Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2361d86f-f922-4559-a514-d5ddeb84428c/56aeaf20-ec02-368e-9ec5-ef94c9575cdb.roa
File:                     56aeaf20-ec02-368e-9ec5-ef94c9575cdb.roa (raw, json)
Hash identifier:          OhC/VPXv4j11+m8ozRQwuOQFJ6VRVvXPpMqeReOSXmw=
Subject key identifier:   C6:0E:21:EC:63:27:0A:A4:05:FA:A9:57:C3:B1:58:48:ED:9C:7E:9C
Certificate issuer:       /CN=2361d86f-f922-4559-a514-d5ddeb84428c
Certificate serial:       010D0C9F4328584BAEC7B5E32786363327732400
Authority key identifier: 07:37:78:64:26:53:54:43:8A:C3:25:C1:CB:24:3C:6B:DB:88:94:5D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2361d86f-f922-4559-a514-d5ddeb84428c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2361d86f-f922-4559-a514-d5ddeb84428c/56aeaf20-ec02-368e-9ec5-ef94c9575cdb.roa
Signing time:             Wed 29 Oct 2025 13:00:39 +0000
ROA not before:           Wed 29 Oct 2025 13:00:39 +0000
ROA not after:            Tue 27 Jan 2026 14:00:39 +0000
asID:                     3356
IP address blocks:        2606:6ec0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2361d86f-f922-4559-a514-d5ddeb84428c/2361d86f-f922-4559-a514-d5ddeb84428c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2361d86f-f922-4559-a514-d5ddeb84428c/2361d86f-f922-4559-a514-d5ddeb84428c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2361d86f-f922-4559-a514-d5ddeb84428c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 08 Nov 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:ae:c7:b5:e3:27:86:36:33:27:73:24:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2361d86f-f922-4559-a514-d5ddeb84428c
        Validity
            Not Before: Oct 29 13:00:39 2025 GMT
            Not After : Jan 27 14:00:39 2026 GMT
        Subject: CN=ed4c5eac-8ce7-491d-a937-86c4be18055d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:70:72:38:2e:53:9b:1a:62:90:2e:a7:c6:2c:
                    e9:9d:09:b9:f6:bd:91:83:93:b8:7c:ab:de:64:d0:
                    8d:84:3d:26:ea:c5:75:da:d7:6f:dd:59:63:8b:cc:
                    7e:a1:73:04:fc:69:97:2b:71:5c:53:88:69:cb:6e:
                    bc:89:7a:3e:2b:b4:ab:31:10:c4:ae:a0:92:e3:d6:
                    4d:f4:ea:83:b9:6e:43:b2:96:38:e8:2c:58:c3:4f:
                    35:f3:3e:62:5f:51:22:9c:b0:51:72:fd:b3:dd:c1:
                    08:e4:dc:4b:e6:1d:7d:e3:82:a2:c3:16:ca:24:8a:
                    1a:b0:c1:47:a0:31:ff:7a:f6:15:ea:dd:4c:57:fd:
                    19:35:f4:7b:e2:31:a7:37:fe:b6:8a:a0:bb:c0:98:
                    46:a3:77:28:d1:cb:db:24:6b:83:b2:8d:ee:b9:a4:
                    b3:c0:e3:f1:7a:bc:cb:b0:45:c0:8d:33:d9:71:3d:
                    c1:a7:c5:7d:3d:95:2b:1b:55:44:d3:f2:2e:d4:91:
                    a3:db:7c:b8:cb:b6:f2:b4:11:59:98:90:d5:83:a0:
                    57:77:08:5e:a4:4d:82:16:2e:4a:02:e8:b0:6a:32:
                    5e:1e:53:1b:b6:40:7a:da:8c:2b:20:3c:04:aa:1a:
                    b9:0c:5f:26:eb:0d:99:bd:a5:41:c4:e0:f9:ea:03:
                    42:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:0E:21:EC:63:27:0A:A4:05:FA:A9:57:C3:B1:58:48:ED:9C:7E:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2361d86f-f922-4559-a514-d5ddeb84428c/56aeaf20-ec02-368e-9ec5-ef94c9575cdb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2361d86f-f922-4559-a514-d5ddeb84428c/2361d86f-f922-4559-a514-d5ddeb84428c.crl

            X509v3 Authority Key Identifier:
                keyid:07:37:78:64:26:53:54:43:8A:C3:25:C1:CB:24:3C:6B:DB:88:94:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2361d86f-f922-4559-a514-d5ddeb84428c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:6ec0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:70:04:2e:c8:b7:2d:90:2b:95:c5:c5:e2:39:b1:80:dc:87:
         10:fd:db:09:9e:0a:d1:07:a9:58:a4:87:79:50:01:a6:55:13:
         73:89:b1:2d:8f:ed:fe:bb:eb:eb:be:5f:23:b4:87:6b:1a:3c:
         44:01:f2:83:ad:56:e7:f2:b2:25:d9:8d:8f:2c:5b:b3:4f:2e:
         d1:21:e6:87:de:4d:f6:0e:b5:7a:e5:d6:45:78:32:1e:e1:a2:
         72:5a:5f:6f:60:ab:a9:1e:e3:64:b7:03:78:e6:3b:31:f2:19:
         d3:c4:ec:9c:2a:c9:fe:2e:ba:1e:bb:cc:02:2b:be:01:3d:b7:
         cb:14:a6:19:3b:db:07:78:9d:4c:4a:97:fa:a1:57:38:c0:a2:
         17:c7:55:94:84:a9:bb:58:2a:44:93:f9:0e:2e:14:c1:61:19:
         6d:c3:ee:d1:8a:db:1d:98:c1:9c:2e:67:8b:6b:1c:16:c7:ef:
         5d:3e:31:55:46:db:fc:a6:bc:88:81:41:c1:9e:a6:5e:3c:b7:
         85:e3:a7:1d:15:64:7f:93:d2:6c:0a:bb:1c:9f:a6:71:fe:03:
         03:b8:e8:fe:b2:ed:79:06:db:8f:40:f9:95:8f:7f:ed:8f:e4:
         19:e2:24:90:e1:06:8f:d4:e3:19:ba:46:ae:5c:5c:3a:1a:63:
         47:a4:90:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:17:31 2025 by rpki-client