Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/3896e846-51ab-39f6-b6da-f8235e4de3d0.roa
File:                     3896e846-51ab-39f6-b6da-f8235e4de3d0.roa (raw, json)
Hash identifier:          yWGL0McEtSMrMDUMAUbT/21XK+hqQydop45HWT/fhlQ=
Subject key identifier:   1F:1B:D2:C3:02:B6:0D:7D:AF:EF:1C:A0:2A:85:99:0D:82:39:B7:48
Certificate issuer:       /CN=fd356b15-92b2-4e72-b8d9-fa490480d177
Certificate serial:       010D0C9F4328584BAEC7B6101DF28C064F592140
Authority key identifier: 1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/3896e846-51ab-39f6-b6da-f8235e4de3d0.roa
Signing time:             Wed 29 Oct 2025 13:00:39 +0000
ROA not before:           Wed 29 Oct 2025 13:00:39 +0000
ROA not after:            Tue 27 Jan 2026 14:00:39 +0000
asID:                     30133
IP address blocks:        2001:500:6c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:ae:c7:b6:10:1d:f2:8c:06:4f:59:21:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd356b15-92b2-4e72-b8d9-fa490480d177
        Validity
            Not Before: Oct 29 13:00:39 2025 GMT
            Not After : Jan 27 14:00:39 2026 GMT
        Subject: CN=d3facb48-acad-4859-ae29-95ab967992f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:a1:48:f6:d5:77:f9:4a:bc:21:31:b7:1e:3d:
                    1c:2c:95:dc:c3:a0:52:44:9a:1c:38:56:ed:ad:ac:
                    3e:90:8a:1f:34:f5:cd:68:e1:0a:66:6c:93:48:21:
                    00:ca:9b:99:30:19:ab:ed:82:98:ec:ad:b1:00:80:
                    a2:37:ce:7f:76:8e:f7:d5:78:f7:13:39:94:03:57:
                    1d:8d:f0:e1:11:24:1c:c3:c5:43:a4:4c:d7:16:02:
                    53:23:1b:0e:3e:1e:54:78:39:23:d0:b8:50:eb:dc:
                    66:bf:5e:6e:f5:c7:ce:d1:e0:47:1b:7e:50:f8:f3:
                    5b:df:05:98:94:f1:63:79:07:53:73:17:89:87:3a:
                    98:bc:fd:e5:70:84:77:48:58:fa:8c:1d:ba:9d:0b:
                    eb:60:35:06:60:5c:1e:a7:7d:ab:7c:e1:51:85:31:
                    43:7f:69:78:5f:56:b5:af:17:3c:20:8f:ad:45:ef:
                    0f:83:63:be:97:10:4f:57:26:0d:96:63:27:c7:e5:
                    e3:fe:b2:18:7d:59:6d:29:10:4b:e0:01:a4:a4:d9:
                    d5:3c:00:09:fa:f6:b7:f9:3b:1a:89:8f:79:99:b7:
                    2e:26:f6:a7:26:da:e4:36:58:cf:cf:b4:1c:7e:28:
                    69:4c:d0:f7:90:67:cb:4c:02:ab:26:ce:21:33:a2:
                    9c:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:1B:D2:C3:02:B6:0D:7D:AF:EF:1C:A0:2A:85:99:0D:82:39:B7:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/3896e846-51ab-39f6-b6da-f8235e4de3d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl

            X509v3 Authority Key Identifier:
                keyid:1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:6c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:71:0d:18:70:b3:2a:f4:66:3e:8a:c8:8b:b8:4f:ad:ec:2d:
         35:a6:25:45:ca:fa:fc:63:7e:bd:00:d0:2f:b2:20:b0:f3:45:
         7d:d8:fe:e4:d0:ca:39:84:6d:89:fc:94:11:54:99:4d:aa:8a:
         e7:08:d0:8e:93:89:bd:a9:df:04:42:16:d9:0e:23:8d:fd:fd:
         1c:e3:af:f8:cc:64:d1:ca:cd:92:71:78:f4:cd:c3:4c:f3:a4:
         56:74:ac:fb:85:66:31:24:d1:8d:0e:1d:7d:c7:19:d3:8b:cd:
         05:b4:c3:cc:a7:71:2a:fa:6d:3e:91:7b:b7:ae:89:cf:8e:19:
         67:85:b3:46:25:5d:a4:69:46:75:04:5d:34:95:b7:cb:68:9e:
         d5:49:d5:09:3a:5e:2c:0f:52:44:2b:30:b1:b9:5f:97:93:06:
         85:a8:c4:ed:4d:49:60:8c:dd:4e:7e:c0:c2:3d:29:70:6f:d2:
         d3:17:6c:66:9d:3f:e5:b7:9b:96:50:e5:05:f6:5e:38:90:2d:
         46:32:6e:85:44:8b:00:a2:68:68:63:9a:11:60:77:50:cc:26:
         7d:95:e9:11:c4:db:ed:87:7c:97:6d:8e:e2:85:44:da:53:0d:
         87:83:3e:cb:e7:54:e3:d9:b9:96:b1:12:cb:b4:a6:82:c3:64:
         79:c3:79:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:55:24 2025 by rpki-client