Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/0f180227-4098-3068-bffc-87e08fe60d78.roa
File:                     0f180227-4098-3068-bffc-87e08fe60d78.roa (raw, json)
Hash identifier:          Bb1J/XjgIyuFS8wpS3MJSqGG+vjOtr2C0PdsC/jr3Ik=
Subject key identifier:   4D:A9:F9:6E:95:2C:49:88:EC:DE:16:1C:EB:9C:FE:E8:19:90:C4:F1
Certificate issuer:       /CN=fd356b15-92b2-4e72-b8d9-fa490480d177
Certificate serial:       010D0C9F4328584AB4EB693ADC25BAD456379000
Authority key identifier: 1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/0f180227-4098-3068-bffc-87e08fe60d78.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     1280
IP address blocks:        2001:4f8:11::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 09 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:eb:69:3a:dc:25:ba:d4:56:37:90:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd356b15-92b2-4e72-b8d9-fa490480d177
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=14fa84c2-3236-4140-b61d-68ac4183f881
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:bd:7f:ac:c8:73:02:26:45:cd:3a:99:50:51:
                    cf:aa:03:1f:ca:2d:62:4a:be:02:7a:df:ad:28:49:
                    72:25:a1:01:c4:1e:8c:b5:ae:e4:32:ce:ff:94:3d:
                    de:d1:ab:2a:eb:05:2d:bc:ea:60:87:01:a2:79:fe:
                    ac:b5:dd:50:b9:7f:fd:d1:22:1b:0c:4a:7c:6f:1a:
                    aa:ca:6b:a8:3f:bd:fe:78:ae:27:7d:9b:57:c7:a8:
                    90:ef:9d:76:d2:9a:58:20:bd:b5:d3:b1:7e:f2:77:
                    02:14:8c:b1:72:65:09:8f:51:4c:16:2a:89:a6:09:
                    5e:f0:ab:b5:00:0d:21:00:5f:e5:84:a0:23:f6:17:
                    5a:15:52:6d:86:e6:62:a9:89:2e:df:fa:73:7c:d6:
                    cb:f1:25:e6:d7:b3:31:f3:75:05:cb:51:e3:bb:ba:
                    1a:6b:33:8f:8e:67:f6:f6:ef:9f:98:62:f5:94:83:
                    6c:18:7e:25:02:00:af:24:37:0c:75:36:82:ef:b5:
                    85:47:d2:b5:8a:18:64:70:ec:99:03:d7:9e:af:a9:
                    2d:b4:53:37:46:61:1b:b3:21:d6:cc:ab:3f:67:d7:
                    f5:13:94:c9:44:96:53:e7:d2:3d:b7:3e:42:4d:4e:
                    d8:d5:5e:60:00:a3:de:18:29:c4:61:83:a9:93:04:
                    51:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:A9:F9:6E:95:2C:49:88:EC:DE:16:1C:EB:9C:FE:E8:19:90:C4:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/0f180227-4098-3068-bffc-87e08fe60d78.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl

            X509v3 Authority Key Identifier:
                keyid:1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4f8:11::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:bc:29:de:f2:19:12:a6:c5:bb:71:bd:26:99:5a:b4:4c:49:
         7b:a2:9b:53:75:8c:fa:61:5d:86:a5:43:51:ce:a4:9f:76:07:
         42:e8:bf:19:c7:ad:4e:4b:32:05:0f:fa:e3:e6:b7:46:6c:10:
         4b:f5:b6:f4:43:2a:e4:b1:c5:d3:7d:03:e2:f5:a9:ca:d8:a5:
         19:ef:44:2c:c1:ca:e6:6d:34:a5:de:b5:58:c2:a1:42:7c:b6:
         16:de:1b:88:94:d2:b1:c7:8c:91:a5:95:be:2c:ea:9e:19:11:
         ab:51:03:14:6f:17:4e:ef:c5:ce:3f:c0:69:4d:f6:48:e8:a9:
         0c:3c:ef:d4:1a:ba:f4:96:03:7f:7e:a9:d9:10:3d:bf:cf:a9:
         de:69:b3:7e:48:87:e9:4e:2c:b2:59:cf:dd:02:cc:be:7c:9f:
         9f:ed:e7:ff:d8:0f:70:7c:51:09:4f:4e:1d:17:95:e1:79:2f:
         c5:1b:8c:88:e6:4c:6e:fe:60:b1:a8:c2:16:68:36:20:16:bf:
         4e:e3:b9:c5:e3:89:5e:58:9d:21:1a:c6:88:2a:83:9f:a3:14:
         7d:93:54:d8:fb:aa:66:04:5d:c3:06:e7:c4:b4:54:7c:4b:40:
         8b:3a:eb:50:ea:3e:05:5d:39:08:a6:07:b0:ec:92:2d:0c:d6:
         ae:85:51:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 19:22:39 2025 by rpki-client