Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/a819ac3c-53f9-309f-af4d-ef75056c2aee.roa
File:                     a819ac3c-53f9-309f-af4d-ef75056c2aee.roa (raw, json)
Hash identifier:          xugcUg8FGSt6xZPCRr7WirfwTq77b+2J9gIYFVIvNXk=
Subject key identifier:   C5:4D:1B:E9:87:D2:B3:C2:5B:17:3C:61:65:9D:03:46:23:7F:75:58
Certificate issuer:       /CN=fd356b15-92b2-4e72-b8d9-fa490480d177
Certificate serial:       010D0C9F4328584AB650DB839E6C5CED007E2C20
Authority key identifier: 1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/a819ac3c-53f9-309f-af4d-ef75056c2aee.roa
Signing time:             Fri 01 Aug 2025 13:00:41 +0000
ROA not before:           Fri 01 Aug 2025 13:00:41 +0000
ROA not after:            Thu 30 Oct 2025 13:00:41 +0000
asID:                     30133
IP address blocks:        2001:500:6a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b6:50:db:83:9e:6c:5c:ed:00:7e:2c:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd356b15-92b2-4e72-b8d9-fa490480d177
        Validity
            Not Before: Aug  1 13:00:41 2025 GMT
            Not After : Oct 30 13:00:41 2025 GMT
        Subject: CN=90c5a3e0-d1fd-4d5e-bb30-4dc4dc855475
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f1:00:40:ac:20:af:29:ef:ae:e0:27:c2:bd:
                    57:55:64:60:d0:9a:39:40:f0:27:0b:21:6b:39:19:
                    76:1e:b7:aa:99:2f:80:be:51:ed:2c:e8:64:dd:9b:
                    49:0e:6b:0c:ad:7c:e4:6e:5d:f0:5d:b4:e2:79:99:
                    30:4c:fb:f6:66:3d:df:b9:93:40:ab:03:1b:9e:03:
                    6a:95:2a:b7:7b:37:eb:ca:85:8a:bb:2c:75:fc:10:
                    29:db:81:77:3d:82:6c:a3:16:c8:33:48:fc:db:7e:
                    b7:68:65:24:de:9c:d9:eb:c7:56:83:d7:ce:9b:77:
                    cf:31:77:44:d1:a4:1d:7c:7c:e7:dd:9b:c9:21:40:
                    7b:77:fc:1b:bb:20:19:e6:22:73:f8:7b:1e:d7:68:
                    da:17:c7:1c:44:b2:d4:39:9a:6a:99:e5:43:c4:49:
                    55:29:45:24:c6:76:bc:de:0a:c9:f8:08:f9:cf:98:
                    3b:57:38:ca:40:35:a1:92:fb:5a:6d:b3:22:5b:be:
                    e3:96:52:36:b4:69:1e:f8:ac:36:8b:f7:38:5e:da:
                    71:54:7d:59:d5:2e:1a:1c:25:52:95:d3:2c:65:cf:
                    af:de:ab:d1:3f:32:c5:65:b8:3b:8e:a4:d9:e0:96:
                    35:e6:be:61:a2:c1:d7:f6:86:1e:e3:a4:37:3e:ec:
                    74:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:4D:1B:E9:87:D2:B3:C2:5B:17:3C:61:65:9D:03:46:23:7F:75:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/a819ac3c-53f9-309f-af4d-ef75056c2aee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl

            X509v3 Authority Key Identifier:
                keyid:1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:6a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:89:e9:09:71:e5:bf:10:9c:ef:94:c1:61:b2:25:00:ce:e4:
         9d:9f:11:c5:b5:e3:0b:dd:82:f2:03:ac:c2:ad:b8:73:09:c7:
         f9:e7:14:09:71:02:03:72:86:66:40:18:5a:af:4d:dc:8e:8a:
         c6:37:7d:f2:bb:2e:5d:0a:b9:16:0f:55:f1:fe:4a:51:45:b3:
         c2:c5:84:4b:e4:f7:c6:b4:ea:41:d6:70:9a:81:03:e5:55:b5:
         48:71:75:d5:73:74:eb:52:f3:e9:ae:88:d6:5f:11:e6:37:5f:
         9e:fa:0e:18:1d:2f:27:6e:0f:f7:1c:95:32:5e:09:92:09:c7:
         23:43:fa:ae:7b:bf:c0:be:dd:1e:9c:f7:a7:72:1e:97:11:2e:
         cf:bb:8f:88:7b:da:ba:e7:74:a2:f2:18:bc:66:25:0e:f4:a6:
         e4:fd:2e:53:2d:5b:ec:5a:30:22:6e:6b:41:89:71:5b:ca:80:
         5b:91:c9:32:96:70:ed:dc:bd:91:74:58:99:13:8c:9f:07:20:
         e5:84:1e:2f:90:e8:62:b6:b2:3d:3d:a1:25:e5:f6:30:de:13:
         5a:21:1e:dc:a5:39:5b:05:3d:49:c1:b5:e0:6c:47:d6:af:67:
         ee:83:56:20:7a:a9:d4:c5:e2:1b:bb:af:59:37:f9:47:f5:78:
         97:cc:ad:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:28:02 2025 by rpki-client