Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/ccf58456-663c-3edf-8774-054942c87944.roa
File:                     ccf58456-663c-3edf-8774-054942c87944.roa (raw, json)
Hash identifier:          Wty8DQVwfFhzxCr2/ZOBs8R9U8/MFt6U9JIb7HWuVKk=
Subject key identifier:   48:BE:81:CC:ED:A7:B9:F0:1F:EE:2E:76:AD:4D:0E:48:5F:4C:45:BF
Certificate issuer:       /CN=fd356b15-92b2-4e72-b8d9-fa490480d177
Certificate serial:       010D0C9F43285849F17FB20DE719EC77E536AB40
Authority key identifier: 1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/ccf58456-663c-3edf-8774-054942c87944.roa
Signing time:             Fri 23 May 2025 01:00:49 +0000
ROA not before:           Fri 23 May 2025 01:00:49 +0000
ROA not after:            Thu 21 Aug 2025 01:00:49 +0000
asID:                     30133
IP address blocks:        2001:500:75::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f1:7f:b2:0d:e7:19:ec:77:e5:36:ab:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd356b15-92b2-4e72-b8d9-fa490480d177
        Validity
            Not Before: May 23 01:00:49 2025 GMT
            Not After : Aug 21 01:00:49 2025 GMT
        Subject: CN=db5e6ce1-de1b-4b3d-98ca-f80b24d4966d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:bf:b4:1e:6f:f6:f9:ae:08:d0:6f:96:f4:67:
                    80:dd:20:d2:9b:64:32:5e:83:dc:2a:dd:32:13:d9:
                    5f:2b:bc:b1:65:75:db:c5:1b:72:03:16:28:3f:4e:
                    b2:9e:ea:5e:07:b6:71:a7:55:0c:cb:18:05:ff:29:
                    46:b1:5e:b4:f8:c5:48:15:52:3b:76:f6:44:83:86:
                    c0:da:3b:fc:40:2a:b1:db:b1:10:db:b1:c7:e1:f5:
                    af:8b:64:72:97:16:4a:fc:e8:b7:bf:77:d3:35:5c:
                    0d:52:51:ac:e4:d1:9c:39:8c:3c:c5:65:5e:62:85:
                    2b:76:9b:7a:3a:c2:5c:e6:f7:c9:16:d9:04:e7:4f:
                    6a:9d:f4:3e:f2:92:d7:79:bf:4d:22:8f:58:55:de:
                    e4:08:ce:86:ea:23:af:6c:fe:6b:1f:b9:82:06:16:
                    00:7f:be:3a:91:48:1d:1e:ae:da:90:e8:47:3a:21:
                    74:c8:37:85:05:29:cd:64:7e:f6:58:08:f1:db:d9:
                    84:04:02:1b:63:42:31:f1:ab:c8:e4:31:0f:ca:e8:
                    c2:a2:75:23:16:1e:12:7c:20:bd:22:d4:97:80:56:
                    5c:9f:38:e5:16:30:1e:da:71:96:c1:ee:50:7c:a1:
                    4b:88:49:4c:0e:f4:26:f7:3c:91:03:db:75:91:b4:
                    6c:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:BE:81:CC:ED:A7:B9:F0:1F:EE:2E:76:AD:4D:0E:48:5F:4C:45:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/ccf58456-663c-3edf-8774-054942c87944.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl

            X509v3 Authority Key Identifier:
