Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/20326331-2c67-41aa-8ed3-7667815d240c/56b56c2b-deeb-30fa-b01e-eace3180099b.roa
File:                     56b56c2b-deeb-30fa-b01e-eace3180099b.roa (raw, json)
Hash identifier:          KInGUsGdIDlzWF7sL2ibEaMVJDhxXaglfjFYSeTQ3c0=
Subject key identifier:   D3:5E:D8:2D:E3:19:2C:C9:DF:A9:7D:17:29:20:3F:6C:35:6F:7A:0C
Certificate issuer:       /CN=20326331-2c67-41aa-8ed3-7667815d240c
Certificate serial:       010D0C9F4328584AB650D101335A95C04FEA5880
Authority key identifier: CB:D8:F6:6D:3D:1C:5B:00:63:BC:BD:38:04:8F:8C:87:F5:CF:80:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/20326331-2c67-41aa-8ed3-7667815d240c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/20326331-2c67-41aa-8ed3-7667815d240c/56b56c2b-deeb-30fa-b01e-eace3180099b.roa
Signing time:             Fri 01 Aug 2025 13:00:41 +0000
ROA not before:           Fri 01 Aug 2025 13:00:41 +0000
ROA not after:            Thu 30 Oct 2025 13:00:41 +0000
asID:                     14618
IP address blocks:        69.56.40.0/21 maxlen: 21
                          69.56.48.0/21 maxlen: 21
                          69.56.56.0/21 maxlen: 21
                          74.214.200.0/23 maxlen: 23
                          74.214.204.0/23 maxlen: 23
                          96.46.128.0/21 maxlen: 21
                          96.46.136.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/20326331-2c67-41aa-8ed3-7667815d240c/20326331-2c67-41aa-8ed3-7667815d240c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/20326331-2c67-41aa-8ed3-7667815d240c/20326331-2c67-41aa-8ed3-7667815d240c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/20326331-2c67-41aa-8ed3-7667815d240c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b6:50:d1:01:33:5a:95:c0:4f:ea:58:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20326331-2c67-41aa-8ed3-7667815d240c
        Validity
            Not Before: Aug  1 13:00:41 2025 GMT
            Not After : Oct 30 13:00:41 2025 GMT
        Subject: CN=776adab6-8fe3-42f1-a63d-f9fd79616de4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:bb:f9:0c:d9:57:1c:76:57:69:56:63:29:d7:
                    dd:67:e7:60:cc:ff:03:92:5a:83:91:81:33:2b:47:
                    f5:ff:5f:e1:70:a1:b2:9d:24:4c:e6:5c:9d:0b:83:
                    bb:55:52:0d:ee:4a:a5:f0:ce:c7:9d:58:d9:72:6f:
                    12:3a:ee:87:ac:b7:59:4c:5b:38:fe:4c:fe:d1:66:
                    24:2f:0f:7e:af:84:2f:f2:9b:5a:7e:ae:a8:41:8b:
                    31:13:9a:1c:3b:0c:dc:3e:df:f2:70:98:7d:67:61:
                    32:c7:83:27:c6:4b:69:8b:87:a4:2c:88:7c:be:ea:
                    f8:3b:86:d1:6a:84:d0:c4:3b:c0:c7:b0:37:cd:c0:
                    a4:02:3b:c7:6c:25:a6:8b:11:88:f2:02:aa:a0:0a:
                    fb:a2:ee:70:88:a3:61:b1:de:da:9e:30:18:44:c3:
                    32:34:03:7a:56:b7:c1:82:78:7a:91:c7:0f:6f:42:
                    47:a5:a9:be:93:db:ea:b9:71:e3:85:e0:57:80:2f:
                    ad:cf:41:45:c7:ab:5b:0d:3b:40:5e:62:aa:a9:cf:
                    7a:b9:8a:16:d7:57:4e:bd:f6:78:f9:0b:51:de:d5:
                    78:1d:99:a1:bb:0c:3a:d2:31:44:a1:14:c7:fb:a2:
                    d0:1d:d3:3b:10:df:37:cf:25:8e:8c:1d:eb:89:26:
                    c9:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:5E:D8:2D:E3:19:2C:C9:DF:A9:7D:17:29:20:3F:6C:35:6F:7A:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/20326331-2c67-41aa-8ed3-7667815d240c/56b56c2b-deeb-30fa-b01e-eace3180099b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/20326331-2c67-41aa-8ed3-7667815d240c/20326331-2c67-41aa-8ed3-7667815d240c.crl

            X509v3 Authority Key Identifier:
                keyid:CB:D8:F6:6D:3D:1C:5B:00:63:BC:BD:38:04:8F:8C:87:F5:CF:80:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/20326331-2c67-41aa-8ed3-7667815d240c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.56.40.0-69.56.63.255
                  74.214.200.0/23
                  74.214.204.0/23
                  96.46.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:b3:46:5c:1e:07:3c:7e:c2:33:5e:5d:dd:7b:ca:19:d7:e0:
         4b:bb:cd:56:0a:3b:49:d8:2c:91:e6:a6:19:ea:9c:d6:5a:3e:
         cb:e4:14:e6:37:22:38:b9:1e:8c:66:d0:2f:bf:59:2e:fd:01:
         c1:e9:b2:18:04:84:10:c6:60:15:bf:3a:85:b9:a2:1e:b6:88:
         9e:86:1a:a3:c5:bf:a5:35:e5:a1:f9:1f:8b:62:ec:65:23:48:
         ca:03:72:81:e4:b5:8d:ac:37:f4:4a:7f:0e:3d:05:95:72:be:
         7a:9e:0d:0f:73:38:57:bb:ef:89:b4:f4:cf:3e:21:8a:f4:9e:
         e4:8f:ce:b5:39:a0:e8:4e:99:d5:3c:8b:75:b9:c6:67:4c:6c:
         c3:78:59:01:5c:0b:bd:c9:cd:88:97:51:eb:f3:21:7e:68:1c:
         6a:37:52:53:95:84:e2:25:49:5d:2e:07:75:db:5a:7b:44:3e:
         53:ac:f4:fc:38:9f:a5:c0:42:27:e4:e5:4c:cd:23:e7:c2:a2:
         e4:83:a6:26:8c:4f:47:50:76:17:be:89:66:f9:ed:e2:ed:e8:
         d3:40:80:cd:a0:7e:ad:3c:1e:47:41:60:a6:0c:88:c5:a1:37:
         a3:ef:c0:32:09:94:13:2d:50:bd:b0:18:c4:dd:11:12:1b:3d:
         aa:27:56:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:33:27 2025 by rpki-client