Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/229868f1-eb31-3582-80a9-f52bf540be6d.roa
File:                     229868f1-eb31-3582-80a9-f52bf540be6d.roa (raw, json)
Hash identifier:          GdBlqozul3FJUUqeSqdWhBF9Up+HXabK4irytIAJT3s=
Subject key identifier:   39:AD:A5:FE:24:3C:48:1E:0A:27:29:2F:BA:17:13:A5:76:45:49:94
Certificate issuer:       /CN=fd356b15-92b2-4e72-b8d9-fa490480d177
Certificate serial:       010D0C9F4328584D55BA38FEA3D8F34365EF6680
Authority key identifier: 1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/229868f1-eb31-3582-80a9-f52bf540be6d.roa
Signing time:             Mon 30 Mar 2026 01:00:23 +0000
ROA not before:           Mon 30 Mar 2026 01:00:23 +0000
ROA not after:            Sun 28 Jun 2026 01:00:23 +0000
asID:                     16509
IP address blocks:        2001:4f8:b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:55:ba:38:fe:a3:d8:f3:43:65:ef:66:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd356b15-92b2-4e72-b8d9-fa490480d177
        Validity
            Not Before: Mar 30 01:00:23 2026 GMT
            Not After : Jun 28 01:00:23 2026 GMT
        Subject: CN=3b2cde82-1770-4402-9044-eea035b7e2c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:42:bc:dc:e8:54:67:6b:d0:5d:4f:04:8e:ba:
                    f4:c1:d0:c6:9f:62:0e:b5:5f:a4:61:b1:ac:94:42:
                    17:08:72:08:9b:1e:36:b2:6c:97:b1:34:d1:2d:68:
                    e6:b5:ae:af:89:7f:85:e3:79:8f:de:74:57:6e:44:
                    0f:18:b7:e4:0d:bb:b5:24:ee:b6:62:d6:50:de:70:
                    10:ca:dd:15:42:80:14:e5:65:d9:34:04:2b:ee:96:
                    89:0f:20:4a:3b:01:84:a4:16:39:5d:d0:f7:70:a5:
                    e6:22:a8:48:d7:6b:7d:fe:7a:d6:88:8e:83:5d:84:
                    b2:20:16:26:fc:9b:18:fb:3a:00:17:95:67:0f:d8:
                    a4:9b:42:f4:8a:89:a6:b0:07:2c:5c:8e:9b:52:10:
                    e6:84:83:04:9b:ac:8e:70:b6:7e:93:46:9a:f4:a6:
                    b3:4f:1f:be:12:5b:83:cc:bf:9a:66:61:53:9c:c7:
                    02:2a:18:d6:3e:65:9a:f0:30:3d:7b:5f:d3:64:72:
                    28:23:c0:aa:bd:0d:e3:f7:15:33:1e:08:61:91:ed:
                    0e:bd:5d:94:f5:33:89:50:7d:17:70:6a:9a:b0:53:
                    ee:0e:92:5d:e3:16:f9:7f:5d:e8:87:e4:1f:fe:df:
                    42:32:47:05:e8:a0:61:e6:ca:44:37:69:26:d6:70:
                    21:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:AD:A5:FE:24:3C:48:1E:0A:27:29:2F:BA:17:13:A5:76:45:49:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/229868f1-eb31-3582-80a9-f52bf540be6d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl

            X509v3 Authority Key Identifier:
                keyid:1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4f8:b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:60:f4:15:77:a8:ca:cf:c9:48:21:45:36:49:ba:4a:1b:bd:
         f8:05:d7:9c:93:b2:4f:9b:ad:ee:e4:0e:3e:3b:df:e9:74:b4:
         d8:eb:41:80:8e:cd:a9:86:ae:e2:6a:82:29:82:28:7f:02:65:
         5b:71:a4:6d:41:f6:ad:d2:59:92:a8:7b:82:75:23:99:e0:ab:
         65:63:f1:ce:d9:34:ff:db:b4:23:04:d5:98:73:8b:3b:fc:a6:
         69:1f:0b:81:76:68:72:18:7c:0d:e7:f4:1d:c7:c3:7f:ca:6f:
         08:bc:5a:f4:ba:fe:42:23:c3:18:a0:31:7c:48:15:0d:de:e6:
         ad:1c:5a:ee:90:59:96:d8:a1:db:57:90:eb:62:b0:fb:64:9f:
         67:91:fb:b1:11:5c:68:a6:46:b3:31:19:60:ef:a5:b5:1d:79:
         0e:ac:13:f5:7e:f8:97:e4:93:10:52:45:b9:32:82:18:8e:ad:
         ae:ac:d0:f6:c5:2d:b7:ff:2a:c9:2d:1e:fd:5d:09:51:92:2f:
         1b:c0:ea:f3:3b:20:41:5c:21:d6:b1:e1:b9:fd:7f:a4:b6:8e:
         76:3b:70:18:cf:1e:24:11:93:4e:e5:2e:6d:9d:45:57:a7:c8:
         0f:d4:31:19:35:d4:07:26:9b:51:2c:6b:b0:fa:cb:3f:58:b1:
         04:dd:76:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:22:10 2026 by rpki-client