Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/56993fb9-e1d2-3cb0-abe5-78a1c9823893.roa
File:                     56993fb9-e1d2-3cb0-abe5-78a1c9823893.roa (raw, json)
Hash identifier:          tBBEjmkq+lu4/O7MLt1KJdnjmU368QuDf1dZl5YacZc=
Subject key identifier:   5B:5D:78:5F:9E:36:09:0A:69:DB:12:AD:33:D3:F7:01:1E:67:2D:4D
Certificate issuer:       /CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c
Certificate serial:       010D0C9F4328584DCAFAF890480E0B2567809880
Authority key identifier: 5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/56993fb9-e1d2-3cb0-abe5-78a1c9823893.roa
Signing time:             Mon 11 May 2026 01:00:24 +0000
ROA not before:           Mon 11 May 2026 01:00:24 +0000
ROA not after:            Sun 09 Aug 2026 01:00:24 +0000
asID:                     3756
IP address blocks:        199.109.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ca:fa:f8:90:48:0e:0b:25:67:80:98:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c
        Validity
            Not Before: May 11 01:00:24 2026 GMT
            Not After : Aug  9 01:00:24 2026 GMT
        Subject: CN=a4d56712-6219-4cd7-823f-db36fa8a9978
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:07:a8:73:51:06:98:0d:2a:57:3e:f5:9d:52:
                    1b:1e:07:31:e3:e8:4a:b9:ae:03:44:9d:2c:6b:a2:
                    65:60:fe:92:19:b6:21:d9:d6:31:03:76:8e:68:7d:
                    d0:99:f7:14:f4:f9:da:81:cd:d2:1e:94:04:fb:64:
                    ca:a9:c8:ee:47:06:04:dd:97:9e:c7:44:6b:da:7d:
                    9f:2a:4b:67:4d:7c:11:88:af:37:3d:ad:57:67:ef:
                    f1:f9:84:74:9d:9c:da:c4:fe:d4:6c:84:3d:7d:ca:
                    08:40:2e:d9:b0:3b:06:dc:17:a2:11:c7:6e:79:c5:
                    f9:f8:6c:12:db:70:6c:50:b0:46:52:fa:97:bc:47:
                    d0:fd:1a:28:cf:2f:b1:4e:a9:ae:c5:1c:20:6e:1c:
                    a2:f5:92:19:a2:16:1f:73:7d:96:df:ef:a3:4f:f9:
                    49:f2:08:34:cb:53:12:fa:ac:1a:7f:86:6d:db:6e:
                    ee:aa:44:25:90:67:25:53:9f:48:ee:d5:ce:5f:e5:
                    64:1d:00:5f:ac:30:81:4d:c7:99:3e:6b:41:8b:55:
                    14:0a:14:8c:59:5a:98:c2:c4:a6:2a:79:5d:2f:2a:
                    fa:45:36:20:4d:0c:72:f1:43:40:4a:0e:b7:f2:6d:
                    bb:bb:dd:e0:ee:88:69:13:cb:bc:4c:40:83:15:5d:
                    a2:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:5D:78:5F:9E:36:09:0A:69:DB:12:AD:33:D3:F7:01:1E:67:2D:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/56993fb9-e1d2-3cb0-abe5-78a1c9823893.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.crl

            X509v3 Authority Key Identifier:
                keyid:5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.109.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:63:e0:89:1f:ff:19:32:5f:ab:cd:73:c6:ab:57:8e:30:9e:
         23:39:23:00:e9:5e:1a:48:a0:34:3e:76:15:c0:d7:02:6a:6c:
         36:d3:3e:22:82:8b:7b:3b:ee:8d:99:a5:7c:ea:3f:d1:04:97:
         18:c9:74:99:4a:37:e8:93:60:f3:e2:b3:fb:9a:ee:f8:7e:d7:
         8d:8a:65:1d:02:cf:9f:68:3e:0a:a4:73:3f:40:04:2d:df:0f:
         18:11:55:2e:81:dc:44:63:c6:7f:21:3a:52:a8:0e:46:44:e0:
         2a:c0:64:63:32:d7:1a:fb:2e:f1:27:ef:6d:0a:48:67:10:36:
         88:86:8b:da:59:35:4a:0e:70:35:17:1f:8a:54:8c:98:1b:ef:
         50:d2:b6:76:90:2b:3d:1c:97:d4:63:d0:91:e1:a0:3a:1a:21:
         75:d1:93:a6:ee:36:a8:5b:5e:bc:3e:d5:aa:c8:24:e5:0c:bb:
         0a:4f:cb:9f:f5:f3:f4:14:a7:ab:60:84:d4:5c:15:a2:7f:c8:
         f1:2f:a7:d9:c0:e2:00:d9:ff:0c:7b:20:b3:ce:ec:a6:25:65:
         dc:ac:b1:38:96:46:37:94:4b:f6:68:a6:c8:22:06:99:99:8e:
         0f:23:5f:2b:1d:92:fd:c8:97:e1:28:45:c9:38:20:16:64:db:
         9b:28:0f:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:04:20 2026 by rpki-client