Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/28d9a954-6de6-3037-9560-f9bac3e99c3d.roa
File:                     28d9a954-6de6-3037-9560-f9bac3e99c3d.roa (raw, json)
Hash identifier:          9IjGJXwI0ocTzj6pTHLFFQlSwQHpsrtakcHqgjNIMHg=
Subject key identifier:   A2:D8:C6:5F:B0:D9:65:4E:E8:25:3E:78:C4:8F:37:42:55:80:CC:B8
Certificate issuer:       /CN=fd356b15-92b2-4e72-b8d9-fa490480d177
Certificate serial:       010D0C9F4328584E376466FEBDCE28A0D635E880
Authority key identifier: 1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/28d9a954-6de6-3037-9560-f9bac3e99c3d.roa
Signing time:             Thu 18 Jun 2026 21:00:12 +0000
ROA not before:           Thu 18 Jun 2026 21:00:12 +0000
ROA not after:            Wed 16 Sep 2026 21:00:12 +0000
asID:                     30133
IP address blocks:        2001:500:65::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 02 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:37:64:66:fe:bd:ce:28:a0:d6:35:e8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd356b15-92b2-4e72-b8d9-fa490480d177
        Validity
            Not Before: Jun 18 21:00:12 2026 GMT
            Not After : Sep 16 21:00:12 2026 GMT
        Subject: CN=2ad1b072-0527-4744-9aac-248c5eca84a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:43:0e:49:6c:76:e3:89:e5:39:d7:50:85:38:
                    a6:78:0f:70:ca:e9:9c:85:f1:a4:91:0d:1f:42:10:
                    69:13:cd:73:07:a9:9e:07:f8:42:e2:90:26:ee:79:
                    98:bb:b4:63:87:f0:72:d2:b6:85:8e:aa:39:17:69:
                    fa:93:49:ba:9e:6e:77:80:34:b2:f5:a3:2a:68:8f:
                    c5:4b:61:f5:bb:b4:23:26:d3:74:6a:35:72:21:44:
                    f5:ef:14:d0:c0:c3:22:61:bf:ae:a6:92:2e:cc:c5:
                    66:cc:f0:23:13:0f:45:c8:0d:7a:78:f8:74:c5:6e:
                    5d:b2:b2:54:0d:d4:54:37:98:e0:cc:1e:ea:63:e3:
                    fc:20:4f:3d:79:ab:78:e2:a7:76:6b:20:0f:b9:f5:
                    ab:c7:cb:d9:44:3b:17:8a:6a:8c:ff:6f:b9:dc:a9:
                    78:c3:90:23:78:3f:1c:cd:28:23:a9:54:17:49:4d:
                    d6:23:25:91:cd:1b:18:ed:f6:6e:7f:00:f1:6a:33:
                    42:ad:61:ef:e7:f6:a3:66:90:8c:27:23:39:25:24:
                    17:04:8c:64:4b:ca:07:fa:13:d2:50:c8:5c:6c:d9:
                    7c:6c:7b:36:d1:1c:b8:ee:6a:e2:48:7c:a6:a3:19:
                    6c:1c:08:ee:47:b9:dc:18:7b:ab:3d:e5:b6:9f:af:
                    cb:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:D8:C6:5F:B0:D9:65:4E:E8:25:3E:78:C4:8F:37:42:55:80:CC:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/28d9a954-6de6-3037-9560-f9bac3e99c3d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl

            X509v3 Authority Key Identifier:
                keyid:1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:65::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:c2:a3:56:50:13:66:d6:24:65:32:e7:e5:26:78:3a:9c:a5:
         3f:12:04:02:be:97:60:f7:df:9a:65:18:46:48:eb:4e:ad:9e:
         0f:08:c7:6b:7d:0c:e0:f0:d2:00:17:cb:5a:87:b0:81:79:9a:
         33:12:d3:05:94:d4:65:bf:e5:a0:36:ab:40:c8:5e:74:7f:a6:
         c6:68:9a:7e:12:95:8a:5b:23:51:a8:53:45:2c:c7:bd:06:06:
         37:f8:9d:3c:2b:1c:b8:0e:96:17:58:74:ba:29:df:60:c0:7a:
         17:58:41:ff:5f:1e:73:29:c8:c7:b7:4f:50:ff:c0:82:b6:4d:
         1a:42:44:ed:a8:15:33:c8:26:16:e6:91:7e:b7:03:89:b7:1e:
         43:03:cc:bb:1e:37:56:df:6d:fc:60:9e:37:83:fd:75:04:d0:
         aa:5c:e4:10:2c:84:4c:56:f0:48:ee:2b:43:a9:b6:82:a0:8a:
         70:7e:6e:7d:77:7f:26:4a:71:6a:ab:b6:54:67:89:69:b0:44:
         0f:1a:42:ee:1c:23:56:c2:be:36:2f:b8:f0:41:ca:7c:8a:0b:
         10:9b:ac:55:b1:f7:b8:d9:2c:1b:08:a0:3a:73:b1:88:10:3f:
         2a:85:d1:eb:1e:d3:14:86:1e:2d:8f:4c:ea:a6:dd:c5:d3:ef:
         de:fc:1a:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 1 05:26:56 2026 by rpki-client