Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/56b85935-4ce1-48c7-a19f-f7ab026f59a3/25b435ba-8675-3866-94be-c3d80d59603b.roa
File:                     25b435ba-8675-3866-94be-c3d80d59603b.roa (raw, json)
Hash identifier:          7X3CJHrwsPU6mcEXRypInDtXXrIyXOubQmjpfz+MnTY=
Subject key identifier:   D5:D7:C6:48:B8:E7:96:18:C9:1E:F7:2A:0A:6C:C0:CB:92:5E:0B:2C
Certificate issuer:       /CN=56b85935-4ce1-48c7-a19f-f7ab026f59a3
Certificate serial:       010D0C9F4328584D1707C65E6484DCEE5AB9B4C0
Authority key identifier: 9B:EC:E6:5C:34:B1:AF:71:C0:5C:11:CC:2C:F7:E9:DD:3A:DA:0E:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/56b85935-4ce1-48c7-a19f-f7ab026f59a3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/56b85935-4ce1-48c7-a19f-f7ab026f59a3/25b435ba-8675-3866-94be-c3d80d59603b.roa
Signing time:             Sat 07 Mar 2026 14:00:41 +0000
ROA not before:           Sat 07 Mar 2026 14:00:41 +0000
ROA not after:            Fri 05 Jun 2026 13:00:41 +0000
asID:                     13654
IP address blocks:        2606:c780::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/56b85935-4ce1-48c7-a19f-f7ab026f59a3/56b85935-4ce1-48c7-a19f-f7ab026f59a3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/56b85935-4ce1-48c7-a19f-f7ab026f59a3/56b85935-4ce1-48c7-a19f-f7ab026f59a3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/56b85935-4ce1-48c7-a19f-f7ab026f59a3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:17:07:c6:5e:64:84:dc:ee:5a:b9:b4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56b85935-4ce1-48c7-a19f-f7ab026f59a3
        Validity
            Not Before: Mar  7 14:00:41 2026 GMT
            Not After : Jun  5 13:00:41 2026 GMT
        Subject: CN=165e43c3-2daa-46da-bf00-74c692862f15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:97:0f:f8:00:cd:45:de:ab:06:c6:73:00:f9:
                    89:ce:33:bb:a8:ea:77:50:4b:84:fa:78:49:f9:9c:
                    d1:01:41:a1:9c:d7:14:9f:a9:31:5a:99:70:3e:e1:
                    1f:2d:4f:e8:93:e1:e9:07:8e:bb:93:f9:2f:52:bd:
                    a8:b0:76:75:20:76:85:d4:3f:c8:ec:7a:4e:e5:39:
                    c0:89:4e:7e:6e:a1:00:4b:96:6a:ba:a5:38:2a:86:
                    5e:9e:35:d5:89:6f:ce:9e:36:05:b0:ee:f6:f9:36:
                    f6:c0:6f:79:d3:ad:5c:42:7f:30:51:91:82:be:06:
                    b0:e5:e6:c1:da:71:cf:17:55:ff:dc:5d:3c:9b:97:
                    e5:2f:13:13:ae:dd:cb:c5:3e:03:dd:4c:2d:34:4d:
                    c8:0b:f2:8e:73:31:20:e3:9a:d2:1c:90:6a:05:c0:
                    b7:32:50:34:70:9c:fa:4f:d8:d5:b3:f2:11:13:ff:
                    dc:f5:da:60:fa:3d:cd:b3:12:e8:bd:a5:41:94:0c:
                    04:82:0d:fb:7f:79:a2:c2:23:02:aa:02:48:72:15:
                    05:fa:17:34:a1:ca:22:dc:9a:04:47:85:d1:6e:bd:
                    a6:52:82:0a:de:4c:33:06:a7:f4:b6:03:60:5e:c4:
                    9e:2d:7f:70:86:31:d0:fd:6f:11:e4:f9:d2:af:f8:
                    ab:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:D7:C6:48:B8:E7:96:18:C9:1E:F7:2A:0A:6C:C0:CB:92:5E:0B:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/56b85935-4ce1-48c7-a19f-f7ab026f59a3/25b435ba-8675-3866-94be-c3d80d59603b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/56b85935-4ce1-48c7-a19f-f7ab026f59a3/56b85935-4ce1-48c7-a19f-f7ab026f59a3.crl

            X509v3 Authority Key Identifier:
                keyid:9B:EC:E6:5C:34:B1:AF:71:C0:5C:11:CC:2C:F7:E9:DD:3A:DA:0E:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/56b85935-4ce1-48c7-a19f-f7ab026f59a3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:c780::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:85:8b:35:c0:10:59:1d:80:97:19:51:13:72:09:74:4e:21:
         09:ec:92:70:18:e0:da:06:cf:02:08:2b:9b:65:db:b2:ff:b5:
         3f:be:4c:e4:64:4e:90:b4:0e:af:11:5a:d5:a9:bb:02:54:4a:
         dc:19:e0:23:12:a3:02:c9:45:83:a4:ce:05:be:63:b0:ba:d7:
         6e:e7:54:3e:c6:3a:51:a5:8d:e7:09:f6:cf:96:d6:6a:cb:28:
         c4:ee:19:31:e7:94:5c:68:f2:f9:9b:67:d4:0d:7a:2e:d6:79:
         38:ef:48:f8:d9:09:44:80:d8:05:e7:b9:25:cb:5a:12:4a:8f:
         b4:35:1f:74:62:c8:d1:14:f1:90:64:3c:6a:0f:4d:d9:d1:09:
         d5:82:ae:e7:3b:dd:92:99:bc:48:79:78:6c:12:6a:4c:ee:a9:
         c3:2e:6e:c0:1d:16:05:b8:55:04:a8:6e:35:49:0e:b3:74:7b:
         92:93:67:58:c8:40:cf:4c:bc:92:1e:3a:ff:ad:77:49:bd:6f:
         7d:60:06:d3:a9:7f:4a:1a:0c:49:18:59:f3:18:45:50:64:38:
         ec:77:e3:76:57:2e:95:17:1c:f0:a1:d8:31:b6:fd:06:dd:7e:
         e2:53:aa:c4:cb:f5:39:e2:3c:e3:3e:8d:dd:38:fa:dd:33:79:
         26:5b:39:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 02:34:27 2026 by rpki-client