Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a491649-e76e-4a4b-aa8d-8c44043b81bb/56e14467-872c-3647-a418-eeecfa1f7fe6.roa
File:                     56e14467-872c-3647-a418-eeecfa1f7fe6.roa (raw, json)
Hash identifier:          kpUpLvDENh/U0TMqVkSwxwCxo3AEB0eva1Ga+nIs6So=
Subject key identifier:   33:59:54:F9:D5:FF:92:0F:7D:54:F2:BD:16:4E:0A:2D:C6:05:0D:B4
Certificate issuer:       /CN=6a491649-e76e-4a4b-aa8d-8c44043b81bb
Certificate serial:       010D0C9F4328584B4BAC5ACC114E9972647FD5E0
Authority key identifier: 2F:9C:DF:58:D6:DC:59:06:B3:86:E9:37:EC:EE:5A:0F:D4:9F:DF:4B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a491649-e76e-4a4b-aa8d-8c44043b81bb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a491649-e76e-4a4b-aa8d-8c44043b81bb/56e14467-872c-3647-a418-eeecfa1f7fe6.roa
Signing time:             Wed 24 Sep 2025 01:00:31 +0000
ROA not before:           Wed 24 Sep 2025 01:00:31 +0000
ROA not after:            Tue 23 Dec 2025 02:00:31 +0000
asID:                     55079
IP address blocks:        198.176.44.0/22 maxlen: 24
                          2604:a680::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a491649-e76e-4a4b-aa8d-8c44043b81bb/6a491649-e76e-4a4b-aa8d-8c44043b81bb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a491649-e76e-4a4b-aa8d-8c44043b81bb/6a491649-e76e-4a4b-aa8d-8c44043b81bb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a491649-e76e-4a4b-aa8d-8c44043b81bb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 Oct 2025 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4b:ac:5a:cc:11:4e:99:72:64:7f:d5:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a491649-e76e-4a4b-aa8d-8c44043b81bb
        Validity
            Not Before: Sep 24 01:00:31 2025 GMT
            Not After : Dec 23 02:00:31 2025 GMT
        Subject: CN=68b01583-0b9d-453e-acfa-93befb2d53a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d4:f2:f6:2f:39:ae:3e:a0:0a:7b:96:88:d3:
                    2c:4b:30:ae:f4:b3:e0:39:66:f1:a1:26:e8:03:6b:
                    7f:84:10:e4:46:59:57:e0:2e:79:2f:2b:da:54:62:
                    bb:b9:75:bb:0f:f8:d2:47:90:cb:6b:69:c5:ca:cb:
                    ef:49:51:b7:42:3f:28:f9:ed:ec:59:18:1b:e8:4d:
                    41:49:b7:04:44:fe:0e:b8:70:64:00:3b:c2:df:61:
                    2f:ef:7e:59:fb:93:b3:a6:76:37:ac:23:b8:5b:8b:
                    cf:a7:85:74:d3:85:c4:8d:9a:89:7b:52:1f:ef:2d:
                    10:b3:da:c1:9a:2c:c3:a9:1d:dd:dd:8b:bc:28:51:
                    8d:4b:07:e7:06:57:74:72:b7:ee:5d:6e:04:c6:d6:
                    a9:14:5b:b6:82:4c:10:e9:0b:83:14:df:b9:11:8a:
                    33:59:f4:58:e1:68:15:a1:79:4f:62:66:8e:d7:5b:
                    73:38:ef:42:93:1e:e7:d2:7b:ba:79:0a:90:35:c5:
                    f6:1b:02:4c:53:9d:46:5f:cb:89:8b:d8:38:d1:fc:
                    48:a7:4a:57:9f:d5:9e:a0:93:70:19:26:18:2b:f6:
                    5b:62:69:0f:0c:f8:1c:09:ce:2d:fd:d3:66:60:78:
                    81:22:a1:b0:a9:7d:2b:ab:09:18:01:f4:5f:6b:1c:
                    a4:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:59:54:F9:D5:FF:92:0F:7D:54:F2:BD:16:4E:0A:2D:C6:05:0D:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a491649-e76e-4a4b-aa8d-8c44043b81bb/56e14467-872c-3647-a418-eeecfa1f7fe6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a491649-e76e-4a4b-aa8d-8c44043b81bb/6a491649-e76e-4a4b-aa8d-8c44043b81bb.crl

            X509v3 Authority Key Identifier:
                keyid:2F:9C:DF:58:D6:DC:59:06:B3:86:E9:37:EC:EE:5A:0F:D4:9F:DF:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a491649-e76e-4a4b-aa8d-8c44043b81bb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.176.44.0/22
                IPv6:
                  2604:a680::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:d5:47:9d:d5:a8:74:98:fb:c5:37:c1:84:b1:fb:75:f7:87:
         a6:d4:6a:9d:e7:64:08:1f:25:53:a2:ca:bd:f1:ea:ff:6c:9f:
         fd:e4:6e:39:bd:7a:a3:f5:f0:44:d2:13:6c:be:2f:c1:6c:48:
         ac:5c:10:5d:cd:73:81:8f:2a:1f:1f:31:0b:33:10:14:e3:40:
         27:b2:13:f1:80:b8:f2:4c:68:76:87:8b:da:37:73:92:3e:0e:
         a1:d3:30:0e:a8:54:d9:31:7a:d2:54:4b:27:4d:e7:85:74:98:
         7d:6b:4a:21:31:36:59:d4:68:85:a0:5f:06:1b:cb:15:e1:1a:
         d6:49:ba:f1:e2:cb:a6:d5:af:c6:46:4e:92:6d:2c:5a:c0:f4:
         0b:3c:a5:fd:35:b7:67:65:16:dc:d0:b5:84:2f:7d:3b:1e:44:
         12:b4:78:05:bc:f5:d1:65:ec:7a:a6:f5:a1:2e:6c:6b:20:bb:
         fd:7f:81:ea:7e:fa:44:05:fb:a1:da:0a:e6:d3:43:c8:18:86:
         cc:af:f3:65:bb:08:ba:8b:59:bb:13:3c:07:77:88:14:6a:44:
         92:e1:69:b4:3e:74:30:c7:25:8b:f5:d1:f8:44:15:83:a4:11:
         14:23:c8:5e:a7:6f:f3:e1:de:2b:1f:73:13:23:58:ab:e5:d9:
         8d:f8:c6:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 14 09:07:02 2025 by rpki-client