Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/56bd0549-0e1f-4e81-bc69-e368e2e29254/f343bc0d-1a47-3448-a18d-34ed64c4539d.roa
File:                     f343bc0d-1a47-3448-a18d-34ed64c4539d.roa (raw, json)
Hash identifier:          sJBnbFbFWZSJRK9+ASAzHveKxpSTDm3hNNCte7khzAM=
Subject key identifier:   05:FC:FC:CE:1F:9D:97:45:FF:C1:53:52:BB:CC:88:71:ED:FE:E0:C2
Certificate issuer:       /CN=56bd0549-0e1f-4e81-bc69-e368e2e29254
Certificate serial:       010D0C9F4328584B8BE223364C1B3FCEC9469A60
Authority key identifier: 16:3C:AE:4F:9C:F9:B9:9D:24:F2:15:17:7C:70:E6:F9:3A:A1:EB:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/56bd0549-0e1f-4e81-bc69-e368e2e29254.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/56bd0549-0e1f-4e81-bc69-e368e2e29254/f343bc0d-1a47-3448-a18d-34ed64c4539d.roa
Signing time:             Fri 17 Oct 2025 01:00:30 +0000
ROA not before:           Fri 17 Oct 2025 01:00:30 +0000
ROA not after:            Thu 15 Jan 2026 02:00:30 +0000
asID:                     11362
IP address blocks:        192.150.211.0/24 maxlen: 24
                          2602:ff72::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/56bd0549-0e1f-4e81-bc69-e368e2e29254/56bd0549-0e1f-4e81-bc69-e368e2e29254.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/56bd0549-0e1f-4e81-bc69-e368e2e29254/56bd0549-0e1f-4e81-bc69-e368e2e29254.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/56bd0549-0e1f-4e81-bc69-e368e2e29254.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8b:e2:23:36:4c:1b:3f:ce:c9:46:9a:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56bd0549-0e1f-4e81-bc69-e368e2e29254
        Validity
            Not Before: Oct 17 01:00:30 2025 GMT
            Not After : Jan 15 02:00:30 2026 GMT
        Subject: CN=b40c281e-06c1-45d6-b4c7-688e92dc1ab3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:86:69:57:a3:09:1b:37:ee:9d:26:06:29:ae:
                    90:a3:f5:e5:06:c5:3b:83:6c:ea:86:b0:1f:01:d0:
                    50:d0:3d:6b:dc:ca:0d:9c:a1:e8:c9:ec:06:5d:f1:
                    b0:3d:9a:01:ae:d6:41:c1:cc:04:6a:d7:2d:5e:98:
                    3f:22:b3:60:59:8e:19:ff:4b:e1:e5:d8:0b:07:12:
                    cc:f8:45:99:ad:a9:3c:e7:5f:e1:03:0a:34:4b:75:
                    24:78:80:2e:b7:22:1d:2c:8c:26:7b:40:9a:a6:ed:
                    f1:39:1c:b4:72:e4:4b:87:61:df:fe:c5:ce:51:d3:
                    39:05:5b:64:36:e0:b5:87:e0:9d:c7:a5:d1:2b:fd:
                    1e:da:5a:3f:e6:e8:db:b3:09:4d:e1:16:16:7d:8f:
                    26:84:e2:4e:0f:45:a9:f6:82:16:23:43:bc:78:f0:
                    76:76:2b:f6:0b:cb:61:ef:28:3c:e7:d4:1d:6f:bd:
                    88:5c:6a:95:93:15:9b:13:1c:88:14:65:3f:6f:4e:
                    6c:a5:12:46:92:f9:34:57:01:1e:15:6d:27:7a:96:
                    8d:35:78:20:11:78:fc:a6:39:0b:b3:70:e8:8e:d3:
                    8f:fe:9e:ae:21:aa:e1:42:88:7a:cf:58:1e:8c:d7:
                    15:bf:e0:2a:0e:18:fa:36:9b:7c:a4:7c:d2:cd:b8:
                    ef:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:FC:FC:CE:1F:9D:97:45:FF:C1:53:52:BB:CC:88:71:ED:FE:E0:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/56bd0549-0e1f-4e81-bc69-e368e2e29254/f343bc0d-1a47-3448-a18d-34ed64c4539d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/56bd0549-0e1f-4e81-bc69-e368e2e29254/56bd0549-0e1f-4e81-bc69-e368e2e29254.crl

            X509v3 Authority Key Identifier:
                keyid:16:3C:AE:4F:9C:F9:B9:9D:24:F2:15:17:7C:70:E6:F9:3A:A1:EB:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/56bd0549-0e1f-4e81-bc69-e368e2e29254.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.150.211.0/24
                IPv6:
                  2602:ff72::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:19:44:59:6a:b3:28:a9:f7:49:8b:de:44:d5:bc:1a:70:9b:
         d5:3b:90:bf:6e:97:de:71:c2:74:3c:20:e2:25:56:37:14:c3:
         aa:0b:ea:76:fb:33:38:e9:12:da:6e:b4:ee:21:48:b1:12:bb:
         1b:19:65:c9:66:87:71:f8:07:d9:49:14:c3:a7:84:58:a8:af:
         ae:0e:9c:8c:d3:b2:ce:da:cf:1b:d8:d9:7b:b5:24:9d:05:d5:
         5c:7f:65:1b:5d:39:ce:c6:75:cf:26:a2:96:4b:93:27:63:45:
         3f:cd:98:fd:c8:5b:fc:43:5e:32:f2:a7:d8:fa:fc:34:18:94:
         ff:03:c6:0a:31:e6:bb:0f:98:ad:f4:fd:b2:15:ce:97:74:b0:
         13:6c:61:fe:7b:9a:af:59:da:ae:9f:25:e6:d0:93:ef:8f:10:
         60:64:d9:3a:db:b4:8c:5f:fd:6a:31:d0:f4:bb:bf:98:7e:cb:
         70:86:a7:00:f7:f4:38:4e:96:06:7f:93:a3:ea:45:f2:0d:8b:
         eb:1d:9b:e0:84:f0:f5:89:40:59:03:b4:a9:88:4b:95:27:95:
         ad:19:22:a4:0f:23:26:e4:39:d1:33:29:6b:01:86:8e:7b:d9:
         1c:b6:e4:f0:fb:5e:b7:f5:7b:15:7b:e0:d5:2a:c6:74:f3:96:
         b9:f0:1c:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 02:21:40 2025 by rpki-client