Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/73cffcc4-38a8-3b0e-affe-50da94875441.roa
File:                     73cffcc4-38a8-3b0e-affe-50da94875441.roa (raw, json)
Hash identifier:          elOnpMfWdUyRnsqJvPeDKYhXzDGJ1S0yvDY5Kxd9zTA=
Subject key identifier:   26:9C:EF:59:13:30:31:D5:33:D3:CB:9E:F1:20:D0:4D:44:04:B3:4F
Certificate issuer:       /CN=fd356b15-92b2-4e72-b8d9-fa490480d177
Certificate serial:       010D0C9F4328584AB650D4884EAD53734E726000
Authority key identifier: 1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/73cffcc4-38a8-3b0e-affe-50da94875441.roa
Signing time:             Fri 01 Aug 2025 13:00:41 +0000
ROA not before:           Fri 01 Aug 2025 13:00:41 +0000
ROA not after:            Thu 30 Oct 2025 13:00:41 +0000
asID:                     30133
IP address blocks:        2001:500:6d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b6:50:d4:88:4e:ad:53:73:4e:72:60:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd356b15-92b2-4e72-b8d9-fa490480d177
        Validity
            Not Before: Aug  1 13:00:41 2025 GMT
            Not After : Oct 30 13:00:41 2025 GMT
        Subject: CN=5cd43909-748f-47a2-a0bc-3f6faffc947e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:15:1c:fa:90:34:4c:b6:71:bd:fa:46:c5:99:
                    e4:19:16:06:2d:f0:22:7e:e0:25:fe:e6:be:96:04:
                    e3:91:21:de:b2:3c:bc:e6:d8:c7:70:c2:87:0b:45:
                    f5:36:82:be:24:66:a3:d9:58:d3:46:e4:de:a4:54:
                    ea:39:31:28:20:44:03:c1:8b:55:e0:4e:16:81:38:
                    91:08:2b:55:55:e3:57:3c:03:6a:5e:5b:c3:88:08:
                    46:82:b7:3f:93:bc:34:32:98:c0:e4:82:f8:ac:39:
                    63:49:49:ae:30:3b:b0:e4:c4:00:5f:16:4c:1c:30:
                    83:2f:be:b0:7b:4a:a0:4f:5a:05:8b:15:d2:65:03:
                    45:92:b1:fd:51:62:db:f0:15:54:a1:53:50:09:c6:
                    88:2c:d7:51:d2:a8:b3:a5:50:65:16:09:40:2f:8a:
                    1b:43:14:0f:fb:79:e0:21:e0:84:1d:c4:4d:0c:67:
                    01:59:88:2b:e3:9e:59:33:4e:22:b1:a6:6f:e1:16:
                    af:40:d5:e2:bd:4c:32:a5:6b:5f:29:45:ca:bd:17:
                    6a:fc:1a:07:2b:b4:35:8c:db:c1:bf:8e:2b:d0:f0:
                    81:87:48:0d:10:60:00:30:0c:31:0c:3c:ee:f3:fa:
                    12:ce:b9:25:f6:36:59:60:ed:36:15:8b:b3:ba:8d:
                    80:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:9C:EF:59:13:30:31:D5:33:D3:CB:9E:F1:20:D0:4D:44:04:B3:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/73cffcc4-38a8-3b0e-affe-50da94875441.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl

            X509v3 Authority Key Identifier:
                keyid:1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:6d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:a9:dc:39:3e:ca:bf:b0:98:d3:fe:7e:5d:f5:09:2a:bd:27:
         ff:37:bf:2c:6e:fd:f0:c7:2d:12:0e:17:78:3a:f1:1e:f2:06:
         8b:22:4f:ea:21:bb:0c:6f:0d:f4:9b:33:fe:29:73:c8:10:b3:
         1d:a5:0d:de:38:d9:32:a6:5e:08:26:56:fc:d2:96:26:30:43:
         a5:6f:1c:c6:b9:ad:86:ab:e1:ee:79:f2:b7:af:d0:62:f1:28:
         f8:ae:78:92:7a:be:5e:d9:f4:2e:a9:42:29:45:0a:c6:56:77:
         6b:8b:d2:61:49:51:ac:67:bb:9b:b2:db:ca:58:f8:5d:15:64:
         13:b5:1f:56:19:7a:1a:77:8b:6a:6d:92:db:08:19:23:ee:16:
         82:c8:46:99:d1:57:6b:ae:64:86:ae:c7:38:b0:c4:3b:c5:de:
         48:3b:a6:14:78:d9:af:06:28:26:c2:9f:c6:0b:73:bb:9c:f9:
         7a:02:36:a3:a9:38:84:a9:d8:f8:8a:46:8b:74:32:00:8d:9a:
         b6:98:ce:54:94:ca:f5:38:c5:91:e1:ef:ef:e9:c1:ed:f0:33:
         f2:76:e7:73:eb:e4:25:73:95:11:40:72:b3:9c:6d:3c:81:6e:
         99:70:53:68:9a:8e:a5:4d:16:53:7c:7f:e0:cd:74:92:f6:72:
         de:a1:09:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 13:05:25 2025 by rpki-client