Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/a67f6588-70bf-39ab-9e3e-bcf47b46c8c4.roa
File:                     a67f6588-70bf-39ab-9e3e-bcf47b46c8c4.roa (raw, json)
Hash identifier:          qL+/wWDo9cMYy0Yiesc9+Tl9h7yrUDI14+PFqvTJEg8=
Subject key identifier:   52:F3:4D:C7:12:1C:2F:3D:88:2B:65:F4:EF:60:16:B6:3A:D4:67:E2
Certificate issuer:       /CN=fd356b15-92b2-4e72-b8d9-fa490480d177
Certificate serial:       010D0C9F4328584AB650D5AD0FE59DF21C590C80
Authority key identifier: 1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/a67f6588-70bf-39ab-9e3e-bcf47b46c8c4.roa
Signing time:             Fri 01 Aug 2025 13:00:41 +0000
ROA not before:           Fri 01 Aug 2025 13:00:41 +0000
ROA not after:            Thu 30 Oct 2025 13:00:41 +0000
asID:                     30128
IP address blocks:        2001:500:6f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b6:50:d5:ad:0f:e5:9d:f2:1c:59:0c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd356b15-92b2-4e72-b8d9-fa490480d177
        Validity
            Not Before: Aug  1 13:00:41 2025 GMT
            Not After : Oct 30 13:00:41 2025 GMT
        Subject: CN=7d874804-a444-4488-9c0b-02bfc97dfe6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:5e:e8:66:05:df:d5:5f:05:60:0a:ad:a9:af:
                    7b:b2:ec:07:6c:8e:9e:b6:f6:38:8f:34:3e:13:6b:
                    32:79:3c:87:4b:d3:c4:18:ce:c9:31:29:0c:18:d6:
                    14:6c:aa:42:16:4e:e8:96:3b:c0:be:88:49:7b:79:
                    cd:b4:84:a7:2f:38:34:e2:13:fd:41:84:cc:93:7d:
                    d5:66:cf:03:7b:ea:44:c3:61:d8:db:b2:d6:83:be:
                    be:b9:5b:c9:cd:ad:a0:9e:6f:a5:03:e7:4d:1d:a0:
                    d5:8d:cd:83:f3:e3:c8:0d:13:8e:2a:07:86:c9:4a:
                    0b:c2:35:3a:4f:ad:a7:77:eb:78:d2:ce:62:c3:6d:
                    5f:02:39:9d:b5:07:ad:90:b3:75:a5:28:65:46:ea:
                    ca:aa:c6:ba:ae:7f:3d:9b:5b:f8:23:f6:88:83:4f:
                    f1:9d:22:f5:ee:db:84:fa:1f:1e:15:1e:c2:d6:be:
                    7c:0e:c6:87:05:ac:da:bc:0a:6b:5a:8c:d3:c9:8c:
                    33:e7:c3:e8:18:97:41:d5:01:73:3a:0d:79:08:18:
                    f1:f8:2f:f0:40:0f:a8:09:28:88:de:4e:29:b3:cc:
                    c8:df:29:e2:5e:5f:41:ed:f9:72:bb:bb:02:cb:5c:
                    7c:d4:9c:52:3f:90:ef:c5:89:9a:6c:4d:41:7c:70:
                    86:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:F3:4D:C7:12:1C:2F:3D:88:2B:65:F4:EF:60:16:B6:3A:D4:67:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/a67f6588-70bf-39ab-9e3e-bcf47b46c8c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl

            X509v3 Authority Key Identifier:
                keyid:1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:6f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:94:fd:ee:00:a9:86:da:94:e5:91:9b:73:ee:76:ea:fd:47:
         de:2f:81:17:b0:38:79:1a:f7:25:9f:25:79:c2:0a:f0:b8:a3:
         38:99:3d:30:c8:7f:aa:f9:57:a0:ad:dc:24:37:d5:e5:84:20:
         eb:0f:03:dc:b8:09:03:d2:45:7f:9c:f7:2b:70:e0:50:13:de:
         6f:53:c0:d2:13:a5:e7:ac:0f:39:78:15:12:fd:d5:a2:a1:d3:
         ac:d4:ec:1c:16:89:55:13:4b:ed:99:f8:9d:ed:7f:3c:ae:b7:
         8f:1e:93:4b:3a:e1:fd:1d:a2:4a:f2:50:00:b7:55:92:12:b7:
         e0:ce:59:f1:5a:0f:7b:4b:3b:44:a9:86:43:cf:de:b3:f2:00:
         d0:fa:fb:72:f0:18:53:54:6b:32:26:43:40:a1:ad:af:d6:e8:
         7c:67:39:99:14:a1:20:fa:77:47:13:ec:0e:ef:63:95:0d:e0:
         cd:80:9f:97:ff:9d:10:db:b7:19:02:c2:7b:a3:a7:58:7e:76:
         fb:fe:a5:ba:2e:4d:17:af:64:b0:d4:09:e5:48:94:ea:89:5c:
         f3:82:07:5e:f3:ee:5d:d7:a1:9d:49:52:74:8f:5a:e3:e5:a4:
         be:7d:58:81:5d:11:14:1c:f4:0d:c7:14:4c:6a:ab:98:3f:50:
         ed:67:00:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:39:18 2025 by rpki-client