Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/323e4eb5-73e4-3f1d-b613-2b7750199565.roa
File:                     323e4eb5-73e4-3f1d-b613-2b7750199565.roa (raw, json)
Hash identifier:          OoGLIHTu6ipWJ9iIjSZTMjq9oiemxqW7aZA85Lc9800=
Subject key identifier:   B7:FD:8B:B7:85:53:90:77:69:8F:94:9D:76:E1:2A:D8:3D:8B:3E:0A
Certificate issuer:       /CN=fd356b15-92b2-4e72-b8d9-fa490480d177
Certificate serial:       010D0C9F4328584E3A2F2025087D20FD27CFFDB8
Authority key identifier: 1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/323e4eb5-73e4-3f1d-b613-2b7750199565.roa
Signing time:             Fri 19 Jun 2026 21:00:12 +0000
ROA not before:           Fri 19 Jun 2026 21:00:12 +0000
ROA not after:            Thu 17 Sep 2026 21:00:12 +0000
asID:                     30133
IP address blocks:        2001:500:67::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 02 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3a:2f:20:25:08:7d:20:fd:27:cf:fd:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd356b15-92b2-4e72-b8d9-fa490480d177
        Validity
            Not Before: Jun 19 21:00:12 2026 GMT
            Not After : Sep 17 21:00:12 2026 GMT
        Subject: CN=2f24b4ea-096d-4dc6-89a3-9c9ab78cedab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:8e:5c:e6:cc:e1:de:3b:99:0e:98:52:a9:2c:
                    9d:5b:6f:48:6c:df:5f:1d:7a:ce:4a:fc:cb:1d:4a:
                    54:ac:10:32:99:e8:8d:ea:e8:b4:fe:15:0f:3a:03:
                    01:78:ca:04:50:7a:37:12:ed:40:00:32:19:45:77:
                    cc:e8:25:8e:1e:d8:7f:55:45:4c:71:f7:95:ee:c9:
                    51:f0:69:7a:c4:be:1f:6d:c7:0d:32:96:ae:3e:31:
                    a8:87:87:2c:b7:82:af:6b:0d:fe:c1:a0:b4:13:3c:
                    32:88:f2:f7:56:40:24:05:56:a9:87:37:0b:91:09:
                    00:e9:c8:9d:32:8b:f5:c5:9e:a8:6a:09:99:ef:b7:
                    03:24:ec:c9:ad:d9:86:a5:29:e9:38:d1:73:74:b7:
                    a5:10:5c:60:fe:ce:f0:1c:69:fd:09:0a:09:4e:aa:
                    fe:42:c9:f5:86:fe:17:b0:a9:18:e5:3f:d6:77:14:
                    e6:ec:dd:fb:6a:4f:1e:6f:33:63:79:b8:96:6b:28:
                    3b:b3:3c:b2:d1:32:3c:8f:e5:de:6c:c8:a4:b7:56:
                    ca:58:97:ae:dd:15:b7:b2:07:8b:f2:ef:16:51:ba:
                    20:4e:dc:58:a6:9f:7f:82:4a:63:28:3d:62:e5:86:
                    dd:66:79:82:9e:6d:6c:d5:c7:1f:86:8a:0d:b6:3e:
                    cb:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:FD:8B:B7:85:53:90:77:69:8F:94:9D:76:E1:2A:D8:3D:8B:3E:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/323e4eb5-73e4-3f1d-b613-2b7750199565.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl

            X509v3 Authority Key Identifier:
                keyid:1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:67::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:5c:ab:86:62:f6:36:6a:24:0e:25:a4:6d:02:35:ab:3a:34:
         b0:44:11:17:14:c7:03:15:5b:ea:80:bf:a4:5c:57:96:21:fb:
         b6:9f:c0:58:a3:51:88:ad:6d:5c:9b:9e:9f:b9:e3:dd:42:3f:
         23:e0:17:82:c7:fe:dc:e4:a2:bf:2b:01:96:86:5c:c8:f6:15:
         4e:b6:76:f9:ef:fd:35:6b:3a:50:a3:d1:27:a6:1f:37:39:5a:
         ec:04:d3:81:06:84:98:88:cc:d4:51:aa:12:2c:7f:c5:e8:34:
         af:bf:ea:31:7e:20:75:6c:40:58:ac:66:89:a8:c9:c2:72:b8:
         e8:aa:d7:0f:8c:66:e6:8e:c7:24:70:06:bf:85:c4:6f:10:4a:
         a9:40:96:a4:36:49:0e:86:15:c4:0d:1a:a8:10:18:73:95:b5:
         65:3d:8d:9e:84:83:78:69:21:9f:7c:81:f2:7e:cf:be:44:af:
         80:59:a8:3e:6a:6c:bc:7c:ab:95:d4:f0:20:33:cf:21:89:94:
         3f:2d:f7:73:5d:be:1a:52:68:92:b1:b9:04:fd:34:40:5d:64:
         01:05:c6:71:f7:e2:73:c3:9b:6e:1d:b9:24:b1:4c:d2:04:66:
         b9:3f:de:4b:27:6c:79:cd:2b:5b:4b:de:08:ab:84:15:41:08:
         2d:be:02:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 1 05:26:24 2026 by rpki-client