Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/3896e846-51ab-39f6-b6da-f8235e4de3d0.roa
File:                     3896e846-51ab-39f6-b6da-f8235e4de3d0.roa (raw, json)
Hash identifier:          2z68BV5NF+J4UrDUu9FbaqibRcGEXo2gH0AF/LmDEas=
Subject key identifier:   35:1C:04:86:F4:50:94:E9:25:6B:D2:52:27:12:B1:78:7B:A2:E5:15
Certificate issuer:       /CN=fd356b15-92b2-4e72-b8d9-fa490480d177
Certificate serial:       010D0C9F4328584ACE0B97AFEF9B5A512FBAA800
Authority key identifier: 1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/3896e846-51ab-39f6-b6da-f8235e4de3d0.roa
Signing time:             Sun 10 Aug 2025 01:00:32 +0000
ROA not before:           Sun 10 Aug 2025 01:00:32 +0000
ROA not after:            Sat 08 Nov 2025 02:00:32 +0000
asID:                     30133
IP address blocks:        2001:500:6c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ce:0b:97:af:ef:9b:5a:51:2f:ba:a8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd356b15-92b2-4e72-b8d9-fa490480d177
        Validity
            Not Before: Aug 10 01:00:32 2025 GMT
            Not After : Nov  8 02:00:32 2025 GMT
        Subject: CN=d10fb226-3d17-4788-869d-f7222a75c7df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:7f:2e:c7:68:62:fa:80:1f:51:c6:f3:65:f9:
                    27:5f:1b:f7:7d:59:29:97:f5:ed:1b:b5:8a:b9:a1:
                    10:d2:e6:92:a9:49:9d:44:33:bf:0f:af:9b:be:87:
                    b5:47:54:ee:e4:ce:74:ad:97:70:9f:14:84:5d:8f:
                    07:5f:27:10:b5:f8:f1:da:ec:6e:6b:e8:99:0a:43:
                    7b:0b:14:e3:2e:6e:7c:58:af:b0:2f:fd:85:57:fe:
                    cd:f8:80:ec:cb:2c:7a:41:0b:0f:85:04:26:ab:dc:
                    68:ae:14:53:65:56:ed:92:07:91:b0:10:c9:5a:aa:
                    b5:d3:a7:5e:e8:06:c5:9a:22:65:d2:97:92:55:90:
                    c3:ca:2c:5c:50:b4:c3:06:b6:97:bb:74:98:05:55:
                    06:1b:a6:7f:22:32:11:87:54:8a:b4:ef:57:a8:ff:
                    3b:a3:4d:95:52:ff:53:b5:8a:3d:08:f6:db:67:28:
                    42:8e:2f:57:32:bc:cf:54:61:71:79:1e:cb:9e:22:
                    5d:c8:37:d9:3d:46:97:9c:bb:8b:43:0c:22:31:a2:
                    69:ef:17:e1:cc:95:b3:69:ec:a6:ce:56:9b:4f:24:
                    db:eb:4f:4f:d8:cf:7b:35:58:6f:dc:db:87:cc:3b:
                    64:e9:d5:ea:00:51:5d:f0:b6:cd:cb:94:6c:ad:9a:
                    25:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:1C:04:86:F4:50:94:E9:25:6B:D2:52:27:12:B1:78:7B:A2:E5:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/3896e846-51ab-39f6-b6da-f8235e4de3d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl

            X509v3 Authority Key Identifier:
                keyid:1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:6c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:a4:dd:a2:26:9b:64:00:36:f8:5d:53:49:dc:19:83:f1:07:
         db:b4:4e:8d:b8:49:dc:39:d0:8b:a2:76:6c:11:30:02:5d:8d:
         75:9e:90:93:16:0c:0c:9a:6e:57:a6:3d:ae:b8:a6:8f:31:51:
         ad:56:01:48:b1:7e:ed:ca:f5:b2:ce:2c:3f:37:42:3f:8c:a2:
         85:ec:ff:a6:6c:d9:00:e6:ab:32:18:c2:f4:95:f4:45:b0:68:
         d6:89:87:68:ed:af:7a:12:89:77:b0:be:ef:9d:9e:6e:8a:a8:
         65:2e:2b:23:68:2f:2b:53:94:39:c3:0f:ad:f4:0c:ab:be:c2:
         ed:86:d7:78:e8:76:5d:3c:ec:4f:62:93:4c:71:bb:42:4f:7e:
         ed:76:a1:b8:42:b8:5d:75:7c:ad:63:d7:16:b2:43:83:f9:c6:
         80:c2:d9:9a:98:4d:0f:f4:60:d7:3e:d9:92:ec:1b:16:aa:26:
         bd:39:cc:83:72:78:32:4e:bd:f0:10:67:e2:8d:ee:1a:d1:85:
         6c:77:05:a0:1f:ab:a5:4a:fd:09:53:13:26:fc:d6:5b:5c:03:
         64:41:b4:3c:99:04:cf:06:70:ca:e8:db:4d:e1:9b:4c:80:8f:
         71:e3:7d:42:3e:9c:51:b0:da:4d:86:31:ed:64:19:60:91:5b:
         8d:b3:e6:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 06:57:56 2025 by rpki-client