Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/2f3cc862-5219-3ca7-98db-d5dfce853a00.roa
File:                     2f3cc862-5219-3ca7-98db-d5dfce853a00.roa (raw, json)
Hash identifier:          C1ZQkK+1rkVz/9kVCex+XXVedd2cSY0q1g0pyvBBVW4=
Subject key identifier:   47:22:42:21:AF:AE:47:F4:C9:5C:F6:20:49:82:CB:A2:50:2D:A5:65
Certificate issuer:       /CN=fd356b15-92b2-4e72-b8d9-fa490480d177
Certificate serial:       010D0C9F4328584A119AA924B2167E7ED1699880
Authority key identifier: 1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/2f3cc862-5219-3ca7-98db-d5dfce853a00.roa
Signing time:             Tue 03 Jun 2025 13:01:03 +0000
ROA not before:           Tue 03 Jun 2025 13:01:03 +0000
ROA not after:            Mon 01 Sep 2025 13:01:03 +0000
asID:                     30132
IP address blocks:        2001:4f8:9::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:11:9a:a9:24:b2:16:7e:7e:d1:69:98:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd356b15-92b2-4e72-b8d9-fa490480d177
        Validity
            Not Before: Jun  3 13:01:03 2025 GMT
            Not After : Sep  1 13:01:03 2025 GMT
        Subject: CN=be9e784d-960f-4841-8b3b-7d90a3157571
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:90:ee:5d:14:3c:ed:c6:d4:2a:4a:48:0e:09:
                    00:c4:9b:6e:d4:df:d6:7c:44:1d:eb:6b:e9:32:a0:
                    a6:4e:43:81:cc:4f:f9:d0:01:0f:b2:18:bd:1e:d4:
                    dd:33:3c:9c:b7:00:ab:27:d6:fe:04:81:c8:88:23:
                    e1:84:97:29:d0:03:4c:63:1b:4d:68:7e:fe:bb:ee:
                    2c:61:31:83:e9:2d:9b:37:6b:ec:ed:7f:a4:8c:3c:
                    96:1a:46:c4:ad:1e:dc:51:70:d3:77:2c:6d:a1:2f:
                    be:8a:05:68:31:e4:68:d7:93:08:de:22:4c:cd:d1:
                    53:f4:72:4b:8f:75:42:91:36:9c:d3:0e:ae:f4:5b:
                    27:12:e2:57:a8:d3:6d:4d:6e:3a:6c:c2:11:e5:8c:
                    96:21:23:da:4f:e1:74:ae:08:de:17:c6:f4:04:c2:
                    4d:c0:d2:54:50:18:93:0c:a2:1d:ba:54:73:14:3f:
                    f7:18:80:aa:82:13:62:09:4b:47:77:1f:15:93:81:
                    b1:d4:da:1c:34:25:33:d2:33:1e:a6:7c:c7:23:ba:
                    fa:2a:ce:5a:75:c2:d5:52:10:e6:bf:23:87:c6:2f:
                    72:a0:d0:3f:58:84:c2:17:5a:03:6a:82:f7:e0:3f:
                    b3:2d:84:70:53:5c:30:54:4c:3b:2e:60:76:a1:75:
                    b7:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:22:42:21:AF:AE:47:F4:C9:5C:F6:20:49:82:CB:A2:50:2D:A5:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/2f3cc862-5219-3ca7-98db-d5dfce853a00.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl

            X509v3 Authority Key Identifier:
                keyid:1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4f8:9::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:b4:aa:37:0d:be:9d:82:ad:ac:32:b6:17:7b:5f:4b:17:f5:
         09:d0:c3:f0:b4:6a:91:d7:47:24:b9:8b:ec:d3:0a:55:22:b0:
         c5:0b:b1:c0:78:f8:33:e3:7e:8e:d7:42:1e:d0:f6:3a:6f:c8:
         1b:9d:6c:48:1c:49:5d:b8:36:e2:ab:69:63:3d:24:a4:24:e0:
         96:5d:6a:df:bf:4f:bb:73:31:85:b0:3b:86:a9:83:75:98:2a:
         73:58:65:cc:51:ff:19:10:ad:28:00:48:bb:27:f4:b2:96:2a:
         ef:a4:88:15:8d:fb:ef:25:03:94:f2:56:84:38:b2:57:5b:f7:
         5e:24:99:20:be:41:1c:8e:59:a3:53:93:6d:6e:eb:68:33:e3:
         9f:8f:53:84:ea:d0:e7:59:cb:01:53:f1:70:66:a8:e6:8c:94:
         c6:1a:82:6b:4a:1b:1a:10:23:27:cc:ba:89:4e:76:8e:03:35:
         92:94:82:d2:60:24:92:9a:59:cc:fa:fd:cb:f8:a6:39:57:63:
         c9:a3:d3:c4:aa:2a:c4:28:e7:c2:57:46:58:5a:14:9a:35:68:
         2d:09:d8:56:70:21:97:58:c6:67:62:76:66:8e:63:46:05:12:
         2d:6c:68:bd:a5:bb:f3:89:f4:aa:5b:b7:35:eb:38:2a:fd:29:
         ee:c8:40:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 04:55:29 2025 by rpki-client