Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/e9645e25-dce1-330a-8418-468ee226506d.roa
File:                     e9645e25-dce1-330a-8418-468ee226506d.roa (raw, json)
Hash identifier:          rtu1p4SrI34u7SiFlllKEElE5B68Z4rFWoxzX0qIeGE=
Subject key identifier:   C5:D8:47:99:54:B7:8E:8C:D0:07:9F:4F:45:70:8D:17:A1:24:86:7F
Certificate issuer:       /CN=fd356b15-92b2-4e72-b8d9-fa490480d177
Certificate serial:       010D0C9F4328584ED9C748DEF1C31A0EE74CD780
Authority key identifier: 1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/e9645e25-dce1-330a-8418-468ee226506d.roa
Signing time:             Sun 16 Aug 2026 01:00:14 +0000
ROA not before:           Sun 16 Aug 2026 01:00:14 +0000
ROA not after:            Sat 14 Nov 2026 02:00:14 +0000
asID:                     30133
IP address blocks:        2001:500:72::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d9:c7:48:de:f1:c3:1a:0e:e7:4c:d7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd356b15-92b2-4e72-b8d9-fa490480d177
        Validity
            Not Before: Aug 16 01:00:14 2026 GMT
            Not After : Nov 14 02:00:14 2026 GMT
        Subject: CN=122e75b2-886c-4d4d-a04a-a1a1c649edd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:31:02:37:73:db:f5:74:3d:13:09:2a:8e:e7:
                    38:12:38:b0:f9:16:57:3f:c8:8d:a7:3f:67:38:63:
                    dd:02:72:63:10:a3:b7:e4:c3:1c:c7:9e:2d:49:6f:
                    c5:01:cf:39:6e:60:20:c7:d9:64:ce:e7:b5:a6:15:
                    d7:c2:84:46:6b:0e:43:f3:a2:bc:05:b1:98:f3:7a:
                    6a:9e:b4:0e:f1:45:9b:c6:5e:f3:0f:46:bb:10:65:
                    0f:84:c7:92:33:be:40:63:34:40:fb:49:4b:23:08:
                    f5:c8:de:98:0b:32:3d:75:82:4d:ff:9b:b1:cf:bd:
                    44:89:9f:b5:ba:0c:0e:1b:2c:9f:9a:7e:7d:35:80:
                    f8:f9:4e:64:72:16:80:33:38:fe:46:9d:43:27:63:
                    91:6c:c6:aa:36:3f:15:8d:f0:46:ad:bb:b3:de:4d:
                    7f:8e:2c:e8:6c:8f:8f:c9:dd:04:6a:da:30:cd:60:
                    51:ad:a8:75:56:1a:1f:75:3f:7f:cc:fe:6d:fe:09:
                    d5:11:14:5c:f0:0e:67:ef:9c:88:c7:95:fa:5a:33:
                    ad:5f:fe:89:bd:e0:6f:35:da:1a:99:9c:32:02:7d:
                    60:8e:dc:76:b7:7e:ca:70:f5:e1:f6:93:22:f1:b0:
                    95:8f:c2:2e:48:a4:79:61:e5:d5:0d:a9:99:aa:7c:
                    b9:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:D8:47:99:54:B7:8E:8C:D0:07:9F:4F:45:70:8D:17:A1:24:86:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/e9645e25-dce1-330a-8418-468ee226506d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl

            X509v3 Authority Key Identifier:
                keyid:1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:72::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:8d:d9:e8:60:12:47:59:d1:d2:9b:49:0d:ee:18:83:ac:7b:
         9b:2f:7d:65:3d:19:95:46:15:36:36:c0:b9:9b:b9:af:e8:1d:
         40:7a:8e:ca:c9:7b:b6:1c:60:f8:2a:35:60:88:03:03:f9:c0:
         b7:46:cd:d5:df:98:7d:7f:7f:51:ad:a3:98:52:a2:44:e0:3e:
         70:9b:cd:f1:8c:51:cb:b5:38:be:cd:df:be:70:b3:ca:15:78:
         94:45:12:7e:7d:ea:13:7e:e7:bb:78:e4:af:d0:cd:2e:cf:5c:
         e6:4c:cf:ab:2a:93:c1:83:e9:88:bf:52:71:73:96:28:a9:b3:
         ee:8f:b5:67:48:80:a5:5b:6b:7b:14:b5:3e:50:bd:ff:93:e5:
         fd:f4:97:8c:ad:53:16:6f:2b:04:02:86:51:a5:fa:df:3d:d0:
         d7:84:cd:45:8f:b9:99:ef:12:f5:af:9d:67:40:65:39:b9:dd:
         2a:6b:d7:08:dc:94:d4:67:3e:6f:af:fb:70:d6:4e:1a:c3:b9:
         c6:91:c1:ff:2b:f4:b1:68:b3:5d:79:86:d9:3f:8b:e6:8d:98:
         82:08:25:b2:d2:14:91:8d:0c:2d:d2:34:f9:54:64:08:e3:01:
         cf:40:c9:3f:d8:fe:06:25:d7:20:1b:b7:12:f3:7a:2f:99:81:
         f7:48:44:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 21:13:25 2026 by rpki-client