Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/5ad059d5-c2f7-31c1-abd5-db5132e61422.roa
File:                     5ad059d5-c2f7-31c1-abd5-db5132e61422.roa (raw, json)
Hash identifier:          1jw+DxcMekkYNVrLeURPDWoSbP0DW3MJmJ6hvL+p9uo=
Subject key identifier:   82:F7:D1:8D:F6:3B:68:A9:9B:08:E2:F3:50:C5:37:0A:D0:AD:EE:2C
Certificate issuer:       /CN=fd356b15-92b2-4e72-b8d9-fa490480d177
Certificate serial:       010D0C9F4328584ED9C743155DF75D837963D870
Authority key identifier: 1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/5ad059d5-c2f7-31c1-abd5-db5132e61422.roa
Signing time:             Sun 16 Aug 2026 01:00:14 +0000
ROA not before:           Sun 16 Aug 2026 01:00:14 +0000
ROA not after:            Sat 14 Nov 2026 02:00:14 +0000
asID:                     30133
IP address blocks:        2001:500:64::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d9:c7:43:15:5d:f7:5d:83:79:63:d8:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd356b15-92b2-4e72-b8d9-fa490480d177
        Validity
            Not Before: Aug 16 01:00:14 2026 GMT
            Not After : Nov 14 02:00:14 2026 GMT
        Subject: CN=ae8e76ca-409b-45a6-beda-e740ee4dfa66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:91:07:38:d1:56:63:f7:a3:82:ce:65:ef:22:
                    03:68:dd:d7:fa:69:28:1d:87:87:1c:b2:6b:42:80:
                    30:82:fc:ad:45:2a:85:87:a5:b1:8d:d6:b2:13:0f:
                    9c:01:61:e3:a6:90:c1:b2:ef:e1:5a:66:3d:95:65:
                    53:09:be:31:df:7c:46:7d:69:1a:5e:8c:10:73:9f:
                    ab:c7:15:2b:d7:c3:32:23:5b:c7:07:54:15:1d:11:
                    07:48:ca:d1:ad:d4:4d:2a:19:e5:a3:5e:20:27:51:
                    40:f8:a0:77:f4:9e:f7:56:64:0b:0f:b6:f1:98:85:
                    6b:9e:6c:bf:f1:d9:74:d6:88:7c:3f:ef:5f:ea:63:
                    51:de:54:c7:b6:dc:09:a6:13:d0:78:1d:e9:7a:e9:
                    93:7c:ae:af:e2:2d:99:1a:d6:16:06:c7:ea:9b:ca:
                    7e:1e:bb:d6:a5:7c:c5:04:31:19:96:e7:ce:aa:b1:
                    bc:ec:c8:6d:a8:00:b6:de:2f:bb:d9:34:8b:b0:18:
                    bf:c5:bf:ed:e8:1c:f8:d5:25:37:96:c3:f2:85:36:
                    82:e2:86:96:2f:ca:b6:4f:08:f5:7a:4d:53:d2:f9:
                    57:be:90:49:fe:e4:77:3e:53:d0:5f:f4:92:57:ae:
                    cf:44:0f:6c:ee:dd:71:5d:a9:13:9c:a4:d6:50:a4:
                    a7:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:F7:D1:8D:F6:3B:68:A9:9B:08:E2:F3:50:C5:37:0A:D0:AD:EE:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/5ad059d5-c2f7-31c1-abd5-db5132e61422.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl

            X509v3 Authority Key Identifier:
                keyid:1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:64::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:46:de:a0:98:6b:f9:2e:7b:24:e4:72:f7:4d:03:bf:56:8d:
         c1:43:88:bb:24:a0:9c:69:51:09:09:25:06:75:c0:18:17:09:
         2f:27:19:b6:3b:05:5c:e3:50:12:92:4c:de:1b:ec:25:95:3b:
         92:0e:ad:55:8d:8c:a4:9a:67:d3:aa:65:4b:dd:89:5e:2c:8c:
         44:2c:93:b3:f1:01:ed:61:b2:c9:cd:bb:70:81:0a:94:b9:6e:
         88:c0:10:1f:7b:03:1a:a9:b2:db:a2:48:b3:bd:4f:1b:ba:b9:
         dc:d1:71:ab:3f:2c:e3:9b:30:d6:04:91:78:0a:7a:43:53:bd:
         b5:cb:80:de:11:bc:9a:c1:22:39:85:a4:a5:fd:36:18:ce:f4:
         8e:29:8f:e2:b2:8a:b2:b1:73:11:23:36:4b:59:45:dd:d2:ed:
         92:ea:5b:4b:0f:0c:30:4a:75:fa:5a:44:1d:11:cc:0a:55:2c:
         d9:0a:39:8d:28:ea:57:ea:89:6c:3f:e4:7d:81:15:6b:c4:e0:
         fb:32:f1:2c:4d:2d:83:e6:22:33:8e:db:f0:f1:d8:f0:0e:b8:
         6c:b2:2d:c4:2a:eb:07:2e:fc:e2:71:40:a3:70:67:d0:a1:9b:
         68:9a:64:47:1b:98:06:e4:5a:9e:38:15:5e:f1:cd:f1:ac:33:
         9e:07:e2:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 07:18:46 2026 by rpki-client