Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/e1c6f053-cec1-3701-8c2b-58e1e411c35c.roa
File:                     e1c6f053-cec1-3701-8c2b-58e1e411c35c.roa (raw, json)
Hash identifier:          d2WnZzqUm0qHDaTsAlZn1vDAIFGiS+VodNdAXyzJLpo=
Subject key identifier:   03:5F:56:64:A3:1D:EE:94:57:C1:F0:6E:4D:48:9F:2F:49:CD:6C:9E
Certificate issuer:       /CN=fd356b15-92b2-4e72-b8d9-fa490480d177
Certificate serial:       010D0C9F4328584D55BA390FFBAC7AEAC28B7200
Authority key identifier: 1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/e1c6f053-cec1-3701-8c2b-58e1e411c35c.roa
Signing time:             Mon 30 Mar 2026 01:00:23 +0000
ROA not before:           Mon 30 Mar 2026 01:00:23 +0000
ROA not after:            Sun 28 Jun 2026 01:00:23 +0000
asID:                     55440
IP address blocks:        2001:4f8:b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:55:ba:39:0f:fb:ac:7a:ea:c2:8b:72:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd356b15-92b2-4e72-b8d9-fa490480d177
        Validity
            Not Before: Mar 30 01:00:23 2026 GMT
            Not After : Jun 28 01:00:23 2026 GMT
        Subject: CN=5e5fed12-5d62-416c-8151-8a145603fb0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:25:ce:cc:c9:83:78:83:40:2f:9c:fc:c2:52:
                    45:6b:7c:c0:89:3c:1f:2f:ea:0c:c0:e1:b3:d3:0b:
                    73:0f:53:c5:0b:18:a7:d1:79:df:60:f9:7a:f5:c5:
                    f2:12:d9:8a:a9:dc:ba:92:32:11:42:25:4e:48:87:
                    d5:c9:7f:ac:18:d9:ae:03:35:01:a1:f6:c9:24:28:
                    48:f3:9f:41:99:33:9c:6c:81:df:05:b6:7c:37:48:
                    17:ff:9f:19:85:c9:c8:03:4a:65:3e:77:ad:37:7f:
                    da:91:de:02:1c:b2:9e:e5:02:6d:9e:c3:95:15:18:
                    a4:a8:d5:2d:7e:e2:e9:19:54:b5:21:5a:8f:a0:ab:
                    4b:e1:ca:33:da:05:4a:4e:6f:d7:71:b9:63:30:4c:
                    ff:c2:50:cf:ca:27:e3:4d:8c:04:54:8b:e0:94:39:
                    bb:c7:b2:03:c9:c8:f2:af:49:19:c6:6e:14:f8:9f:
                    98:ff:31:dc:33:76:d8:50:2a:24:8c:9f:4b:7b:57:
                    d4:e8:9d:8f:2c:be:19:31:4e:37:3b:7a:c0:b3:03:
                    0c:c9:3f:e7:60:08:15:df:01:bf:33:28:0d:30:35:
                    45:7b:5f:81:c2:4a:91:9e:bb:0c:92:45:ba:9a:d7:
                    69:44:ff:ed:31:9c:0a:bb:39:3b:c4:1a:bc:ff:62:
                    20:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:5F:56:64:A3:1D:EE:94:57:C1:F0:6E:4D:48:9F:2F:49:CD:6C:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/e1c6f053-cec1-3701-8c2b-58e1e411c35c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl

            X509v3 Authority Key Identifier:
                keyid:1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4f8:b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:b1:4c:ad:ad:36:88:3c:5f:66:f2:18:39:90:58:3f:55:81:
         e8:a8:e8:29:ae:b4:6e:ac:1f:5b:7c:79:99:dd:70:9c:b1:83:
         f7:1f:55:3a:3b:fe:94:05:ec:a0:9f:fe:d0:15:83:5f:a2:b8:
         db:38:6a:75:16:ac:49:9a:ce:f9:ee:bc:1f:d5:51:5e:5c:bc:
         32:34:c7:94:19:27:90:37:d0:01:58:e9:81:74:90:4b:87:cc:
         17:9a:92:c7:19:24:a9:81:92:87:72:b1:8f:88:48:3e:c9:d3:
         3d:00:88:e8:9a:ff:81:66:2d:a3:c3:1a:df:f0:e0:25:e9:93:
         c6:cd:0a:dd:1a:09:9a:bd:90:b7:43:77:8a:98:cb:ab:8d:1d:
         24:8c:1f:65:15:7b:b8:8d:00:c0:de:6d:22:ca:3a:93:1b:c0:
         8b:79:2b:90:d9:e7:d1:c2:8c:c1:98:48:cd:cf:65:28:43:e8:
         38:1b:f7:1a:15:37:6b:66:e6:93:99:16:ed:9e:a3:69:86:80:
         06:59:20:1a:af:5f:a6:c5:2c:53:a9:88:4a:1b:a3:71:b0:b0:
         26:cd:4c:fd:67:91:58:26:fe:39:73:b6:1b:d1:03:5f:dd:27:
         3a:ca:b3:01:ab:91:a6:85:06:f6:a8:a8:22:af:70:ba:3b:fa:
         30:17:b3:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:21:41 2026 by rpki-client