Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0cbd7d11-5d6b-43e8-95af-8f22df70ae10/56eb46a4-ce70-3335-9f2d-bc016978086e.roa
File:                     56eb46a4-ce70-3335-9f2d-bc016978086e.roa (raw, json)
Hash identifier:          SEVYpfHyIGIWEV1Eg8rtG1QWVW59CZzapjpY/0gocuE=
Subject key identifier:   DD:5D:7D:2E:FC:38:48:A4:DB:FD:24:AD:50:77:28:F8:A2:2F:33:51
Certificate issuer:       /CN=0cbd7d11-5d6b-43e8-95af-8f22df70ae10
Certificate serial:       010D0C9F4328584D0EA7AABC5FF3689840760A40
Authority key identifier: 5F:E8:42:A0:DC:43:05:81:66:46:2E:57:CD:B6:54:7B:19:F5:65:4F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0cbd7d11-5d6b-43e8-95af-8f22df70ae10.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0cbd7d11-5d6b-43e8-95af-8f22df70ae10/56eb46a4-ce70-3335-9f2d-bc016978086e.roa
Signing time:             Wed 04 Mar 2026 14:00:41 +0000
ROA not before:           Wed 04 Mar 2026 14:00:41 +0000
ROA not after:            Tue 02 Jun 2026 13:00:41 +0000
asID:                     16509
IP address blocks:        168.100.6.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0cbd7d11-5d6b-43e8-95af-8f22df70ae10/0cbd7d11-5d6b-43e8-95af-8f22df70ae10.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0cbd7d11-5d6b-43e8-95af-8f22df70ae10/0cbd7d11-5d6b-43e8-95af-8f22df70ae10.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0cbd7d11-5d6b-43e8-95af-8f22df70ae10.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0e:a7:aa:bc:5f:f3:68:98:40:76:0a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0cbd7d11-5d6b-43e8-95af-8f22df70ae10
        Validity
            Not Before: Mar  4 14:00:41 2026 GMT
            Not After : Jun  2 13:00:41 2026 GMT
        Subject: CN=8e100e34-91c1-4c0d-b7b5-cf041d6313de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:5e:27:8c:19:7f:eb:10:d7:56:fc:60:eb:10:
                    51:97:82:b3:71:06:2f:9e:00:6f:8b:63:8f:38:6b:
                    48:fb:50:1b:78:4b:30:c0:6d:d6:7a:f4:cf:28:a6:
                    2a:a0:2b:09:9e:39:0f:2f:a1:a9:87:e3:48:e3:81:
                    fa:ba:4d:ec:f5:56:16:1c:a4:34:98:44:df:e8:40:
                    97:8e:e0:a8:27:f1:42:3a:88:1c:43:48:b9:60:58:
                    f0:6d:6d:0f:5d:1c:40:34:fb:5e:c3:9a:00:1d:c4:
                    ff:47:c0:db:06:8d:7b:cb:a9:30:2c:fc:f9:a2:55:
                    a3:50:fc:1a:e1:bf:71:54:63:de:5b:3d:47:61:0d:
                    56:99:3e:69:cf:06:79:75:cc:3a:42:c6:11:af:7b:
                    f2:2c:5e:6d:f8:22:04:c4:b7:67:28:c0:05:45:18:
                    e5:4f:2c:17:e0:6e:d6:66:e4:cb:f7:07:03:8e:66:
                    1c:8f:43:70:72:19:12:da:dc:44:89:58:92:90:48:
                    76:03:69:4f:5f:38:49:75:7e:21:3a:48:9f:c1:49:
                    95:1f:0b:c7:82:68:98:cc:ab:df:f0:7f:48:54:37:
                    88:7c:54:3f:5f:96:92:77:85:61:df:8b:60:52:b7:
                    5c:36:f9:06:9f:b7:cf:5f:6d:ff:b8:56:dc:1c:63:
                    50:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:5D:7D:2E:FC:38:48:A4:DB:FD:24:AD:50:77:28:F8:A2:2F:33:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0cbd7d11-5d6b-43e8-95af-8f22df70ae10/56eb46a4-ce70-3335-9f2d-bc016978086e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0cbd7d11-5d6b-43e8-95af-8f22df70ae10/0cbd7d11-5d6b-43e8-95af-8f22df70ae10.crl