                keyid:1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:75::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:59:88:91:fc:38:fe:8c:92:ae:5f:bf:c0:fa:80:5c:e3:0b:
         1d:f4:f1:5e:33:88:ce:16:28:4a:57:03:c7:77:8d:8c:bd:15:
         4d:85:e4:7b:c3:d3:58:e4:90:cf:39:4e:96:e3:2e:11:5d:04:
         e7:68:a7:93:e9:2c:40:57:5e:10:ca:c6:bb:21:97:26:3a:d2:
         ff:a4:f9:be:0c:91:cb:20:82:15:99:55:49:e6:41:c2:81:cf:
         be:da:79:f7:3d:e2:23:c9:cb:d1:05:1a:b0:53:ca:de:1a:0b:
         ef:d6:bf:fe:8e:91:ab:2e:b1:64:78:b9:79:c5:74:e8:5b:0a:
         fd:70:33:d4:4b:3d:f4:73:a0:52:82:a7:7e:10:20:3b:c6:28:
         cf:5a:a1:5a:a2:f0:64:c1:c6:7b:1e:8f:b0:46:59:61:3c:74:
         8e:9c:40:2d:50:ad:d1:a5:14:d7:9d:62:37:a6:fa:e3:a8:b9:
         ec:77:03:31:3e:43:30:37:35:e7:bd:73:bb:00:61:dc:d1:4e:
         9e:24:a1:34:0d:84:b8:94:91:b4:b1:6a:21:3c:69:42:e8:59:
         86:f5:ce:d1:52:71:13:0e:ef:6d:f3:60:68:d9:4f:02:b1:5b:
         9c:b1:4e:ea:6d:94:f3:97:16:18:91:e9:44:1e:d1:8c:0a:f4:
         da:1d:ed:01
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnxf7IN5xnsd+U2q0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmQzNTZiMTUtOTJiMi00ZTcyLWI4ZDktZmE0OTA0ODBk
MTc3MB4XDTI1MDUyMzAxMDA0OVoXDTI1MDgyMTAxMDA0OVowLzEtMCsGA1UEAxMk
ZGI1ZTZjZTEtZGUxYi00YjNkLTk4Y2EtZjgwYjI0ZDQ5NjZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApL+0Hm/2+a4I0G+W9GeA3SDSm2QyXoPcKt0y
E9lfK7yxZXXbxRtyAxYoP06ynupeB7Zxp1UMyxgF/ylGsV60+MVIFVI7dvZEg4bA
2jv8QCqx27EQ27HH4fWvi2RylxZK/Oi3v3fTNVwNUlGs5NGcOYw8xWVeYoUrdpt6
OsJc5vfJFtkE509qnfQ+8pLXeb9NIo9YVd7kCM6G6iOvbP5rH7mCBhYAf746kUgd
Hq7akOhHOiF0yDeFBSnNZH72WAjx29mEBAIbY0Ix8avI5DEPyujConUjFh4SfCC9
ItSXgFZcnzjlFjAe2nGWwe5QfKFLiElMDvQm9zyRA9t1kbRstQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFEi+gcztp7nwH+4udq1NDkhfTEW/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9mZDM1
NmIxNS05MmIyLTRlNzItYjhkOS1mYTQ5MDQ4MGQxNzcvY2NmNTg0NTYtNjYzYy0z
ZWRmLTg3NzQtMDU0OTQyYzg3OTQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZmQzNTZiMTUtOTJiMi00ZTcyLWI4
ZDktZmE0OTA0ODBkMTc3L2ZkMzU2YjE1LTkyYjItNGU3Mi1iOGQ5LWZhNDkwNDgw
ZDE3Ny5jcmwwHwYDVR0jBBgwFoAUH2WrsjwD6KtBARGUGEBfF5fCAiUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9mZDM1NmIxNS05MmIyLTRlNzItYjhkOS1mYTQ5
MDQ4MGQxNzcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAB1
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAA9ZiJH8OP6Mkq5fv8D6gFzjCx308V4ziM4WKEpXA8d3jYy9FU2F
5HvD01jkkM85TpbjLhFdBOdop5PpLEBXXhDKxrshlyY60v+k+b4MkcsgghWZVUnm
QcKBz77aefc94iPJy9EFGrBTyt4aC+/Wv/6OkasusWR4uXnFdOhbCv1wM9RLPfRz
oFKCp34QIDvGKM9aoVqi8GTBxnsej7BGWWE8dI6cQC1QrdGlFNedYjem+uOouex3
AzE+QzA3Nee9c7sAYdzRTp4koTQNhLiUkbSxaiE8aULoWYb1ztFScRMO723zYGjZ
TwKxW5yxTuptlPOXFhiR6UQe0YwK9Nod7QE=
-----END CERTIFICATE-----
Generated at Mon Jun 16 14:56:13 2025 by rpki-client