Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/56cebcdc-927a-3736-9d88-f396a9cdd6e9.roa
File:                     56cebcdc-927a-3736-9d88-f396a9cdd6e9.roa (raw, json)
Hash identifier:          +CptCN0MXCzBgzppztV5ddaGK5Lkf97/hPCGg3rocpc=
Subject key identifier:   0C:C2:2F:E8:44:F8:BA:1E:E1:8D:B7:4A:B6:88:B7:09:E7:C4:99:06
Certificate issuer:       /CN=8eda9035-7c9b-45a0-b98b-a45be535f082
Certificate serial:       010D0C9F4328584D300A4EB875B65C692DB84100
Authority key identifier: 64:FD:D2:B4:D5:A9:0A:A0:F5:66:68:E4:2B:96:51:54:E7:7A:66:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/56cebcdc-927a-3736-9d88-f396a9cdd6e9.roa
Signing time:             Mon 16 Mar 2026 13:00:40 +0000
ROA not before:           Mon 16 Mar 2026 13:00:40 +0000
ROA not after:            Sun 14 Jun 2026 13:00:40 +0000
asID:                     399728
IP address blocks:        2620:98:e008::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/8eda9035-7c9b-45a0-b98b-a45be535f082.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/8eda9035-7c9b-45a0-b98b-a45be535f082.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:30:0a:4e:b8:75:b6:5c:69:2d:b8:41:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8eda9035-7c9b-45a0-b98b-a45be535f082
        Validity
            Not Before: Mar 16 13:00:40 2026 GMT
            Not After : Jun 14 13:00:40 2026 GMT
        Subject: CN=86306603-058a-4a3e-8b00-782db1a71616
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:0a:20:b0:bd:cf:32:2a:9e:62:15:03:31:c6:
                    60:78:bb:cb:3d:9d:d4:dc:fa:40:c4:f6:b1:c7:73:
                    2d:ae:b6:77:ee:fb:e4:7d:ce:5e:80:ab:23:e3:b4:
                    fb:01:8b:3c:74:a4:b4:87:68:2f:0a:d0:25:bb:17:
                    8a:08:26:92:60:bb:83:7a:80:ba:75:f5:f3:f5:4f:
                    23:0e:cd:ae:70:71:21:d2:04:c7:b8:a0:a5:d9:f7:
                    63:1d:95:97:63:d8:2b:a3:94:3a:0b:4d:40:e2:42:
                    af:9f:cc:32:7d:98:04:3b:b8:c2:9b:de:44:ca:0e:
                    3d:ab:95:26:a2:a6:b4:6c:9e:2f:8b:df:09:58:c3:
                    33:7c:4d:2f:b2:04:d7:f6:47:c9:d4:f8:16:6c:33:
                    3c:70:d0:ce:55:56:14:96:50:e7:44:5e:f3:60:e1:
                    14:fc:99:9f:4e:23:df:6e:0d:22:4a:57:75:38:c4:
                    ec:eb:9a:89:90:9d:14:67:4a:04:5f:91:ab:a7:42:
                    fb:f4:d6:35:c0:53:88:c3:83:2c:28:03:3e:ed:5f:
                    92:72:70:8a:b4:60:68:6e:2c:1e:8e:88:14:22:a6:
                    02:0a:86:19:b5:f6:89:d8:69:46:14:6b:5a:d2:27:
                    86:78:49:56:94:88:f5:56:09:27:76:49:d7:c4:46:
                    51:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:C2:2F:E8:44:F8:BA:1E:E1:8D:B7:4A:B6:88:B7:09:E7:C4:99:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/56cebcdc-927a-3736-9d88-f396a9cdd6e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/8eda9035-7c9b-45a0-b98b-a45be535f082.crl

            X509v3 Authority Key Identifier:
                keyid:64:FD:D2:B4:D5:A9:0A:A0:F5:66:68:E4:2B:96:51:54:E7:7A:66:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:98:e008::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:c9:d7:34:b5:71:32:df:b6:77:bb:2b:60:73:3c:2a:80:c2:
         1f:7b:76:d9:e5:2b:a1:56:9e:28:b6:ae:45:f5:c8:c8:d0:d2:
         fc:95:7d:d5:cb:b6:b4:d6:0a:0e:37:e6:a5:19:02:22:73:f6:
         ff:0f:95:02:cc:f9:9d:67:a1:81:7a:18:4a:1d:5e:0a:1b:f5:
         d1:a3:e5:a0:a0:5a:e9:a9:2d:82:fc:e0:61:89:49:eb:5d:4b:
         87:fb:b4:00:ff:89:3f:6f:6a:93:08:7f:24:c1:51:d6:94:75:
         68:d9:ce:d1:8c:d6:27:2f:91:10:08:e1:96:b5:1e:81:e4:f9:
         9d:2f:42:4d:63:6d:f2:94:4b:6b:5f:f2:fc:3c:62:57:35:6e:
         66:82:b4:b7:f8:04:ca:62:af:ff:03:4a:6c:ed:10:be:81:71:
         43:e6:97:d3:27:23:23:81:30:ca:ac:da:af:25:d7:4c:a1:c1:
         b0:55:a3:c5:6e:c0:dd:93:97:2c:3c:d3:5c:24:06:74:4c:21:
         5b:64:cd:a7:96:c3:76:b5:cb:5c:8f:4b:d6:7f:bb:27:24:b6:
         b9:1d:ba:ba:bb:fa:b2:b3:4f:6f:3a:a7:f5:f5:03:94:6d:6a:
         19:40:48:e9:c9:a5:ba:67:08:71:53:e2:f0:84:8f:b8:ff:61:
         bb:3c:f6:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:38:29 2026 by rpki-client