Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/555c0bc8-ee66-3fdb-ba71-d7f6c6458be9.roa
File:                     555c0bc8-ee66-3fdb-ba71-d7f6c6458be9.roa (raw, json)
Hash identifier:          NuOSD2wbiriZNtPcve+05K2G4OoDqGQpVpQXR0jEkIw=
Subject key identifier:   B8:CB:55:55:82:69:25:43:D3:18:F6:91:1B:53:23:EF:81:EA:AD:A9
Certificate issuer:       /CN=56a23346-5a0e-4976-9b33-3b4d1d90cfa3
Certificate serial:       010D0C9F4328584E5D14AB595123A764AFCBBA30
Authority key identifier: BF:20:32:E5:7B:D7:81:C7:C0:B0:29:98:B3:33:55:D1:62:33:E8:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/555c0bc8-ee66-3fdb-ba71-d7f6c6458be9.roa
Signing time:             Thu 02 Jul 2026 09:00:12 +0000
ROA not before:           Thu 02 Jul 2026 09:00:12 +0000
ROA not after:            Wed 30 Sep 2026 09:00:12 +0000
asID:                     6461
IP address blocks:        68.170.192.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5d:14:ab:59:51:23:a7:64:af:cb:ba:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56a23346-5a0e-4976-9b33-3b4d1d90cfa3
        Validity
            Not Before: Jul  2 09:00:12 2026 GMT
            Not After : Sep 30 09:00:12 2026 GMT
        Subject: CN=5de76728-56da-4876-8816-f0a031e49754
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:41:c8:bb:22:64:55:27:69:65:ea:77:89:98:
                    3f:b2:5e:1f:52:c3:b5:a1:29:e2:db:56:1b:75:bf:
                    25:e9:af:76:87:1e:fc:57:e2:f3:8c:d8:32:2b:0c:
                    d9:f0:a4:d3:41:c8:ff:ae:88:a8:73:8a:95:20:04:
                    94:bf:ed:da:df:b9:51:18:ef:b7:a4:a6:16:cf:11:
                    b5:4e:49:cf:db:a2:28:ce:e3:2e:0c:68:b5:f3:d9:
                    37:f8:17:0f:99:18:be:25:c2:c2:35:35:de:2c:06:
                    a1:0f:b8:75:06:99:d9:15:61:d4:96:a8:3c:8c:63:
                    68:ed:80:8b:b0:1e:8f:4d:fb:61:77:94:99:19:05:
                    66:2a:5c:38:26:68:71:db:1b:1c:12:09:d6:0e:17:
                    77:9a:82:0c:57:1f:8b:ba:68:6e:c4:3c:c1:c4:86:
                    16:04:01:80:f4:58:08:88:01:a4:c9:a3:4c:68:06:
                    10:8b:d4:ab:a8:8a:97:2c:54:7d:ed:5d:70:ba:b9:
                    86:91:74:7d:82:d1:b9:1d:5e:12:a4:2b:4a:b9:97:
                    5e:c4:7c:7b:1b:6b:cf:01:bb:00:90:ee:06:27:60:
                    9d:73:33:dc:ec:77:16:ed:a5:3f:2b:7f:6c:a0:22:
                    cb:3e:2b:98:37:98:b1:c2:47:9d:a9:78:04:ff:f1:
                    66:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:CB:55:55:82:69:25:43:D3:18:F6:91:1B:53:23:EF:81:EA:AD:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/555c0bc8-ee66-3fdb-ba71-d7f6c6458be9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.crl

            X509v3 Authority Key Identifier:
                keyid:BF:20:32:E5:7B:D7:81:C7:C0:B0:29:98:B3:33:55:D1:62:33:E8:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.170.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:69:91:c1:42:c3:a0:98:74:df:5f:43:24:54:f1:5e:e7:2b:
         30:c3:7b:c7:dc:30:bd:94:54:e3:f4:30:99:88:2a:f5:46:b3:
         56:53:33:85:0c:00:b3:7c:86:a0:65:54:12:97:84:a1:3f:81:
         e3:a9:fe:09:b6:c6:22:34:25:39:4d:c2:a4:99:b5:1e:e9:ff:
         66:51:26:7f:17:9c:0e:1e:b8:f2:1d:da:3f:9d:b0:e5:63:08:
         16:87:b4:cd:74:7c:38:13:52:ad:10:92:89:ab:7e:a9:de:f3:
         69:4d:bf:8d:22:fa:17:03:ae:0e:d5:e5:7f:66:3d:46:25:e3:
         94:70:1e:5a:60:54:da:87:d5:e6:ed:b6:47:81:d2:f6:17:50:
         56:92:3e:72:44:5a:5f:e3:e3:5c:c5:11:de:2f:af:68:68:fa:
         9f:f9:35:29:00:d8:7e:2c:1a:d6:46:c6:3f:a4:09:db:a4:fa:
         36:b8:5a:a3:32:87:cc:9d:4d:19:c6:52:69:7d:d3:a5:05:ef:
         9f:3b:e9:5b:03:c5:cb:82:44:46:63:97:65:57:d4:98:46:fd:
         b7:e0:41:2c:10:0f:18:32:5a:de:3d:7a:38:3f:c0:8d:f9:b0:
         37:11:51:fe:1f:c1:28:12:c1:7b:d9:83:bd:13:cd:e4:69:2e:
         07:57:ac:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:07:48 2026 by rpki-client