Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/49518ee8-2efd-33a1-8600-fb34d521bc39.roa
File:                     49518ee8-2efd-33a1-8600-fb34d521bc39.roa (raw, json)
Hash identifier:          51byC0TNudQs8OlFfmGvt0+/2WmOgmygy0ozZl6m//Q=
Subject key identifier:   8D:03:F1:F3:11:99:83:E8:CE:65:9E:1D:CC:8B:E7:B6:D3:CA:3F:DA
Certificate issuer:       /CN=fd356b15-92b2-4e72-b8d9-fa490480d177
Certificate serial:       010D0C9F43285849D85F8A64765BDEE22B389400
Authority key identifier: 1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/49518ee8-2efd-33a1-8600-fb34d521bc39.roa
Signing time:             Wed 14 May 2025 01:00:47 +0000
ROA not before:           Wed 14 May 2025 01:00:47 +0000
ROA not after:            Tue 12 Aug 2025 01:00:47 +0000
asID:                     30133
IP address blocks:        2001:500:78::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d8:5f:8a:64:76:5b:de:e2:2b:38:94:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd356b15-92b2-4e72-b8d9-fa490480d177
        Validity
            Not Before: May 14 01:00:47 2025 GMT
            Not After : Aug 12 01:00:47 2025 GMT
        Subject: CN=1a7b2e18-79cc-45e4-9daf-4bbfc9f2d2a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:68:6b:7c:90:25:f3:6a:80:78:8a:f2:c7:30:
                    e9:e3:3b:40:2d:72:42:8f:84:e5:81:c7:7b:69:b1:
                    a7:d0:f0:c7:77:21:e0:99:92:52:16:a7:a5:54:bc:
                    64:28:d1:22:86:b1:88:4b:04:3a:b8:3b:55:a8:2a:
                    44:e1:fe:84:4b:9a:c8:b4:e7:cf:76:09:42:ab:eb:
                    31:d5:c8:c2:a1:f1:c1:40:0b:ea:eb:b6:a1:94:7c:
                    09:24:c0:ac:58:f4:3a:c9:4d:a5:7e:52:fe:de:c1:
                    f2:7b:08:23:15:40:3d:68:f3:4f:93:21:64:77:53:
                    88:74:ca:ac:8f:d3:ea:c0:c1:90:54:a1:73:b8:0c:
                    06:7b:85:a0:41:42:1f:51:19:78:7e:d3:2c:7c:7e:
                    09:75:08:9b:9a:46:6e:f9:9a:b9:44:7c:39:eb:af:
                    8b:7a:b4:59:04:42:e7:66:30:fd:d0:ce:18:bd:40:
                    11:e1:02:33:b7:34:43:dd:87:bd:5b:42:93:8e:57:
                    32:06:74:81:8c:3c:9b:22:e8:0a:85:dc:43:e6:d3:
                    19:90:65:1d:4c:2a:12:b0:cf:d6:99:dd:24:df:e9:
                    ed:e5:de:ad:06:70:6b:a2:ea:7e:83:5a:b5:8a:9a:
                    c5:5f:52:10:5a:81:92:fc:9f:fb:0a:cb:86:ff:a8:
                    f5:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:03:F1:F3:11:99:83:E8:CE:65:9E:1D:CC:8B:E7:B6:D3:CA:3F:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/49518ee8-2efd-33a1-8600-fb34d521bc39.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl

            X509v3 Authority Key Identifier:
                keyid:1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:78::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:13:33:02:0e:56:75:19:74:f8:ef:b1:8f:10:18:ed:78:f6:
         a1:4f:69:96:62:eb:7b:3b:50:73:a7:1c:bd:a7:e2:7f:8b:26:
         7f:a8:3b:a9:f5:56:6a:f1:90:ab:ba:7d:88:22:68:0e:ed:ba:
         60:31:a8:48:55:48:0a:44:d8:fe:60:44:7d:c7:a4:5b:ec:0d:
         75:99:51:36:ec:b8:8d:8e:5b:83:18:ea:e0:3d:e0:64:07:39:
         ab:80:84:a9:4e:bf:18:bb:bb:33:eb:87:bd:ad:2a:d7:ea:47:
         61:7b:f2:02:c0:0d:e6:ab:8f:ae:37:11:df:ce:9b:f7:4b:c4:
         49:73:a8:37:b6:eb:26:20:09:b6:78:d3:81:06:6e:61:be:ad:
         27:71:12:84:0f:4b:af:f9:d3:31:0c:0e:69:26:b4:ae:ee:11:
         f0:2a:06:dc:12:4b:5d:47:6d:27:6c:76:59:e2:1a:e4:57:4c:
         c2:6f:51:9a:84:7f:0a:a1:7c:eb:92:0d:b8:b2:c5:9b:b7:7e:
         77:71:63:aa:79:fa:ce:71:e2:72:0e:c9:57:a5:a3:9e:fe:e3:
         6e:a1:cd:b2:cf:ef:bd:8d:86:79:7a:76:1e:69:94:a3:81:78:
         a6:a6:cd:3f:fc:4a:e9:63:c6:51:fc:bd:45:3c:e8:0d:8d:2e:
         f4:10:c1:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 16:31:56 2025 by rpki-client