Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/a47f90dd-ec81-3876-8d33-5fc0970e8333.roa
File:                     a47f90dd-ec81-3876-8d33-5fc0970e8333.roa (raw, json)
Hash identifier:          hoOmfiAe4bCK/ZsYeqy+OREnyWSJc2dUNV0qjScZd6g=
Subject key identifier:   CA:BD:CB:05:5B:9D:54:F0:58:0B:6E:4E:40:AF:C6:1F:70:73:49:CE
Certificate issuer:       /CN=fd356b15-92b2-4e72-b8d9-fa490480d177
Certificate serial:       010D0C9F4328584A1895427402ED484A1CE11A7A
Authority key identifier: 1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/a47f90dd-ec81-3876-8d33-5fc0970e8333.roa
Signing time:             Fri 06 Jun 2025 01:00:50 +0000
ROA not before:           Fri 06 Jun 2025 01:00:50 +0000
ROA not after:            Thu 04 Sep 2025 01:00:50 +0000
asID:                     3557
IP address blocks:        2001:500:2e::/47 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:18:95:42:74:02:ed:48:4a:1c:e1:1a:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd356b15-92b2-4e72-b8d9-fa490480d177
        Validity
            Not Before: Jun  6 01:00:50 2025 GMT
            Not After : Sep  4 01:00:50 2025 GMT
        Subject: CN=6ba5367f-1b70-4aa7-8db1-e5150d713520
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:cd:64:a4:65:cf:91:eb:3c:61:22:0a:04:04:
                    f4:78:f1:6f:dc:7e:c0:a2:41:d7:69:1f:d5:bf:75:
                    a2:3c:57:36:ae:35:74:77:c6:fd:b7:9b:c2:aa:b1:
                    fb:49:53:fe:8b:b6:bc:ed:9f:07:6f:5e:07:98:10:
                    d1:36:e8:7e:e4:60:2c:02:d4:d1:e2:d0:75:b4:c6:
                    20:c7:ef:71:a2:1f:e8:a2:ce:fb:89:dc:8e:80:a2:
                    6b:61:87:c7:5f:29:94:dc:33:4a:e1:26:2f:99:6c:
                    a2:89:24:e1:eb:6d:07:df:2f:2d:26:0a:bd:bc:fd:
                    24:7f:b0:14:09:98:fd:d6:30:4d:da:1f:85:b0:25:
                    60:45:6d:9a:3b:d7:d2:8b:5b:58:d0:32:2e:91:0b:
                    e7:3d:24:4a:cf:fc:e2:ba:5b:f4:d3:e9:6a:bc:b2:
                    df:5d:47:fb:b8:e2:b6:c3:5b:e2:da:1d:7c:d7:5f:
                    af:b4:a5:d8:f9:37:f2:6d:69:e7:7d:f9:cb:0e:b4:
                    5b:dd:e9:cb:3c:17:f6:2d:32:02:5a:39:07:e0:85:
                    0a:60:09:c5:b8:9b:f5:60:f2:08:1f:76:18:8c:92:
                    00:71:96:11:13:1d:4b:50:29:da:8f:03:3d:98:3c:
                    b7:c0:22:d3:9b:11:cd:e6:a5:32:fc:8a:84:cd:de:
                    ba:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:BD:CB:05:5B:9D:54:F0:58:0B:6E:4E:40:AF:C6:1F:70:73:49:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/a47f90dd-ec81-3876-8d33-5fc0970e8333.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl

            X509v3 Authority Key Identifier:
                keyid:1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:2e::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:3e:5d:d5:e4:57:c5:d2:ca:ab:c8:14:54:31:6e:08:fc:03:
         95:68:91:4a:eb:f9:60:2a:c0:20:a8:31:85:42:03:db:7f:10:
         34:0e:00:58:fe:a9:53:d2:0d:6e:79:b3:26:36:e4:82:a1:c5:
         fc:48:87:dd:4e:b0:bd:54:e8:d2:a4:8c:dc:a6:c9:22:e1:8f:
         7f:26:c3:a1:d3:2b:62:5d:d6:aa:52:aa:50:fd:e9:be:ef:2c:
         5b:0a:35:e6:3c:2e:20:ac:70:7b:59:da:6e:18:f2:3b:7b:22:
         b5:a6:13:f9:26:24:ad:b4:29:1f:d3:f9:0d:5d:46:28:2b:ec:
         14:e2:62:46:39:fc:ff:f7:29:15:a5:42:45:55:5d:0c:af:23:
         06:5d:90:22:42:3d:bf:58:3d:ac:36:1a:ce:55:78:8b:aa:fc:
         68:46:12:fd:53:b0:96:ca:e6:72:92:92:ab:9e:45:9d:f3:ec:
         94:5a:d5:85:c6:ea:b8:ad:51:d2:68:44:65:ac:13:13:ce:e0:
         a6:49:fe:90:63:c4:44:a6:7b:33:12:3a:cf:90:75:63:8d:a1:
         81:55:10:75:5e:e9:c0:30:ab:fd:78:d9:3a:f0:c2:93:ff:1c:
         2d:02:13:4e:f4:dd:bb:2a:3c:13:2b:05:f5:6a:49:98:3f:f1:
         ff:82:26:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 04:15:27 2025 by rpki-client