Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924/56cf6536-4125-3e43-b1ef-939219941eb2.roa
File:                     56cf6536-4125-3e43-b1ef-939219941eb2.roa (raw, json)
Hash identifier:          BFW7/liSwhc6mXK48Csb6FgQsCAjp0NJhi8CHVdqQvw=
Subject key identifier:   DD:AC:00:97:BA:87:3D:EF:E7:02:A1:5C:63:78:69:02:50:D9:A8:84
Certificate issuer:       /CN=5f6f7623-0788-410a-b9dd-8040879aa924
Certificate serial:       010D0C9F4328584ED001DAF8B73B66000296A300
Authority key identifier: 6C:F1:38:A9:DC:91:8A:D7:97:D6:E0:2C:FD:36:EA:97:60:B3:CF:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924/56cf6536-4125-3e43-b1ef-939219941eb2.roa
Signing time:             Wed 12 Aug 2026 13:00:12 +0000
ROA not before:           Wed 12 Aug 2026 13:00:12 +0000
ROA not after:            Tue 10 Nov 2026 14:00:12 +0000
asID:                     19197
IP address blocks:        69.41.33.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924/5f6f7623-0788-410a-b9dd-8040879aa924.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924/5f6f7623-0788-410a-b9dd-8040879aa924.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 14 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d0:01:da:f8:b7:3b:66:00:02:96:a3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f6f7623-0788-410a-b9dd-8040879aa924
        Validity
            Not Before: Aug 12 13:00:12 2026 GMT
            Not After : Nov 10 14:00:12 2026 GMT
        Subject: CN=1c1fb4a0-15c3-4fbb-a157-d4f2eef3a717
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:df:d1:74:f2:8d:2b:8a:29:fb:13:33:52:d7:
                    25:fa:a8:22:86:3e:51:87:c3:ee:d7:0c:08:20:71:
                    3f:b5:2e:1a:9f:03:6a:b1:20:28:4c:51:10:6e:c9:
                    58:d5:a2:47:7e:0e:12:f9:72:73:d2:ed:62:39:b8:
                    c6:07:20:65:a2:32:d8:eb:a3:ab:9e:c1:3b:d1:2d:
                    1c:cb:1f:3f:4f:df:c2:3b:41:55:08:21:ed:ed:ef:
                    9b:8c:32:66:ed:86:87:d8:0a:c3:87:73:16:29:5f:
                    80:5c:bc:6e:7a:d0:a8:e6:69:e1:82:3f:7c:b5:73:
                    7c:3b:2a:0d:06:bd:58:e8:d0:24:47:0d:91:92:f0:
                    48:9f:12:a3:15:40:5b:ee:a7:b4:a5:b2:77:ed:ef:
                    6f:ca:fc:30:b7:de:2e:cd:5b:bf:d6:70:f8:38:3f:
                    fc:33:14:ce:a4:95:a0:66:48:73:3d:68:6a:8b:c4:
                    ee:46:46:4c:67:d8:6d:e6:d1:25:05:6b:97:4a:b7:
                    8f:45:f4:f5:1c:a3:94:e0:3d:a4:f1:91:42:36:b1:
                    82:b4:49:c2:26:66:e0:a9:51:d0:cc:11:29:0a:a7:
                    31:98:f1:c1:24:90:56:0d:ff:7c:34:1b:39:98:1a:
                    a5:f1:0b:ef:6f:7e:89:9d:21:a3:6d:22:d1:31:39:
                    0f:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:AC:00:97:BA:87:3D:EF:E7:02:A1:5C:63:78:69:02:50:D9:A8:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924/56cf6536-4125-3e43-b1ef-939219941eb2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924/5f6f7623-0788-410a-b9dd-8040879aa924.crl

            X509v3 Authority Key Identifier:
                keyid:6C:F1:38:A9:DC:91:8A:D7:97:D6:E0:2C:FD:36:EA:97:60:B3:CF:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.41.33.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:9c:db:55:c5:54:9f:55:9c:63:61:8a:99:61:31:c5:f6:66:
         c6:2c:d4:b4:f9:60:f8:9f:5f:59:58:20:80:52:bc:56:e5:7f:
         ca:9c:fc:e0:d2:73:19:01:db:d2:b9:7a:05:dc:38:61:08:38:
         38:bd:9c:53:cb:3d:86:c1:60:30:33:52:45:6a:81:e6:fb:f1:
         ca:66:d6:fb:02:e9:48:77:64:b9:f7:26:65:89:58:1f:07:94:
         8f:47:ba:52:c8:02:73:02:b0:1b:f8:df:ef:9d:ef:71:12:b5:
         96:5e:ea:33:26:68:1a:95:6b:b5:3b:0f:9a:69:b0:21:36:64:
         00:89:e4:c9:59:53:41:62:6b:91:63:d8:3a:cf:1e:8d:b7:d7:
         fc:90:89:12:b6:24:1c:c1:c2:14:3c:93:a5:f0:a2:9e:42:47:
         ca:34:2e:8c:bc:66:16:c5:05:f9:e5:f8:de:82:b6:54:4a:7a:
         64:25:ea:d4:0f:3d:61:63:a7:88:19:df:7b:2c:43:e3:76:ea:
         c4:ef:32:ea:d2:b5:de:04:8c:1c:10:c8:ff:c5:32:a3:7b:c1:
         73:c1:6c:5b:8b:9f:af:89:60:78:44:6d:6a:4d:2d:9c:66:47:
         b4:04:51:a4:5b:7d:43:7c:57:97:ff:67:52:14:80:b8:07:34:
         87:0a:a5:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 13:07:51 2026 by rpki-client