Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/5ad059d5-c2f7-31c1-abd5-db5132e61422.roa
File:                     5ad059d5-c2f7-31c1-abd5-db5132e61422.roa (raw, json)
Hash identifier:          Cko9DTa+av0Mpfh51cmHmhiS3/YfRgPaNe15wdGxwNM=
Subject key identifier:   4B:FF:60:39:7C:AA:70:67:96:B7:20:18:EC:14:CC:11:7F:CC:99:2C
Certificate issuer:       /CN=fd356b15-92b2-4e72-b8d9-fa490480d177
Certificate serial:       010D0C9F43285849D594D5300FCFC4C51398BA80
Authority key identifier: 1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/5ad059d5-c2f7-31c1-abd5-db5132e61422.roa
Signing time:             Tue 13 May 2025 01:00:47 +0000
ROA not before:           Tue 13 May 2025 01:00:47 +0000
ROA not after:            Mon 11 Aug 2025 01:00:47 +0000
asID:                     30133
IP address blocks:        2001:500:64::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d5:94:d5:30:0f:cf:c4:c5:13:98:ba:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd356b15-92b2-4e72-b8d9-fa490480d177
        Validity
            Not Before: May 13 01:00:47 2025 GMT
            Not After : Aug 11 01:00:47 2025 GMT
        Subject: CN=26a4c2b8-ba77-46a5-b019-976f7e9756df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:da:4d:36:01:bc:66:8f:da:24:f3:84:04:bd:
                    0c:36:35:4a:76:8f:a2:30:15:5e:28:59:4e:8f:d6:
                    91:46:fc:26:02:0f:b5:fc:a1:68:80:ea:e3:cc:0b:
                    b5:6e:29:e2:4c:ac:15:9e:f5:26:ae:4a:6f:57:db:
                    0d:74:bf:58:ff:99:e4:7e:f0:5b:55:93:f9:35:f5:
                    c4:5d:cf:4d:ce:e2:36:f9:e4:fe:1b:dc:88:3f:0c:
                    de:44:8c:cf:e8:bb:f3:53:6a:25:3a:6c:e9:c6:29:
                    01:89:51:19:86:d3:44:43:43:37:1a:19:51:bf:22:
                    f6:56:7e:81:99:b0:19:a6:cd:91:6e:40:cb:04:4a:
                    4f:63:66:f4:5b:2a:c5:75:5a:08:1d:54:30:88:67:
                    3d:29:cd:99:cf:73:ff:9b:4a:84:d1:1b:da:3d:1a:
                    cd:47:a9:f5:35:c1:cd:a2:10:5e:4c:a9:8c:c4:17:
                    ca:62:d2:22:c2:84:45:00:89:0a:b1:b6:94:44:d2:
                    9b:ea:7f:c2:c7:7d:10:42:1c:d2:05:f2:aa:6d:c0:
                    9a:60:f3:9c:6e:1b:a4:9b:dc:5a:9e:56:22:31:5f:
                    75:2d:55:8c:c4:f0:c8:c6:65:87:7c:cb:b5:68:52:
                    f4:08:d2:9b:3f:e7:49:ba:b5:50:83:4d:9a:43:e2:
                    6c:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:FF:60:39:7C:AA:70:67:96:B7:20:18:EC:14:CC:11:7F:CC:99:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/5ad059d5-c2f7-31c1-abd5-db5132e61422.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl

            X509v3 Authority Key Identifier:
                keyid:1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:64::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:9a:0f:c0:f2:ba:f9:0d:7c:4d:ea:6e:00:e9:7f:fe:c8:dc:
         6f:3d:ef:36:53:a3:9a:f8:9b:d4:2e:ed:ce:62:0f:16:38:e4:
         3a:6d:9b:f0:0e:c2:00:16:f6:7c:9d:5c:91:70:3f:c2:4e:a3:
         5f:f2:2d:b1:ff:40:73:99:72:c2:31:72:dc:40:61:e8:62:5c:
         22:95:ea:bf:63:eb:46:52:01:71:67:7a:20:45:ea:ad:4f:e8:
         ef:08:aa:52:11:cd:24:56:09:21:c4:e0:4b:19:44:df:5e:bb:
         94:1f:64:d7:ac:3d:55:64:ee:d5:5b:7d:5e:ee:8e:7f:19:ef:
         c9:23:6d:8a:1d:c0:81:c0:03:b6:0f:6c:52:ec:34:1c:28:c3:
         9c:68:18:21:e3:d8:80:a4:57:c9:cb:07:dd:de:93:72:36:88:
         bc:00:c4:7b:1f:fa:1f:05:d8:b2:06:1e:58:fc:43:eb:a4:f2:
         99:90:e5:71:23:93:b9:f9:47:d8:c9:c3:21:e7:8f:6b:0d:39:
         33:31:c3:e0:cf:0a:60:9e:aa:8c:79:9e:01:8c:71:53:01:65:
         67:d6:fb:a0:ba:41:1a:ca:d7:65:d5:f3:0a:27:9e:3b:b6:fa:
         b8:3a:31:de:97:88:6a:b7:02:a8:ff:a6:1b:37:ac:78:f3:c2:
         c2:02:3c:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 05:02:09 2025 by rpki-client