Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/a0bffdaa-855e-3b5b-bc22-19615208b92b.roa
File:                     a0bffdaa-855e-3b5b-bc22-19615208b92b.roa (raw, json)
Hash identifier:          iR9LFqOB4Z0Aynln4qrrB0oLqiv3jRlW+Ze48we8bV8=
Subject key identifier:   33:27:6C:DB:8D:D6:8C:66:85:89:B9:15:60:C9:24:55:60:91:9E:58
Certificate issuer:       /CN=fd356b15-92b2-4e72-b8d9-fa490480d177
Certificate serial:       010D0C9F4328584D9A2017E5808EB6E7704A4540
Authority key identifier: 1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/a0bffdaa-855e-3b5b-bc22-19615208b92b.roa
Signing time:             Thu 23 Apr 2026 13:00:32 +0000
ROA not before:           Thu 23 Apr 2026 13:00:32 +0000
ROA not after:            Wed 22 Jul 2026 13:00:32 +0000
asID:                     30133
IP address blocks:        2001:500:61::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9a:20:17:e5:80:8e:b6:e7:70:4a:45:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd356b15-92b2-4e72-b8d9-fa490480d177
        Validity
            Not Before: Apr 23 13:00:32 2026 GMT
            Not After : Jul 22 13:00:32 2026 GMT
        Subject: CN=2688fefd-9221-4b0a-ae51-e7a11e5e51d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:20:3b:fe:2d:a4:93:8e:3d:c0:e6:4b:7d:00:
                    78:ab:d3:98:ce:39:a4:97:7b:3a:8e:e7:4e:0b:03:
                    6c:14:e6:e9:41:0d:c6:4e:3f:5b:2f:fe:3b:7f:06:
                    a4:df:61:bd:d4:8c:40:f3:3b:87:83:f4:52:d7:eb:
                    b9:2c:34:12:aa:7b:08:d6:f6:c5:7a:df:17:1f:31:
                    6a:d9:53:fb:53:5a:0a:42:4a:2e:77:1c:32:34:c9:
                    e4:91:f2:4f:8c:e7:71:e9:4b:23:5f:bc:77:a8:e9:
                    68:0e:81:e8:21:aa:47:a0:be:c1:4d:6f:a7:cc:17:
                    d2:9c:39:dc:9a:51:ca:be:05:23:e4:6b:fd:d7:38:
                    a5:2c:cd:a7:1f:7f:da:26:82:54:74:7f:17:c4:56:
                    5b:60:6f:e3:5e:08:29:d0:e3:c3:de:1c:ca:f7:08:
                    b5:c4:c4:19:ec:d9:50:58:22:54:66:89:84:ed:0f:
                    1e:a4:9f:c7:ef:95:4c:4f:3c:bb:32:bc:6d:d8:40:
                    4e:a7:04:42:1f:bc:5a:b5:0e:07:37:88:15:da:f8:
                    92:48:e0:c1:8d:15:84:62:8e:ea:70:2b:9f:07:c5:
                    8a:6f:25:93:93:a6:1d:99:67:3e:38:d8:a5:44:b6:
                    f1:51:9c:97:97:26:08:52:f0:f5:0a:5b:6f:2b:67:
                    e5:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:27:6C:DB:8D:D6:8C:66:85:89:B9:15:60:C9:24:55:60:91:9E:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/a0bffdaa-855e-3b5b-bc22-19615208b92b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl

            X509v3 Authority Key Identifier:
                keyid:1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:61::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:24:d9:59:5e:12:42:f6:ec:4c:ef:8c:2c:e2:33:16:ef:cc:
         55:46:1b:4f:bc:98:55:7b:42:4e:38:ec:c2:a8:d8:8b:c5:7d:
         f6:6a:ab:c9:eb:f2:c4:b9:16:54:7d:48:1f:21:33:da:1e:86:
         52:54:76:52:7d:2c:a4:c8:23:bc:8c:61:ae:b2:67:15:47:64:
         28:fa:96:67:77:36:5d:f1:d8:e7:d5:42:a1:4f:83:25:ff:25:
         f2:12:04:a2:92:23:eb:6e:f4:68:f2:10:a5:58:34:29:1c:dd:
         40:dd:17:73:bc:43:11:ca:b4:aa:5b:56:bd:2f:e4:23:49:9b:
         9c:1e:e6:00:a3:3b:4a:07:d6:70:3b:14:57:25:15:bd:de:60:
         35:89:36:9b:11:d9:5b:d3:d1:67:e9:dc:d6:7b:ee:70:21:4e:
         b2:0c:e3:fc:45:4f:db:ee:c4:7c:bc:b3:a1:ab:e8:37:39:03:
         3f:6e:ec:42:da:60:e7:a9:2a:65:07:28:50:d4:ad:c2:85:70:
         9c:64:af:60:db:c0:03:e9:51:b6:62:91:72:93:22:97:5e:f6:
         6c:0b:78:63:9a:cb:4a:4c:aa:08:92:8b:8a:a6:2e:dc:bc:5b:
         e9:ce:71:cd:0e:79:14:ee:4c:72:6e:42:ec:61:f4:32:cb:ad:
         b3:c2:af:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:52:06 2026 by rpki-client