Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/56432fc1-a38f-300f-b622-fa2bbe7bef7b.roa
File:                     56432fc1-a38f-300f-b622-fa2bbe7bef7b.roa (raw, json)
Hash identifier:          DaH+t6oFfS7i87YIwReU0sgHdK4xTlb/qoq0Vfvc4q0=
Subject key identifier:   8A:64:BB:6D:28:94:37:5B:7A:07:33:04:11:AB:8B:FE:24:33:14:11
Certificate issuer:       /CN=8ac31463-974b-4676-9328-200202ae4d6e
Certificate serial:       010D0C9F4328584E1E44520A36BFE2D7E8D98700
Authority key identifier: 66:4A:CF:7A:87:80:2E:D5:96:69:93:6E:0E:BD:6C:EA:41:57:66:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/56432fc1-a38f-300f-b622-fa2bbe7bef7b.roa
Signing time:             Tue 09 Jun 2026 21:00:12 +0000
ROA not before:           Tue 09 Jun 2026 21:00:12 +0000
ROA not after:            Mon 07 Sep 2026 21:00:12 +0000
asID:                     33211
IP address blocks:        206.41.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/8ac31463-974b-4676-9328-200202ae4d6e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/8ac31463-974b-4676-9328-200202ae4d6e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1e:44:52:0a:36:bf:e2:d7:e8:d9:87:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ac31463-974b-4676-9328-200202ae4d6e
        Validity
            Not Before: Jun  9 21:00:12 2026 GMT
            Not After : Sep  7 21:00:12 2026 GMT
        Subject: CN=6fc65a0b-f393-4bc8-97fa-fe1c086535c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:8d:10:8b:ed:62:ca:97:2a:9e:fa:28:b9:0d:
                    78:85:55:53:72:dd:79:65:39:cc:1e:3e:52:70:51:
                    06:6f:b7:88:d1:3c:a5:80:dd:93:01:42:b8:10:ac:
                    f2:5a:ee:e4:07:d7:5b:61:79:be:d2:b0:1e:53:2c:
                    60:a3:d8:91:d6:98:ee:72:d0:04:37:2e:a7:73:0d:
                    4f:0f:5a:e1:a3:96:fc:96:91:85:d7:bf:4a:cb:8e:
                    cd:33:e7:59:4f:2c:50:6e:08:1f:a2:45:40:5e:af:
                    f5:c8:2a:e2:95:e8:18:8b:7f:76:bc:35:3c:ff:80:
                    4c:2a:65:f5:a3:cf:d7:5c:a8:1c:ba:bb:bc:e5:74:
                    65:b8:82:09:87:fd:a5:63:0f:b8:fd:d2:d0:d0:cb:
                    96:2d:2f:00:b0:94:08:21:e0:67:bf:0d:fa:73:85:
                    e4:fc:e4:88:b7:5d:18:be:22:17:23:63:a2:81:91:
                    ac:fa:f0:af:21:38:ff:a2:90:3a:d2:c7:cc:b8:9f:
                    a9:ac:6c:e6:04:90:e2:64:41:1c:e0:bf:44:40:64:
                    08:ed:0d:e3:48:57:76:5b:45:7b:59:76:67:37:e9:
                    60:94:12:96:78:b4:b9:cb:5a:b1:99:61:a1:a1:74:
                    9a:b2:06:11:60:0b:d9:98:fa:dc:f0:12:60:23:ee:
                    d0:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:64:BB:6D:28:94:37:5B:7A:07:33:04:11:AB:8B:FE:24:33:14:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/56432fc1-a38f-300f-b622-fa2bbe7bef7b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/8ac31463-974b-4676-9328-200202ae4d6e.crl

            X509v3 Authority Key Identifier:
                keyid:66:4A:CF:7A:87:80:2E:D5:96:69:93:6E:0E:BD:6C:EA:41:57:66:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.41.112.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:0c:04:94:c0:e4:5f:94:0f:4e:f4:2e:f6:39:f1:bb:ee:ba:
         9d:08:a3:b1:9e:90:db:f2:8d:e7:d7:61:57:d3:df:ac:22:82:
         58:07:2b:d0:79:66:da:3e:8b:43:a7:bd:cc:23:8c:25:b6:a8:
         d3:6c:c9:ee:38:8c:f5:ad:0f:50:40:35:c9:29:8b:cb:36:65:
         bc:ea:20:15:fa:c1:33:ea:76:87:99:79:16:b0:c5:56:35:a0:
         ac:f6:8f:df:93:7e:d4:91:3f:90:e2:fd:9d:4f:d3:a3:6b:21:
         00:87:80:04:19:39:ff:da:2d:4c:12:fa:f6:9c:07:c6:cc:f1:
         1d:8d:05:5b:ea:5b:c8:6c:ae:3f:c9:c7:5c:80:1e:1d:64:a0:
         b6:e1:fd:5e:ea:94:49:95:b2:69:f0:b8:28:63:b7:ca:c3:49:
         14:25:92:9b:3f:8a:a9:c7:11:13:68:a0:69:ed:d4:f7:1f:07:
         11:9f:22:29:c6:20:ca:42:70:2d:82:8b:ff:8a:86:dc:23:c5:
         a1:0f:a2:e4:a7:c3:c7:4d:0e:05:11:37:10:dd:ac:9f:93:01:
         be:39:c1:d2:0b:b5:cd:ee:79:7f:43:8f:ad:35:4b:7b:d0:99:
         6a:64:19:0b:5e:00:dd:8d:f1:08:76:b1:f5:1e:b5:30:6e:c9:
         b0:c4:37:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 08:10:39 2026 by rpki-client