Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/3f820480-a79c-33e4-9bf0-e82ff8d04c83.roa
File:                     3f820480-a79c-33e4-9bf0-e82ff8d04c83.roa (raw, json)
Hash identifier:          ADWekV3v+1LL6SAIk0CAaMHq9R/Muj511SWGlu1RLFE=
Subject key identifier:   23:50:76:97:07:BE:E0:B2:44:6F:A6:BD:CF:11:16:15:54:BF:3D:9A
Certificate issuer:       /CN=fd356b15-92b2-4e72-b8d9-fa490480d177
Certificate serial:       010D0C9F4328584D9A2017F27D3190781F00648C
Authority key identifier: 1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/3f820480-a79c-33e4-9bf0-e82ff8d04c83.roa
Signing time:             Thu 23 Apr 2026 13:00:32 +0000
ROA not before:           Thu 23 Apr 2026 13:00:32 +0000
ROA not after:            Wed 22 Jul 2026 13:00:32 +0000
asID:                     30133
IP address blocks:        2001:500:62::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9a:20:17:f2:7d:31:90:78:1f:00:64:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd356b15-92b2-4e72-b8d9-fa490480d177
        Validity
            Not Before: Apr 23 13:00:32 2026 GMT
            Not After : Jul 22 13:00:32 2026 GMT
        Subject: CN=ad0267ee-2dc7-411d-a9ac-a8f9c236cc4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:f8:54:15:03:a0:19:03:c7:b8:c3:c6:f0:d1:
                    aa:03:d8:dd:31:98:05:bc:d6:46:eb:f5:f6:fc:3f:
                    ed:9c:78:1f:11:6c:b6:56:51:70:91:be:a2:7a:cf:
                    4e:06:ef:9c:e3:8b:28:5e:a9:db:d8:16:9f:bf:1a:
                    4a:bc:c5:a8:22:3b:8f:6c:e3:0f:85:67:50:db:52:
                    b4:b3:72:54:e2:c1:92:fb:4a:4c:69:94:0f:4c:0a:
                    ae:ff:9b:82:97:ed:12:56:1a:99:17:dd:89:d8:1f:
                    bf:1e:d5:d0:75:e1:3a:af:bf:7e:11:a1:e6:21:5a:
                    28:97:46:b4:78:98:33:7c:7f:35:ea:e4:aa:80:36:
                    9a:e0:df:e3:ee:4e:23:b1:9b:8a:e5:90:3c:f5:f1:
                    48:3e:ac:56:ec:89:2a:68:78:2e:bc:5b:c4:72:13:
                    92:17:ca:fd:2c:d3:55:04:06:91:65:8b:8d:9b:5b:
                    b6:08:48:45:f3:46:47:62:9f:f7:cf:0c:4f:3b:1b:
                    53:54:06:ba:8c:79:08:5e:60:30:3a:d0:d3:41:d5:
                    37:55:0c:b2:39:6c:6d:b4:2c:6f:f0:16:24:ad:24:
                    fa:0c:79:77:0d:ef:01:39:21:ae:e7:9e:cd:87:f8:
                    3c:69:e4:0d:06:f1:fb:0b:c0:b4:03:7b:78:a2:52:
                    5a:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:50:76:97:07:BE:E0:B2:44:6F:A6:BD:CF:11:16:15:54:BF:3D:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/3f820480-a79c-33e4-9bf0-e82ff8d04c83.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl

            X509v3 Authority Key Identifier:
                keyid:1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:62::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:47:14:53:f7:61:a2:35:c3:ec:b8:cc:e1:6e:74:09:f8:d6:
         f0:49:0a:1c:62:c0:86:86:c6:b8:0c:76:a7:3c:63:45:93:90:
         c6:f4:53:60:51:48:33:c8:72:a1:36:38:47:bd:d9:91:60:f1:
         9c:0f:f9:19:d5:77:39:31:5c:f0:da:db:04:44:66:9d:27:99:
         f2:33:8d:6c:fa:5a:c8:77:2b:be:53:a1:cc:04:ac:bc:e0:b7:
         16:44:c4:29:32:65:4c:57:79:a7:c7:02:2e:fd:6f:4c:4f:af:
         13:6b:a8:59:b6:95:da:08:9f:45:a8:d5:d0:a3:d9:fd:81:c3:
         f7:1f:7a:12:43:c6:8a:f6:96:21:5d:f3:ad:f9:f8:df:fb:d8:
         81:b0:d4:5e:4a:49:4c:d9:94:46:e3:eb:00:9e:8b:10:dc:88:
         1a:e1:75:fb:3e:0c:39:09:5c:30:c0:be:05:22:95:3b:b6:fd:
         29:74:b0:6f:36:5a:d0:98:85:b5:78:0d:1d:61:72:b1:e4:dd:
         13:34:b0:11:dc:64:e5:b2:29:6d:64:79:7a:63:a4:0c:a7:70:
         00:88:44:a8:75:d1:d6:3d:29:9d:8c:dc:45:c6:9e:5e:d5:2a:
         00:c9:06:42:e6:15:17:9c:7a:b4:c6:2b:60:d1:d6:b0:88:57:
         ac:81:f3:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:20:26 2026 by rpki-client