Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/56c0805c-5631-4805-a7f4-dcc62b92b16f/9bb1feaf-c15d-3419-a4e9-42699dbab6d6.roa
File:                     9bb1feaf-c15d-3419-a4e9-42699dbab6d6.roa (raw, json)
Hash identifier:          bCYgFsOReZCKfUma36jTFUhbUxti6j9UiWViGicMCdY=
Subject key identifier:   DC:19:F0:BC:B3:98:0C:79:EB:8C:A3:2A:32:D0:C4:A4:8B:39:2D:D3
Certificate issuer:       /CN=56c0805c-5631-4805-a7f4-dcc62b92b16f
Certificate serial:       010D0C9F4328584B7F521377978BF0EEA0AEED80
Authority key identifier: C8:3E:94:9F:AF:94:43:DB:C0:D6:17:62:14:4F:4A:58:02:68:35:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/56c0805c-5631-4805-a7f4-dcc62b92b16f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/56c0805c-5631-4805-a7f4-dcc62b92b16f/9bb1feaf-c15d-3419-a4e9-42699dbab6d6.roa
Signing time:             Sun 12 Oct 2025 13:00:37 +0000
ROA not before:           Sun 12 Oct 2025 13:00:37 +0000
ROA not after:            Sat 10 Jan 2026 14:00:37 +0000
asID:                     55
IP address blocks:        2607:f470::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/56c0805c-5631-4805-a7f4-dcc62b92b16f/56c0805c-5631-4805-a7f4-dcc62b92b16f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/56c0805c-5631-4805-a7f4-dcc62b92b16f/56c0805c-5631-4805-a7f4-dcc62b92b16f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/56c0805c-5631-4805-a7f4-dcc62b92b16f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7f:52:13:77:97:8b:f0:ee:a0:ae:ed:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56c0805c-5631-4805-a7f4-dcc62b92b16f
        Validity
            Not Before: Oct 12 13:00:37 2025 GMT
            Not After : Jan 10 14:00:37 2026 GMT
        Subject: CN=0a15ffdd-f396-4562-afe7-2e56c73e6951
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:f0:18:46:1e:68:a0:ad:38:20:fb:65:d2:6c:
                    56:6f:41:66:11:04:ba:af:3f:52:14:63:41:86:d4:
                    30:c2:f0:f8:b8:2a:91:5f:9e:7e:61:34:13:79:b1:
                    da:af:f7:ee:98:04:dc:d6:09:8d:95:2f:de:2c:e5:
                    3f:f5:1c:c6:1c:8c:81:eb:12:5f:69:19:07:f1:e8:
                    0c:fe:85:51:96:fa:20:fd:11:a6:36:7f:ea:d8:cb:
                    83:d0:f3:0d:4e:78:68:0b:44:15:66:b6:bc:56:90:
                    54:1f:ae:15:6e:52:77:8b:e6:91:18:8b:95:dc:f0:
                    1b:3a:ae:85:7f:78:86:b1:c7:c5:8a:e0:84:0b:25:
                    bc:94:d4:c6:6f:1c:12:e1:4a:21:fd:ff:0f:61:e1:
                    51:18:d6:20:3c:22:59:28:eb:6b:a3:31:76:b4:c8:
                    f5:e8:9b:0f:f7:b5:7c:69:57:02:8f:97:21:07:63:
                    de:4a:3e:30:42:b6:0d:58:ed:6b:de:41:b8:54:26:
                    9a:69:bd:bf:c5:7d:76:88:da:7b:8a:7d:e1:3e:84:
                    7f:0c:b4:40:d1:82:c3:a1:77:06:56:00:15:c3:70:
                    e3:f8:9d:77:dc:6e:4e:54:cf:d3:12:3e:aa:a2:d3:
                    18:02:24:79:66:34:b9:42:de:26:5c:b1:8f:bf:ae:
                    79:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:19:F0:BC:B3:98:0C:79:EB:8C:A3:2A:32:D0:C4:A4:8B:39:2D:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/56c0805c-5631-4805-a7f4-dcc62b92b16f/9bb1feaf-c15d-3419-a4e9-42699dbab6d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/56c0805c-5631-4805-a7f4-dcc62b92b16f/56c0805c-5631-4805-a7f4-dcc62b92b16f.crl

            X509v3 Authority Key Identifier:
                keyid:C8:3E:94:9F:AF:94:43:DB:C0:D6:17:62:14:4F:4A:58:02:68:35:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/56c0805c-5631-4805-a7f4-dcc62b92b16f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f470::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:c4:4d:b0:d6:7e:91:a1:43:03:d5:5b:bc:5c:49:1a:b9:98:
         db:4e:ce:af:1f:20:5a:56:54:e1:80:32:4c:18:14:a1:2c:49:
         dd:3f:43:f7:0c:22:3e:7a:53:f2:c3:bc:f1:c6:61:73:e3:d1:
         e4:2d:06:63:09:23:a7:e0:f4:8c:f4:c0:e9:f9:22:b1:89:44:
         01:a8:cf:03:e7:1b:22:1c:76:7e:0d:b5:a2:90:ad:3d:c3:cb:
         35:ca:91:90:8e:0a:e5:0d:1c:f3:37:eb:88:91:a5:38:8a:0d:
         a8:5e:f4:a4:ef:b6:e4:6b:82:47:df:f3:ef:92:16:49:9f:a7:
         dc:45:30:b4:9e:2b:af:5f:47:c8:cf:2f:34:1f:1f:66:5a:d4:
         cd:a4:6b:e0:73:45:7f:b7:9c:3f:c9:1c:09:75:4a:f1:37:d6:
         27:a8:db:eb:89:6c:82:02:27:06:83:3e:69:6f:9c:b5:cf:f4:
         3f:1c:30:c0:09:b9:4c:68:3f:15:bb:20:9c:fe:52:06:2c:9e:
         99:a5:b1:a9:6b:e0:b3:ce:7b:c3:6b:04:2f:c2:3b:72:9d:f0:
         0c:a4:4b:fa:f5:7d:43:4a:89:e3:ca:58:54:d6:4c:d1:ff:d3:
         99:dd:03:19:c8:93:40:ec:d3:2f:85:53:d0:c0:74:91:7c:8c:
         a3:60:55:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 16:58:57 2025 by rpki-client