            X509v3 Authority Key Identifier:
                keyid:5F:E8:42:A0:DC:43:05:81:66:46:2E:57:CD:B6:54:7B:19:F5:65:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0cbd7d11-5d6b-43e8-95af-8f22df70ae10.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.100.6.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:19:32:a3:ca:a1:f2:76:66:73:00:cb:38:6f:a6:dc:22:42:
         58:b4:59:3a:ec:03:e8:36:2f:6a:12:cf:2c:21:78:e4:e3:b3:
         b2:01:eb:22:43:ae:cd:0b:1a:d6:67:de:76:a7:78:a2:4d:b4:
         50:a1:14:ad:ad:1f:bf:13:1b:7a:05:8e:06:72:6b:6e:8a:7e:
         33:b7:1b:55:db:30:ed:4f:a3:64:e6:c4:c2:3e:07:8d:aa:83:
         78:2c:ad:01:d2:53:51:3d:bc:24:13:4c:b9:50:c2:f9:51:c4:
         28:18:86:dc:c4:7a:4c:a4:72:00:a6:8a:a4:08:8d:f0:fb:f4:
         7f:99:e0:52:fa:0f:8e:10:3c:71:62:f0:07:7b:9d:6f:9a:60:
         a6:9c:cd:69:d3:53:9d:db:3f:b4:6d:b9:c0:e3:37:41:eb:ae:
         46:e5:f0:ed:34:8c:9d:ff:f8:36:70:46:6e:ff:6e:03:22:79:
         e0:12:dd:d4:a6:a3:9c:f3:06:c9:28:a3:23:d0:d2:01:11:5d:
         63:6c:cf:c8:3a:42:56:08:c8:b2:87:f9:d9:c9:dd:cb:96:fc:
         39:63:3d:47:ef:e7:0e:8e:ea:b9:08:ff:68:41:b1:fb:5a:00:
         9b:2b:ec:ad:07:b3:b4:39:ec:48:55:94:82:ab:5b:e6:05:59:
         14:ad:94:7c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0Op6q8X/NomEB2CkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGNiZDdkMTEtNWQ2Yi00M2U4LTk1YWYtOGYyMmRmNzBh
ZTEwMB4XDTI2MDMwNDE0MDA0MVoXDTI2MDYwMjEzMDA0MVowLzEtMCsGA1UEAxMk
OGUxMDBlMzQtOTFjMS00YzBkLWI3YjUtY2YwNDFkNjMxM2RlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs14njBl/6xDXVvxg6xBRl4KzcQYvngBvi2OP
OGtI+1AbeEswwG3WevTPKKYqoCsJnjkPL6Gph+NI44H6uk3s9VYWHKQ0mETf6ECX
juCoJ/FCOogcQ0i5YFjwbW0PXRxANPtew5oAHcT/R8DbBo17y6kwLPz5olWjUPwa
4b9xVGPeWz1HYQ1WmT5pzwZ5dcw6QsYRr3vyLF5t+CIExLdnKMAFRRjlTywX4G7W
ZuTL9wcDjmYcj0NwchkS2txEiViSkEh2A2lPXzhJdX4hOkifwUmVHwvHgmiYzKvf
8H9IVDeIfFQ/X5aSd4Vh34tgUrdcNvkGn7fPX23/uFbcHGNQ8QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFN1dfS78OEik2/0krVB3KPiiLzNRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8wY2Jk
N2QxMS01ZDZiLTQzZTgtOTVhZi04ZjIyZGY3MGFlMTAvNTZlYjQ2YTQtY2U3MC0z
MzM1LTlmMmQtYmMwMTY5NzgwODZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMGNiZDdkMTEtNWQ2Yi00M2U4LTk1
YWYtOGYyMmRmNzBhZTEwLzBjYmQ3ZDExLTVkNmItNDNlOC05NWFmLThmMjJkZjcw
YWUxMC5jcmwwHwYDVR0jBBgwFoAUX+hCoNxDBYFmRi5XzbZUexn1ZU8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC8wY2JkN2QxMS01ZDZiLTQzZTgtOTVhZi04ZjIy
ZGY3MGFlMTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqGQGMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADwZMqPKofJ2ZnMAyzhvptwiQli0WTrsA+g2L2oSzywheOTjs7IB6yJD
rs0LGtZn3naneKJNtFChFK2tH78TG3oFjgZya26KfjO3G1XbMO1Po2TmxMI+B42q
g3gsrQHSU1E9vCQTTLlQwvlRxCgYhtzEekykcgCmiqQIjfD79H+Z4FL6D44QPHFi
8Ad7nW+aYKaczWnTU53bP7RtucDjN0Hrrkbl8O00jJ3/+DZwRm7/bgMieeAS3dSm
o5zzBskooyPQ0gERXWNsz8g6QlYIyLKH+dnJ3cuW/DljPUfv5w6O6rkI/2hBsfta
AJsr7K0Hs7Q57EhVlIKrW+YFWRStlHw=
-----END CERTIFICATE-----
Generated at Thu Mar 19 12:32:54 2026 by rpki-client