Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/634f7e96-8e18-3f93-a960-b6ee83e1a913.roa
File:                     634f7e96-8e18-3f93-a960-b6ee83e1a913.roa (raw, json)
Hash identifier:          QeASR0uSdOybooeKoT6m+vfwpiVzporjpEOTzfLXT4s=
Subject key identifier:   C0:E4:B4:39:71:0A:63:40:08:B6:C7:15:8F:18:F4:D1:9A:AC:2A:EE
Certificate issuer:       /CN=fd356b15-92b2-4e72-b8d9-fa490480d177
Certificate serial:       010D0C9F43285849D594D3DB1367B50B81B0C680
Authority key identifier: 1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/634f7e96-8e18-3f93-a960-b6ee83e1a913.roa
Signing time:             Tue 13 May 2025 01:00:47 +0000
ROA not before:           Tue 13 May 2025 01:00:47 +0000
ROA not after:            Mon 11 Aug 2025 01:00:47 +0000
asID:                     30133
IP address blocks:        2001:500:7a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d5:94:d3:db:13:67:b5:0b:81:b0:c6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd356b15-92b2-4e72-b8d9-fa490480d177
        Validity
            Not Before: May 13 01:00:47 2025 GMT
            Not After : Aug 11 01:00:47 2025 GMT
        Subject: CN=f142cf92-7f91-4b85-b425-9772925d5a6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:44:0d:9e:32:e6:44:ad:42:56:40:dd:a5:c3:
                    e3:3c:56:4f:3e:06:37:14:aa:5b:8b:19:4c:c0:14:
                    a2:a3:3d:15:15:77:72:96:a2:b0:86:1f:84:12:73:
                    6d:4c:01:fd:b6:54:f5:61:19:cb:b8:66:27:1f:78:
                    52:ab:7c:3b:be:df:2e:12:38:7a:80:f2:b0:34:a1:
                    7a:0b:a5:70:23:c2:77:ee:55:20:e2:73:94:0f:64:
                    de:58:18:5c:dc:0a:c1:da:9c:7f:bd:71:3d:1f:3d:
                    4b:4b:dd:ad:0a:a7:0f:28:13:95:07:57:a9:c7:63:
                    e5:a3:ba:57:9c:73:cc:03:f1:63:ab:cb:ca:75:f3:
                    16:e4:a0:83:55:35:4a:8a:b6:59:2a:b9:0f:45:58:
                    07:88:6e:79:9a:f8:26:83:fa:99:c2:c4:dc:4f:f0:
                    20:dc:2c:74:46:c6:52:4d:e2:71:b9:f4:c1:91:a5:
                    a0:42:e2:b5:13:8f:81:3e:de:8c:64:f8:bb:8d:8d:
                    a8:eb:b2:89:14:09:8f:58:b9:5f:b9:a7:af:94:28:
                    2e:50:17:8c:86:9c:47:1e:fd:3b:f8:72:70:6a:85:
                    b3:8d:dc:10:bf:0b:ed:b6:b4:b0:bc:a5:8b:ba:52:
                    ed:84:0d:26:85:48:7b:ff:cd:ce:11:c8:28:21:f2:
                    23:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:E4:B4:39:71:0A:63:40:08:B6:C7:15:8F:18:F4:D1:9A:AC:2A:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/634f7e96-8e18-3f93-a960-b6ee83e1a913.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl

            X509v3 Authority Key Identifier:
                keyid:1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:7a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:2f:5a:78:7c:25:e8:a6:47:d4:87:04:39:ed:fb:eb:ab:0c:
         fe:0b:d4:9f:8a:da:4c:05:91:1f:a9:ff:f0:39:52:ed:10:db:
         32:4f:1b:0d:fc:fc:a0:fb:b2:b8:4b:82:a2:a6:8d:75:f7:37:
         d4:cf:ef:0d:5d:b1:88:82:3b:3b:ab:d7:f6:1c:e4:ec:dc:7c:
         09:b5:00:73:e3:2a:44:9d:dd:b2:09:e9:cc:8a:27:61:d1:04:
         5a:ef:fb:5e:ff:0b:b3:be:97:d8:5d:97:78:f7:4e:0d:6c:cc:
         14:56:02:07:d2:df:b0:20:8a:e5:0f:1a:a4:71:2a:7d:0b:cc:
         ab:dd:ae:d0:16:e5:c0:e2:1e:39:ee:e8:c6:3f:ca:0d:d7:49:
         ea:1b:29:52:da:4e:e9:e2:bf:40:46:02:07:a7:9f:1d:59:11:
         87:97:69:18:db:27:7c:b2:7f:2e:93:66:8f:f1:9b:b4:d8:56:
         4c:42:22:a2:55:3d:7b:f3:89:36:f7:c4:09:95:c7:29:b6:b4:
         74:35:ff:38:a4:60:fd:e3:4a:1f:88:fa:f5:7a:d0:40:5d:e2:
         dd:27:69:9b:ae:2d:80:9c:92:89:f2:65:bd:3f:66:38:bb:0a:
         d6:d4:45:b2:1a:88:94:ed:f2:12:ed:03:a9:7b:fd:14:37:ed:
         cf:a5:03:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 15:58:46 2025 by rpki-client