8dc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:14:c6:db:b8:30:5e:a7:a9:33:8c:58:bf:b0:
                    9c:79:c2:aa:62:b4:7f:c9:7c:1a:0b:2a:af:2f:9a:
                    40:89:34:ab:30:c4:e9:a0:82:cb:2c:3d:af:3e:2b:
                    a3:3b:42:69:40:d1:5f:b0:35:31:af:b5:ee:c9:85:
                    02:93:72:36:5b:5e:66:00:68:87:5d:b5:71:cf:f9:
                    6a:70:dc:f7:06:7f:ab:b2:b4:cd:49:3b:85:af:06:
                    93:34:ef:77:dc:18:2e:82:3c:e8:87:96:02:15:17:
                    5c:26:74:9c:ea:fb:2a:4e:25:d3:f7:da:38:c6:ed:
                    b6:03:c1:e2:a3:2a:fd:39:3d:48:9b:76:d8:d3:c9:
                    72:0f:72:b2:96:38:cc:2b:04:b3:f8:a9:d6:9b:66:
                    68:dd:0b:e3:34:ed:5f:46:a6:03:84:15:e6:90:ce:
                    f5:03:ab:c6:2b:db:b0:e2:6e:13:2c:2f:76:ad:04:
                    3a:f4:a9:4c:6a:7d:09:cf:1a:0d:7d:e3:3f:61:43:
                    86:18:7d:23:57:26:c3:48:8b:b3:64:6b:41:28:cb:
                    78:7a:39:94:f6:4a:e9:5a:cd:56:2d:cc:87:04:61:
                    11:f8:80:5f:23:4d:f0:9f:a6:1b:51:c9:26:b3:c4:
                    a2:5f:06:10:86:84:ba:06:24:38:67:7b:7b:3c:60:
                    14:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:BA:DA:F3:A8:D3:F1:2A:12:1F:93:48:56:E1:D2:9F:5D:DD:E3:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/56fa51ee-649a-3e1d-930b-7c259acccfac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.63.252.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:45:44:e7:f6:6b:df:b0:f8:f8:04:99:06:20:b3:bb:7c:f9:
         3c:f7:2e:ee:3c:3a:22:1c:d7:1e:97:69:30:06:2f:d0:39:4e:
         92:ff:71:3a:b1:3d:94:5d:a5:47:5a:c0:0a:b7:d3:b2:94:74:
         57:59:83:9e:f9:17:1c:34:a7:f9:3a:5b:6b:4e:90:0e:fa:46:
         27:d0:44:18:31:88:65:37:ed:88:be:86:0f:3d:0b:1c:ea:ff:
         2a:58:cb:d8:eb:17:a2:d8:4a:a1:6e:52:78:3d:7f:70:80:35:
         f3:a6:df:71:7b:fc:77:10:59:72:e0:48:43:61:46:7f:d1:82:
         47:f0:05:8d:98:ff:63:73:85:24:03:1f:e6:81:e2:e1:f6:11:
         3f:13:ae:14:82:c9:b0:1e:00:58:4c:80:fc:80:b7:a1:35:83:
         9d:04:ca:98:02:87:14:64:7e:5f:c6:60:8b:10:f5:a5:1a:81:
         f5:1e:62:44:9f:cd:8f:83:18:22:35:13:a5:b8:4e:a7:15:0b:
         aa:f1:80:96:fa:db:98:d4:72:6d:b9:23:a8:c3:b8:48:2b:5d:
         2e:b7:85:bd:6b:0a:ee:2a:73:18:4d:84:81:cc:df:b8:f8:b1:
         50:fb:ad:d2:96:4a:19:3f:ec:16:86:5c:e3:6b:b6:2e:57:f3:
         0c:e1:af:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 10:17:20 2026 by rpki-client