Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/a67f6588-70bf-39ab-9e3e-bcf47b46c8c4.roa
File:                     a67f6588-70bf-39ab-9e3e-bcf47b46c8c4.roa (raw, json)
Hash identifier:          wGspHVUEMN7BQ7MGomBo97+1QFz1eVvyAvkiju/E+xo=
Subject key identifier:   E0:22:18:56:B2:9D:1B:39:92:1E:12:BE:3D:72:76:8F:0C:CC:F0:2D
Certificate issuer:       /CN=fd356b15-92b2-4e72-b8d9-fa490480d177
Certificate serial:       010D0C9F4328584D571FA01D6D10705677D90770
Authority key identifier: 1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/a67f6588-70bf-39ab-9e3e-bcf47b46c8c4.roa
Signing time:             Mon 30 Mar 2026 13:00:30 +0000
ROA not before:           Mon 30 Mar 2026 13:00:30 +0000
ROA not after:            Sun 28 Jun 2026 13:00:30 +0000
asID:                     30128
IP address blocks:        2001:500:6f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:57:1f:a0:1d:6d:10:70:56:77:d9:07:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd356b15-92b2-4e72-b8d9-fa490480d177
        Validity
            Not Before: Mar 30 13:00:30 2026 GMT
            Not After : Jun 28 13:00:30 2026 GMT
        Subject: CN=7c93f1f0-fcc4-4d54-ba5b-d7720ce3e346
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:7e:35:5f:5d:61:fe:aa:77:e7:89:ae:6c:7e:
                    fb:14:92:fe:73:f6:86:7b:93:bf:48:78:2f:fc:9b:
                    65:6d:da:4d:45:af:9b:c0:11:ec:8d:9a:ae:c4:54:
                    7a:b0:ba:77:9d:44:82:b4:3b:c3:c1:66:d9:ce:0f:
                    ba:87:31:3f:f8:0c:34:c3:2a:e2:61:9a:b4:05:b5:
                    03:11:db:88:12:3b:e3:c7:27:52:2b:c1:bb:d9:d8:
                    24:49:01:53:23:d4:1d:06:36:0c:24:54:ef:2a:e7:
                    e4:0a:21:b9:ed:b7:98:97:dc:4c:3c:41:b0:1d:04:
                    24:26:c8:cb:0f:ee:f8:8c:f5:a1:3a:63:8c:2b:bc:
                    d8:e7:30:11:55:2b:69:d1:fe:ab:50:9c:3b:7b:92:
                    2b:77:c1:64:a7:9a:e3:05:a2:82:6d:3a:30:db:30:
                    ca:9f:1f:fd:ce:45:59:6b:87:89:47:dc:24:c5:f5:
                    9d:73:e8:1e:66:b7:2c:4e:38:ba:89:f5:c0:31:f8:
                    09:13:5d:94:d2:f3:00:a3:1c:16:f3:73:ca:fe:96:
                    e1:27:b7:fa:3e:8e:bd:9c:b7:65:7c:48:c5:82:bb:
                    ed:ae:14:79:75:e1:75:1f:89:af:4f:e8:f8:d5:f0:
                    3c:09:62:2a:f7:4f:bf:b0:bc:1a:61:78:eb:6b:6f:
                    97:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:22:18:56:B2:9D:1B:39:92:1E:12:BE:3D:72:76:8F:0C:CC:F0:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/a67f6588-70bf-39ab-9e3e-bcf47b46c8c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl

            X509v3 Authority Key Identifier:
                keyid:1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:6f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:c2:47:4b:08:8c:49:db:0a:b8:be:12:eb:3b:85:40:dd:ce:
         6a:4b:10:3a:8e:60:ea:76:ac:c9:5d:98:a1:c9:73:57:3a:1f:
         18:81:d8:29:97:09:7a:56:64:3b:c1:c1:ff:b3:3a:68:0f:a6:
         5b:24:5d:a1:db:94:ef:b3:a5:49:fc:4c:24:86:89:52:db:8e:
         f1:fa:1a:27:1f:8c:b2:90:f3:4b:07:f7:a2:35:a6:f1:f9:b9:
         5d:7a:1f:1e:06:7f:c1:8c:8d:ff:fa:2f:31:10:ee:92:2c:d4:
         df:32:a9:0b:dc:0f:82:c5:a0:5d:49:04:70:3a:cd:e2:a0:41:
         d3:a8:c2:b9:dd:9a:68:03:5e:14:38:2c:c8:51:40:84:c8:da:
         67:a0:49:92:f1:e4:4d:3d:5f:d1:31:20:aa:9d:e4:88:2d:39:
         a0:ca:65:f0:45:13:3d:a2:5e:b0:3d:bb:57:2f:04:0c:45:86:
         6a:c6:0a:dc:c6:6a:b4:7c:bb:94:3b:b7:ca:e4:a5:72:f8:f3:
         1a:72:c6:b4:73:7c:a0:a9:d0:70:da:ce:5e:87:5a:b1:7e:30:
         7d:c4:02:66:13:0e:4c:eb:38:7b:3a:46:48:6a:d6:e0:af:e9:
         e7:91:2f:31:ed:4e:a8:56:97:b3:85:4d:40:8e:63:5d:f3:3e:
         e8:28:40:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:06:58 2026 by rpki-client