Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/56b85935-4ce1-48c7-a19f-f7ab026f59a3/25b435ba-8675-3866-94be-c3d80d59603b.roa
File:                     25b435ba-8675-3866-94be-c3d80d59603b.roa (raw, json)
Hash identifier:          9A0fyoABxzsjIju5RGScquzqbUEAUSzRD3y5GzRlpUk=
Subject key identifier:   81:5F:77:B7:C5:A4:B0:0F:F1:89:41:3F:84:6B:C6:23:BF:45:8C:30
Certificate issuer:       /CN=56b85935-4ce1-48c7-a19f-f7ab026f59a3
Certificate serial:       010D0C9F4328584EA7977303516618A6FE69FD80
Authority key identifier: 9B:EC:E6:5C:34:B1:AF:71:C0:5C:11:CC:2C:F7:E9:DD:3A:DA:0E:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/56b85935-4ce1-48c7-a19f-f7ab026f59a3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/56b85935-4ce1-48c7-a19f-f7ab026f59a3/25b435ba-8675-3866-94be-c3d80d59603b.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     13654
IP address blocks:        2606:c780::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/56b85935-4ce1-48c7-a19f-f7ab026f59a3/56b85935-4ce1-48c7-a19f-f7ab026f59a3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/56b85935-4ce1-48c7-a19f-f7ab026f59a3/56b85935-4ce1-48c7-a19f-f7ab026f59a3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/56b85935-4ce1-48c7-a19f-f7ab026f59a3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:97:73:03:51:66:18:a6:fe:69:fd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56b85935-4ce1-48c7-a19f-f7ab026f59a3
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=f1ea566b-9bc5-4994-817d-06248763b843
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:ad:79:05:6b:67:d9:7b:52:74:a5:c0:64:9b:
                    96:de:07:0c:3d:ad:77:c2:21:f6:d0:06:01:82:9b:
                    85:96:b2:5f:c7:8c:1e:f5:d5:50:8c:52:19:71:10:
                    5e:7a:7d:c4:6f:71:8d:86:6e:4c:c0:f1:36:19:ad:
                    5e:13:31:68:47:6c:72:6e:62:da:c3:8a:d9:d6:df:
                    80:ea:8a:f1:6e:8c:a8:22:9e:71:47:97:cd:32:90:
                    f3:46:de:fb:97:15:97:de:dd:d1:92:9c:22:73:ae:
                    c7:b0:a4:ce:8c:c6:67:2d:f6:75:30:e9:ea:c2:99:
                    d8:fa:1e:21:cb:9c:fa:1e:84:60:fe:65:03:b7:6b:
                    52:a5:a3:b7:b4:26:ca:fa:47:52:9d:01:c0:16:f8:
                    6c:38:25:37:c3:e4:5e:ec:49:1c:6c:e7:56:e4:51:
                    22:29:7f:b8:28:50:e5:b2:81:a2:b1:7a:cb:19:c6:
                    16:56:fc:b9:17:e3:df:87:48:87:7f:1a:33:3b:bd:
                    98:3a:1e:d8:27:48:98:d3:df:4f:36:02:c1:20:92:
                    24:71:e7:b3:b8:47:b5:af:7d:1b:05:0a:26:18:d4:
                    3e:71:a2:f6:34:4e:53:04:fd:e6:99:04:b6:ea:d0:
                    d4:1d:2f:a7:66:e3:58:83:bb:5f:61:9a:b9:bd:e4:
                    2e:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:5F:77:B7:C5:A4:B0:0F:F1:89:41:3F:84:6B:C6:23:BF:45:8C:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/56b85935-4ce1-48c7-a19f-f7ab026f59a3/25b435ba-8675-3866-94be-c3d80d59603b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/56b85935-4ce1-48c7-a19f-f7ab026f59a3/56b85935-4ce1-48c7-a19f-f7ab026f59a3.crl

            X509v3 Authority Key Identifier:
                keyid:9B:EC:E6:5C:34:B1:AF:71:C0:5C:11:CC:2C:F7:E9:DD:3A:DA:0E:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/56b85935-4ce1-48c7-a19f-f7ab026f59a3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:c780::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:67:56:92:2e:d8:48:06:94:73:1b:78:0e:83:9d:f3:d4:c9:
         63:59:f4:06:93:86:6c:da:7c:e0:83:96:de:ee:04:70:46:79:
         bd:61:79:94:fd:36:ff:9e:f0:9d:92:87:19:62:36:23:82:18:
         2d:4b:16:30:6f:34:0b:15:4f:af:2b:b5:54:43:5f:96:7c:b1:
         e7:c7:00:6e:7e:cf:c8:61:78:0d:a9:c2:29:64:8b:78:94:fc:
         27:47:af:50:9f:a8:61:aa:3d:ae:ea:95:15:83:3b:c9:f6:23:
         28:9c:dc:e0:d6:c6:cc:ef:64:b1:6c:4b:a4:a9:19:00:de:ad:
         c8:b9:e3:4b:e0:63:cd:74:08:62:be:43:02:59:5c:e4:ef:ab:
         39:27:13:26:f7:a5:42:f5:d8:0e:36:f9:5b:d2:ec:fb:2d:7d:
         16:1a:b1:a1:53:de:11:7d:d8:e0:b2:0c:e8:46:2e:72:4f:f7:
         91:ce:07:58:b8:bd:24:76:f7:2f:25:2b:05:33:ae:dd:07:a4:
         f8:18:d1:11:2f:ca:58:35:3a:f7:ce:a6:41:1b:5f:33:1f:be:
         ba:84:c0:1d:27:8b:0f:1a:88:03:23:a9:5f:52:c1:09:e2:b1:
         dd:dc:9f:4e:61:49:c8:8f:40:b2:7d:02:51:2c:f8:ba:78:8f:
         f9:67:e8:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 02:51:15 2026 by rpki-client