Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/5ad059d5-c2f7-31c1-abd5-db5132e61422.roa
File:                     5ad059d5-c2f7-31c1-abd5-db5132e61422.roa (raw, json)
Hash identifier:          nbIwpYTzwAg+wuTe+DcRjt7KCEdx0ZOBz7m0ggzXwlk=
Subject key identifier:   DA:69:66:6A:A7:BB:B2:55:71:32:AF:42:B3:B2:BF:1C:92:BB:77:10
Certificate issuer:       /CN=fd356b15-92b2-4e72-b8d9-fa490480d177
Certificate serial:       010D0C9F4328584AB650D4389D280689EDE77F18
Authority key identifier: 1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/5ad059d5-c2f7-31c1-abd5-db5132e61422.roa
Signing time:             Fri 01 Aug 2025 13:00:41 +0000
ROA not before:           Fri 01 Aug 2025 13:00:41 +0000
ROA not after:            Thu 30 Oct 2025 13:00:41 +0000
asID:                     30133
IP address blocks:        2001:500:64::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b6:50:d4:38:9d:28:06:89:ed:e7:7f:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd356b15-92b2-4e72-b8d9-fa490480d177
        Validity
            Not Before: Aug  1 13:00:41 2025 GMT
            Not After : Oct 30 13:00:41 2025 GMT
        Subject: CN=bbbd82f7-77a1-4c16-b45f-ff0bc67799ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ed:5b:3c:ef:c4:fb:46:97:2d:a8:42:29:37:
                    d8:79:17:94:e8:f5:32:48:50:ad:d6:ca:8a:ed:11:
                    c2:74:a8:41:18:50:35:5e:36:0d:65:c0:37:f1:11:
                    0f:c6:84:39:38:41:8c:c9:a8:c9:06:d0:d1:a0:f0:
                    dd:8e:ed:85:32:a6:63:96:e2:27:53:e1:ec:ea:fd:
                    b4:61:65:3c:e2:3f:db:a8:69:b1:fe:0e:43:62:5d:
                    eb:69:c4:2b:4c:e2:3d:38:75:fd:58:10:90:aa:e5:
                    bc:69:26:72:f8:37:5d:d0:06:0d:13:6f:8c:78:1c:
                    56:dd:16:bd:d1:ad:8c:26:fe:8e:82:81:05:5b:58:
                    3b:8a:22:ee:e4:5a:fe:31:5c:17:ca:a6:34:d0:32:
                    be:73:e3:04:d5:f7:64:8b:34:7a:20:ae:13:2c:8b:
                    48:ec:fa:31:02:4f:81:27:ef:fa:a6:87:0c:a0:cb:
                    b5:7b:f4:0c:28:f2:da:15:62:0e:3d:a2:ef:d3:f3:
                    a2:7d:ae:91:d3:8a:57:b8:f4:39:14:45:4e:0c:27:
                    95:8f:e8:d4:79:be:d2:a7:11:9b:2e:04:53:db:ac:
                    f6:72:3e:89:03:8c:ac:b1:eb:2a:63:85:7b:56:e2:
                    fd:14:f5:4e:e0:35:54:33:50:39:57:05:af:a6:e7:
                    36:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:69:66:6A:A7:BB:B2:55:71:32:AF:42:B3:B2:BF:1C:92:BB:77:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/5ad059d5-c2f7-31c1-abd5-db5132e61422.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl

            X509v3 Authority Key Identifier:
                keyid:1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:64::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:65:e8:2b:01:c7:8b:c2:b0:bd:7b:9e:48:0d:17:ef:a2:be:
         8a:81:36:5d:4d:9e:a2:e9:59:1f:f8:88:ea:1e:0d:68:a0:64:
         a6:02:21:40:fa:38:82:66:19:81:95:c6:0f:21:aa:06:8a:a3:
         83:b1:0d:f9:cc:52:7a:9c:33:3c:ba:81:b9:22:57:dc:b0:d6:
         2e:ee:0d:bb:d2:31:ff:b8:7f:7c:8f:5f:19:da:57:c9:26:f1:
         07:8f:22:ea:7f:f3:5b:b8:a1:6e:3e:bf:98:22:4d:ac:31:83:
         d4:bb:a9:0c:ba:b6:6b:4b:b0:79:ff:80:93:b8:91:3d:68:cc:
         a2:3e:66:ae:3e:88:bc:12:68:1a:db:0c:63:ff:0a:07:28:9e:
         1b:79:99:f4:49:fa:be:34:89:e6:8e:f3:d5:2f:05:08:1a:c3:
         47:a0:9c:65:ef:cd:ea:98:30:be:8c:55:05:ba:a1:c7:1c:84:
         d9:ef:6c:60:a9:93:70:20:c0:16:a9:6d:e8:e5:86:ab:63:0c:
         57:0e:cb:ae:ef:91:06:d7:31:b5:be:6d:a6:61:dd:75:82:75:
         25:96:56:0f:62:30:e2:c4:2d:f0:b8:cb:0f:b6:21:71:0b:a7:
         17:56:b5:94:00:4f:0d:aa:71:1d:1a:aa:ac:86:84:36:6c:a5:
         3d:b2:32:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 14:34:02 2025 by rpki-client