Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/56a75261-4e27-478a-8f9e-71a9915ce9b4/b69de0d6-eab7-3ae4-930c-75753b86626f.roa
File:                     b69de0d6-eab7-3ae4-930c-75753b86626f.roa (raw, json)
Hash identifier:          syi/K2esY9fNVq6pFlgnn3ijm8rpsxtZRQVtJQsetOE=
Subject key identifier:   5E:97:7D:A7:61:EE:47:5A:B0:64:7E:C4:5B:4D:40:73:08:17:E0:C2
Certificate issuer:       /CN=56a75261-4e27-478a-8f9e-71a9915ce9b4
Certificate serial:       010D0C9F4328584D3F64E1D289711488F24A3D00
Authority key identifier: A4:3E:16:F9:E5:FB:77:F5:09:85:40:70:E7:45:BA:62:3D:AE:1B:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/56a75261-4e27-478a-8f9e-71a9915ce9b4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/56a75261-4e27-478a-8f9e-71a9915ce9b4/b69de0d6-eab7-3ae4-930c-75753b86626f.roa
Signing time:             Sun 22 Mar 2026 01:00:32 +0000
ROA not before:           Sun 22 Mar 2026 01:00:32 +0000
ROA not after:            Sat 20 Jun 2026 01:00:32 +0000
asID:                     55091
IP address blocks:        2620:115:7000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/56a75261-4e27-478a-8f9e-71a9915ce9b4/56a75261-4e27-478a-8f9e-71a9915ce9b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/56a75261-4e27-478a-8f9e-71a9915ce9b4/56a75261-4e27-478a-8f9e-71a9915ce9b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/56a75261-4e27-478a-8f9e-71a9915ce9b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3f:64:e1:d2:89:71:14:88:f2:4a:3d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56a75261-4e27-478a-8f9e-71a9915ce9b4
        Validity
            Not Before: Mar 22 01:00:32 2026 GMT
            Not After : Jun 20 01:00:32 2026 GMT
        Subject: CN=752f5a5a-035b-45ab-9ea4-b1e164b23829
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:a9:39:3a:90:da:a0:03:30:f2:06:87:25:91:
                    68:3e:97:1b:35:ac:90:8e:1e:2a:ce:dc:64:7a:23:
                    d5:f6:14:04:bc:62:8b:0a:a2:36:6b:4e:1f:e5:53:
                    e0:4b:a8:a9:b9:00:1f:be:02:7d:8a:ff:60:61:bd:
                    0a:3b:ac:97:6d:e6:22:bc:22:63:9c:f6:48:21:d4:
                    11:05:45:95:c9:8e:63:fa:77:39:0b:02:94:66:9b:
                    c5:b6:90:35:94:fa:4d:9d:bc:a4:59:59:f2:c3:69:
                    59:bb:4a:cc:1c:ed:d0:b0:2c:06:b4:f3:f1:75:e8:
                    5b:6a:c3:7a:76:df:0e:31:71:31:ae:82:5a:ad:1d:
                    3c:ee:a0:be:01:74:0c:6d:93:fe:d7:6e:b0:79:d3:
                    0f:dc:86:e8:bf:c8:52:77:63:43:af:58:84:9b:f4:
                    9b:a0:ce:5f:80:bf:e9:fa:68:aa:f1:25:78:b6:6f:
                    a9:4b:09:cf:f0:c9:c1:3b:ad:4d:6e:0d:35:18:59:
                    71:8c:66:ad:10:8b:d0:1c:c8:ed:81:09:b9:89:de:
                    9e:ef:80:5f:38:b2:1b:c5:46:9a:c8:c6:d8:42:6e:
                    84:8e:34:5a:fc:18:7d:60:20:c6:e8:20:7f:38:9f:
                    9c:0a:47:57:e5:35:a3:f2:f4:7c:fb:12:19:9e:0b:
                    0b:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:97:7D:A7:61:EE:47:5A:B0:64:7E:C4:5B:4D:40:73:08:17:E0:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/56a75261-4e27-478a-8f9e-71a9915ce9b4/b69de0d6-eab7-3ae4-930c-75753b86626f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/56a75261-4e27-478a-8f9e-71a9915ce9b4/56a75261-4e27-478a-8f9e-71a9915ce9b4.crl

            X509v3 Authority Key Identifier:
                keyid:A4:3E:16:F9:E5:FB:77:F5:09:85:40:70:E7:45:BA:62:3D:AE:1B:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/56a75261-4e27-478a-8f9e-71a9915ce9b4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:115:7000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:fa:b4:f8:2d:49:b2:39:ef:65:72:9d:02:bf:4c:b1:70:6d:
         71:a8:79:8e:c2:3a:95:3d:fb:36:ed:a7:fb:48:83:dc:a2:52:
         26:43:19:bf:ff:9d:73:86:83:7b:72:69:06:4c:e9:db:5d:45:
         5f:2f:52:5d:8e:42:8d:04:a1:2f:33:1c:7d:cc:c7:03:d3:57:
         1b:c7:62:4b:69:9b:a9:e1:e0:6a:aa:ca:4a:a6:2c:02:24:1c:
         79:a4:77:c8:c7:c4:15:dd:91:d1:82:03:93:6c:3e:7c:c4:00:
         b0:8c:7c:69:33:55:05:94:db:6e:32:f8:1a:9b:22:18:81:01:
         63:9c:d4:74:39:7e:1b:85:59:01:28:89:fd:0a:83:56:ac:a7:
         4f:52:70:f4:39:f8:99:9f:89:0d:40:b7:28:24:3c:50:99:e5:
         40:ba:ab:aa:88:8d:58:96:f1:6b:be:c2:4a:ce:f8:63:9c:aa:
         74:10:38:94:fa:39:83:7a:c4:c7:c3:46:9f:03:3b:dc:9a:64:
         e3:a7:37:de:08:1c:f8:e6:30:38:2b:e5:e4:fe:28:0a:f1:9d:
         1d:ee:58:dd:2e:f8:d0:60:91:c3:dc:a0:4f:68:e1:66:cc:85:
         db:52:18:6e:00:57:fc:e6:58:cf:8e:0a:d6:e1:5e:63:e8:7c:
         67:0d:c2:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:34:49 2026 by rpki-client