Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fb7a8454-5708-3912-9afb-8b7980557c03.roa
File:                     fb7a8454-5708-3912-9afb-8b7980557c03.roa (raw, json)
Hash identifier:          tiaL9RJQ0xH4goLxAJaU3M0hvRy/moOIAADCouAA0Jg=
Subject key identifier:   6C:D0:75:31:B6:9C:A8:92:3E:AF:36:4B:49:21:AD:4E:1F:EA:A7:5F
Certificate issuer:       /CN=fd356b15-92b2-4e72-b8d9-fa490480d177
Certificate serial:       010D0C9F4328584EEA874F541881E70D440F3130
Authority key identifier: 1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fb7a8454-5708-3912-9afb-8b7980557c03.roa
Signing time:             Sat 22 Aug 2026 01:00:12 +0000
ROA not before:           Sat 22 Aug 2026 01:00:12 +0000
ROA not after:            Fri 20 Nov 2026 02:00:12 +0000
asID:                     30133
IP address blocks:        2001:500:73::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ea:87:4f:54:18:81:e7:0d:44:0f:31:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd356b15-92b2-4e72-b8d9-fa490480d177
        Validity
            Not Before: Aug 22 01:00:12 2026 GMT
            Not After : Nov 20 02:00:12 2026 GMT
        Subject: CN=a12c5f82-f142-45a0-976b-398f17b6cac4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:dc:c9:9e:b7:26:1b:a4:0e:b7:e1:3a:9a:bd:
                    fc:46:56:1f:60:e3:6c:77:f0:cc:10:b6:bf:05:50:
                    75:6e:1d:bb:6e:f9:3c:6f:3a:41:41:0c:2e:d1:b0:
                    13:ed:84:d3:e2:60:bc:51:61:4e:2d:a6:44:4a:6b:
                    e1:e2:b8:c7:fb:7b:08:b3:92:af:cb:2e:a8:db:5b:
                    f0:a4:6e:75:26:4a:48:b5:73:55:6d:90:71:39:91:
                    0a:d9:5a:d5:ee:52:71:dc:a6:ee:06:97:5f:3b:26:
                    3f:36:b8:f6:cc:7b:65:83:3c:78:c1:e1:45:91:01:
                    24:e0:ed:5f:0a:24:c0:8f:11:db:32:83:2b:e1:ad:
                    0a:db:88:1e:73:f8:f5:75:fd:91:35:f1:6b:4b:b5:
                    22:d2:8b:2e:bb:3a:f4:97:b2:c6:7f:a8:fe:16:1d:
                    6f:d9:ab:ef:6e:46:ce:99:f5:93:28:8b:4a:22:d2:
                    98:3d:ae:49:4f:dd:9e:39:55:a8:33:ee:5f:bf:23:
                    7a:e5:7b:bf:bb:49:d6:3a:2f:79:4a:0e:2a:5f:6c:
                    66:ec:4b:45:84:0e:2a:55:ef:f3:38:63:b9:d9:98:
                    34:dd:bf:84:42:91:28:0c:45:c2:bb:da:01:b0:dd:
                    04:b3:ec:59:ea:2d:60:76:d1:f3:c6:1e:91:30:90:
                    eb:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:D0:75:31:B6:9C:A8:92:3E:AF:36:4B:49:21:AD:4E:1F:EA:A7:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fb7a8454-5708-3912-9afb-8b7980557c03.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl

            X509v3 Authority Key Identifier:
                keyid:1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:73::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:3f:1f:0d:bd:63:cb:0f:f7:19:6f:be:0a:74:87:a3:1f:9d:
         87:67:42:b2:7a:5b:07:11:4d:4e:e7:e2:cc:39:52:20:30:da:
         a7:d5:8c:49:86:e6:f3:73:98:44:91:63:8b:bc:0b:af:6f:e6:
         fd:8f:1e:8d:8d:91:e0:a4:1b:2c:b3:9c:79:07:e7:30:f8:84:
         b3:88:9e:b9:7c:fc:9c:4d:da:c9:20:a5:2a:cb:03:72:45:ca:
         11:f1:04:5c:c0:a5:d2:58:0a:40:7f:d3:b0:02:95:6d:85:62:
         bc:20:ea:37:17:54:d2:1d:53:d8:0b:42:2e:c2:18:fd:cf:bf:
         fd:9f:a0:01:7a:a5:a2:b1:07:01:07:70:01:ca:0d:38:bd:45:
         40:b3:ff:87:60:2a:9b:30:a6:f0:69:92:e5:44:6e:fa:66:36:
         60:30:0d:ef:32:d7:11:79:3f:ee:b2:82:6f:fd:4c:ee:3d:4d:
         7f:58:37:9b:df:11:a8:1c:d3:84:73:a3:43:bf:0f:02:c0:f3:
         ad:56:63:20:28:22:df:dc:40:34:f5:90:42:31:cd:91:6d:ec:
         b2:4f:28:40:3a:f0:60:2f:58:0f:7e:58:a0:4e:00:64:60:a0:
         37:47:cd:67:13:2d:4f:3e:46:48:98:9b:b6:1a:bc:67:46:6d:
         03:16:e1:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 21:21:54 2026 by rpki-client