Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eac00894-5e17-4e14-b8eb-b7fb348ad1c2/56de83ed-4cbd-3154-9a95-a54b7a1b7e6f.roa
File:                     56de83ed-4cbd-3154-9a95-a54b7a1b7e6f.roa (raw, json)
Hash identifier:          kYfkiKNulA6ejVmuCfrkwnDMW36HjT0l/XrQayAIj+c=
Subject key identifier:   32:B5:AB:68:B0:F0:2B:AA:58:D7:E5:58:1A:D0:F1:A3:A6:F8:8E:51
Certificate issuer:       /CN=eac00894-5e17-4e14-b8eb-b7fb348ad1c2
Certificate serial:       010D0C9F4328584C8B71882F825A001562ED7A40
Authority key identifier: C1:8C:CC:6E:6F:7A:24:1F:57:0A:B0:C1:A2:A8:C9:7C:FA:31:BD:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eac00894-5e17-4e14-b8eb-b7fb348ad1c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eac00894-5e17-4e14-b8eb-b7fb348ad1c2/56de83ed-4cbd-3154-9a95-a54b7a1b7e6f.roa
Signing time:             Fri 16 Jan 2026 14:00:40 +0000
ROA not before:           Fri 16 Jan 2026 14:00:40 +0000
ROA not after:            Thu 16 Apr 2026 13:00:40 +0000
asID:                     7212
IP address blocks:        129.59.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eac00894-5e17-4e14-b8eb-b7fb348ad1c2/eac00894-5e17-4e14-b8eb-b7fb348ad1c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eac00894-5e17-4e14-b8eb-b7fb348ad1c2/eac00894-5e17-4e14-b8eb-b7fb348ad1c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eac00894-5e17-4e14-b8eb-b7fb348ad1c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 24 Feb 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:8b:71:88:2f:82:5a:00:15:62:ed:7a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eac00894-5e17-4e14-b8eb-b7fb348ad1c2
        Validity
            Not Before: Jan 16 14:00:40 2026 GMT
            Not After : Apr 16 13:00:40 2026 GMT
        Subject: CN=7bb001d1-d7c2-49ec-b08f-0273ed9305b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:0c:c4:8b:35:7d:be:40:7f:c5:89:76:cf:e4:
                    de:71:8d:d6:0f:09:f7:67:e9:27:46:87:ba:6f:32:
                    64:81:77:3b:5b:e2:8d:fa:de:cc:c1:ca:35:9c:7a:
                    ba:27:2e:8f:f8:06:ed:62:c0:52:54:1b:43:b7:89:
                    96:3c:0a:9d:84:25:a0:ba:f9:95:40:fe:a0:1e:c9:
                    8d:2f:87:bb:4a:9b:a6:e7:f1:a0:c0:38:e9:5e:30:
                    55:c6:ff:59:0c:18:7e:85:5a:73:9f:d4:6a:90:57:
                    fe:ff:bf:9b:c0:cf:90:91:8f:cb:d0:84:14:36:66:
                    1e:1d:a8:1f:de:10:29:45:bb:01:3d:fe:8a:51:78:
                    b4:c2:9d:69:c3:f7:9f:58:f0:01:bc:da:59:30:fb:
                    b2:60:b8:f3:a0:1f:e9:9b:20:8a:69:bd:ff:9d:f2:
                    10:23:5e:33:d8:a8:01:15:f9:f8:cd:e4:95:90:3c:
                    95:0b:30:21:70:97:52:fc:f6:2a:25:dd:7b:f7:e0:
                    e6:de:9f:3b:ef:52:ea:f5:cc:1d:d7:9c:6c:12:85:
                    17:bf:8e:43:13:0e:1e:96:7b:21:03:44:18:be:98:
                    e6:60:14:b3:db:0c:eb:9f:fe:ac:18:d3:76:56:7d:
                    08:70:a9:45:cf:e9:14:ec:47:59:a6:b5:b8:da:2d:
                    79:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:B5:AB:68:B0:F0:2B:AA:58:D7:E5:58:1A:D0:F1:A3:A6:F8:8E:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eac00894-5e17-4e14-b8eb-b7fb348ad1c2/56de83ed-4cbd-3154-9a95-a54b7a1b7e6f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eac00894-5e17-4e14-b8eb-b7fb348ad1c2/eac00894-5e17-4e14-b8eb-b7fb348ad1c2.crl

            X509v3 Authority Key Identifier:
                keyid:C1:8C:CC:6E:6F:7A:24:1F:57:0A:B0:C1:A2:A8:C9:7C:FA:31:BD:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eac00894-5e17-4e14-b8eb-b7fb348ad1c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.59.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:9a:68:3d:2c:63:51:fc:21:d4:fc:2f:a8:2c:82:67:ec:4b:
         5f:ae:a0:87:17:a1:d8:18:88:ba:b3:93:db:de:4f:47:15:9b:
         91:25:a7:08:62:7e:e1:55:0f:36:60:55:30:6b:db:46:2d:05:
         47:04:a8:69:aa:9e:d8:40:e4:f0:98:66:00:69:59:48:cd:9f:
         42:f1:95:5c:c2:8a:25:18:6a:9e:29:81:de:b9:c7:09:7f:b0:
         d6:aa:ac:80:fa:3c:fd:8a:05:f9:f9:1c:38:48:09:a7:69:05:
         90:ea:04:e3:8f:92:e5:49:da:3a:a1:84:a9:fd:87:fd:de:5a:
         ee:3e:0c:d1:e6:51:a6:39:65:95:ac:fc:3e:f4:91:b7:87:8b:
         92:be:37:89:ec:0e:2a:b6:30:b2:03:ab:fa:52:ef:1f:a6:08:
         74:61:90:2b:21:c8:d6:db:c2:5c:84:83:5a:b6:11:7a:34:4a:
         26:6b:7a:97:84:bb:0a:e3:77:98:94:93:ce:79:84:a2:cd:4a:
         83:66:d7:f4:02:84:eb:96:61:f7:3f:92:c3:8a:33:31:05:21:
         4a:40:e1:8f:e7:34:64:bd:28:5c:6d:0a:37:89:db:3b:98:3f:
         c8:9f:b7:ef:24:4e:51:76:ba:7d:74:99:ec:41:a8:c9:0d:06:
         fd:34:39:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 01:14:19 2026 by rpki-client