Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/20326331-2c67-41aa-8ed3-7667815d240c/56b56c2b-deeb-30fa-b01e-eace3180099b.roa
File:                     56b56c2b-deeb-30fa-b01e-eace3180099b.roa (raw, json)
Hash identifier:          rsgmVnkYZRkU8aoGbfoy81fK6fIXLRScj29lFRe497M=
Subject key identifier:   5D:17:70:FC:6E:42:7A:29:C4:78:FF:31:17:E2:08:AF:F0:4F:36:75
Certificate issuer:       /CN=20326331-2c67-41aa-8ed3-7667815d240c
Certificate serial:       010D0C9F4328584B970CCEF91D7976814BC68B00
Authority key identifier: CB:D8:F6:6D:3D:1C:5B:00:63:BC:BD:38:04:8F:8C:87:F5:CF:80:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/20326331-2c67-41aa-8ed3-7667815d240c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/20326331-2c67-41aa-8ed3-7667815d240c/56b56c2b-deeb-30fa-b01e-eace3180099b.roa
Signing time:             Tue 21 Oct 2025 01:00:31 +0000
ROA not before:           Tue 21 Oct 2025 01:00:31 +0000
ROA not after:            Mon 19 Jan 2026 02:00:31 +0000
asID:                     14618
IP address blocks:        69.56.40.0/21 maxlen: 21
                          69.56.48.0/21 maxlen: 21
                          69.56.56.0/21 maxlen: 21
                          74.214.200.0/23 maxlen: 23
                          74.214.204.0/23 maxlen: 23
                          96.46.128.0/21 maxlen: 21
                          96.46.136.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/20326331-2c67-41aa-8ed3-7667815d240c/20326331-2c67-41aa-8ed3-7667815d240c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/20326331-2c67-41aa-8ed3-7667815d240c/20326331-2c67-41aa-8ed3-7667815d240c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/20326331-2c67-41aa-8ed3-7667815d240c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:97:0c:ce:f9:1d:79:76:81:4b:c6:8b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20326331-2c67-41aa-8ed3-7667815d240c
        Validity
            Not Before: Oct 21 01:00:31 2025 GMT
            Not After : Jan 19 02:00:31 2026 GMT
        Subject: CN=e3f5aefe-24ef-4193-a363-829af53f0fa5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:cc:92:7e:32:de:53:b6:97:3a:f1:f6:6b:c2:
                    fd:19:d5:73:00:bd:65:3e:49:33:3b:8a:1b:38:1c:
                    d5:6f:7d:d9:bd:47:f9:3e:a9:50:00:df:8a:d1:0a:
                    47:2a:ef:ac:b7:f2:ac:6c:13:1e:42:c7:fe:14:6c:
                    7d:0f:0b:13:e1:c8:2a:19:8c:ca:96:7d:17:cd:d7:
                    a7:0d:6c:8c:bd:61:96:5e:c8:6f:b1:b1:0d:ce:10:
                    94:20:fb:40:1c:80:ba:4c:38:d9:a5:16:cc:d4:12:
                    40:2d:e4:7f:fe:0f:4d:d7:1c:dd:a6:ea:93:63:43:
                    d2:d6:58:76:ca:a7:b1:b0:db:7f:8b:ea:0e:f6:0c:
                    86:52:d0:01:35:a5:51:65:46:7e:c9:ea:12:cb:41:
                    16:cb:0b:96:d6:76:fd:53:e3:aa:cb:fa:ef:33:26:
                    bf:82:09:85:45:df:be:b2:81:63:e5:97:73:34:6c:
                    ee:61:f3:45:18:9c:6d:47:67:26:90:a1:7d:a5:f4:
                    62:b4:06:c2:6b:1e:2d:e2:e9:bd:6e:9b:d6:95:83:
                    0c:81:11:98:ea:24:94:35:52:80:23:30:b2:8a:22:
                    e1:f8:ac:4f:7c:89:6c:0a:a6:2d:cc:e0:8e:0c:75:
                    e0:dc:11:f6:6e:60:4f:5b:e4:9b:06:e4:d7:31:66:
                    d5:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:17:70:FC:6E:42:7A:29:C4:78:FF:31:17:E2:08:AF:F0:4F:36:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/20326331-2c67-41aa-8ed3-7667815d240c/56b56c2b-deeb-30fa-b01e-eace3180099b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/20326331-2c67-41aa-8ed3-7667815d240c/20326331-2c67-41aa-8ed3-7667815d240c.crl

            X509v3 Authority Key Identifier:
                keyid:CB:D8:F6:6D:3D:1C:5B:00:63:BC:BD:38:04:8F:8C:87:F5:CF:80:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/20326331-2c67-41aa-8ed3-7667815d240c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.56.40.0-69.56.63.255
                  74.214.200.0/23
                  74.214.204.0/23
                  96.46.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:df:c0:07:25:f8:12:65:75:2d:55:8b:7a:fd:00:4c:19:9e:
         71:8c:6e:e9:d1:d6:26:b5:b3:c2:e9:fe:a2:ba:18:c4:a5:41:
         01:ca:42:57:23:26:65:2f:88:f2:12:34:7b:a4:b9:a6:c9:01:
         87:e5:e6:0a:e6:d8:e3:d7:4b:eb:0b:1a:6f:d2:0b:7c:1f:7d:
         2c:31:c3:ff:e7:fb:2e:3c:06:83:7e:1f:59:1f:19:13:b8:ec:
         9a:76:6e:30:bc:93:8c:be:17:0e:32:87:ec:a1:b2:d2:50:d8:
         35:c4:2d:51:7f:67:01:e3:6c:da:87:bd:f6:d0:68:9a:8e:4f:
         68:25:a1:5b:6f:40:3e:e5:33:61:76:66:27:21:5f:c6:00:28:
         ee:70:70:71:e3:f1:1b:b1:23:ae:cc:60:e4:3d:7e:8d:ac:4f:
         66:be:a0:13:cc:8a:a7:e8:70:14:c5:00:d7:99:86:df:ff:37:
         58:49:c6:99:60:57:e4:1c:1b:28:d8:48:88:44:af:20:a3:06:
         c5:14:fa:03:19:85:40:2b:8c:66:57:4e:41:a3:54:f8:b2:cf:
         96:03:8b:b3:8c:49:8b:4c:fe:f5:66:f9:28:75:68:aa:5b:dd:
         bd:a7:95:37:eb:3c:0d:0a:e6:b0:55:51:57:05:66:c9:e6:36:
         cf:b7:a9:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:41:38 2025 by rpki-client