Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924/56cf6536-4125-3e43-b1ef-939219941eb2.roa
File:                     56cf6536-4125-3e43-b1ef-939219941eb2.roa (raw, json)
Hash identifier:          H3l4Qc9ocUkHpnJtwAgjz+m/q3iPNKnis5M4dqq9c3s=
Subject key identifier:   78:72:BB:02:B1:8A:9F:71:83:ED:34:10:B1:90:61:EB:86:A8:2E:A8
Certificate issuer:       /CN=5f6f7623-0788-410a-b9dd-8040879aa924
Certificate serial:       010D0C9F4328584E2D9F0DA9E95FD48F0B526E40
Authority key identifier: 6C:F1:38:A9:DC:91:8A:D7:97:D6:E0:2C:FD:36:EA:97:60:B3:CF:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924/56cf6536-4125-3e43-b1ef-939219941eb2.roa
Signing time:             Mon 15 Jun 2026 09:00:12 +0000
ROA not before:           Mon 15 Jun 2026 09:00:12 +0000
ROA not after:            Sun 13 Sep 2026 09:00:12 +0000
asID:                     19197
IP address blocks:        69.41.33.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924/5f6f7623-0788-410a-b9dd-8040879aa924.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924/5f6f7623-0788-410a-b9dd-8040879aa924.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 17 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:2d:9f:0d:a9:e9:5f:d4:8f:0b:52:6e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f6f7623-0788-410a-b9dd-8040879aa924
        Validity
            Not Before: Jun 15 09:00:12 2026 GMT
            Not After : Sep 13 09:00:12 2026 GMT
        Subject: CN=8f852461-b281-4635-be75-e56926051bb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:58:70:66:19:13:16:50:fd:0b:b7:74:18:83:
                    66:95:2b:75:06:75:69:9a:de:44:f9:89:ba:60:03:
                    0e:e7:ac:48:6d:df:de:8b:4b:6c:ce:d2:b0:5d:0d:
                    29:87:f8:04:ae:0f:e0:95:fb:99:5c:d6:5f:8c:24:
                    98:1c:02:db:cf:70:14:82:25:a5:e8:ea:08:00:d4:
                    82:a6:01:1a:7b:f6:dd:5e:a4:54:d6:b3:46:9e:c0:
                    27:6d:e9:ca:40:34:30:a1:d2:36:e0:54:94:8d:b7:
                    44:a6:46:2a:d6:65:ad:28:be:92:a6:27:dd:5f:3a:
                    b7:70:19:e7:6a:b5:d6:69:4d:a9:6c:46:fa:77:98:
                    14:4c:e0:04:4e:6d:76:66:8d:d6:fe:82:ae:60:4f:
                    fd:d1:98:8a:89:56:66:c2:f4:32:4c:d7:09:2c:ca:
                    8a:2b:bd:1d:77:96:c2:44:a4:73:bb:c5:e0:91:b5:
                    95:29:ab:77:3c:3a:3a:ca:4c:79:4a:65:85:e1:b3:
                    29:d1:b4:1d:b9:c2:a4:b4:12:47:ee:0e:3a:81:a5:
                    d5:63:11:65:f1:7e:61:d8:6f:59:40:eb:77:27:a7:
                    6d:5b:08:8b:cf:7d:ec:ba:87:1c:cc:bf:21:b9:7f:
                    fe:51:78:6e:25:22:e3:6a:52:50:86:86:24:77:03:
                    3e:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:72:BB:02:B1:8A:9F:71:83:ED:34:10:B1:90:61:EB:86:A8:2E:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924/56cf6536-4125-3e43-b1ef-939219941eb2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924/5f6f7623-0788-410a-b9dd-8040879aa924.crl

            X509v3 Authority Key Identifier:
                keyid:6C:F1:38:A9:DC:91:8A:D7:97:D6:E0:2C:FD:36:EA:97:60:B3:CF:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.41.33.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:54:7c:ba:9e:54:bc:06:53:a1:72:b6:71:f7:9b:4a:df:f4:
         b1:d2:ef:49:12:c6:56:dc:87:81:a4:3c:0b:e2:63:57:e1:fb:
         fa:55:f7:7c:33:7e:f3:b9:60:89:08:13:44:f8:42:99:96:e8:
         a0:3d:f4:e9:ac:b6:35:2a:87:1c:18:f1:97:bf:8b:2f:5c:ee:
         b3:7e:54:91:17:db:64:a1:a3:63:0c:12:39:ca:ed:8d:46:b6:
         5b:10:33:a3:54:60:22:35:ec:e4:27:6e:e0:f0:97:35:f3:2c:
         de:12:27:df:74:2d:aa:a0:dc:69:57:c7:49:16:9f:1d:ce:40:
         ac:e2:df:89:1d:c7:2b:98:ba:89:45:75:87:91:f6:3a:f4:71:
         63:41:84:05:cb:a6:26:cd:87:a5:44:a8:d4:ad:d7:7a:b1:cc:
         46:f0:e8:96:47:8c:c1:65:78:b4:c5:f4:71:91:02:a1:a2:18:
         dc:dd:03:a2:97:f7:f4:02:e8:a1:99:44:4e:6e:4c:e6:92:4c:
         d5:6d:41:74:6f:27:ea:83:00:24:0b:16:85:ca:b8:6f:e7:50:
         4b:d5:59:95:49:5d:27:51:ac:7f:ba:a8:eb:6e:11:3f:21:d5:
         0e:83:0c:74:18:c5:4e:ac:a1:c9:25:c2:eb:9e:c9:f6:4a:b9:
         35:a5:f9:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 16 11:35:15 2026 by rpki-client