Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/373e5114-6177-369e-a731-f44084ebbd41.roa
File:                     373e5114-6177-369e-a731-f44084ebbd41.roa (raw, json)
Hash identifier:          1hOava0lUhWLnE19hXyr6bJ6rwt/p8cyQdapTTF2wgw=
Subject key identifier:   2D:64:95:1C:F0:C0:6B:9F:9A:7E:94:32:43:16:A4:81:61:53:13:41
Certificate issuer:       /CN=fd356b15-92b2-4e72-b8d9-fa490480d177
Certificate serial:       010D0C9F4328584AF5213111A36138F078A99880
Authority key identifier: 1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/373e5114-6177-369e-a731-f44084ebbd41.roa
Signing time:             Sun 24 Aug 2025 01:00:33 +0000
ROA not before:           Sun 24 Aug 2025 01:00:33 +0000
ROA not after:            Sat 22 Nov 2025 02:00:33 +0000
asID:                     30133
IP address blocks:        2001:4f8::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 11 Sep 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f5:21:31:11:a3:61:38:f0:78:a9:98:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd356b15-92b2-4e72-b8d9-fa490480d177
        Validity
            Not Before: Aug 24 01:00:33 2025 GMT
            Not After : Nov 22 02:00:33 2025 GMT
        Subject: CN=998b5e25-a3e0-410c-991d-70559b9bebd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:95:d0:3f:39:18:e2:cc:a5:93:cb:16:31:b1:
                    7b:03:2c:70:16:1b:f4:81:ca:7d:7e:5d:7f:45:f1:
                    33:f7:a5:6a:f3:2b:f9:eb:75:86:a2:68:76:fc:65:
                    ef:c7:8d:2f:bb:34:3d:37:b6:b3:b5:8b:2a:b4:92:
                    71:5b:93:a9:bc:d8:be:c0:87:7b:18:8a:d8:75:a7:
                    89:80:8f:05:00:84:0d:52:58:c4:d1:64:b6:2f:d9:
                    91:df:49:5f:c2:76:fe:82:be:fb:fd:8a:a0:64:90:
                    a7:49:7d:67:47:1b:f2:1a:bc:03:0a:bd:08:e5:b0:
                    ff:fc:08:36:2f:39:f2:c3:02:60:4e:33:c4:44:56:
                    9c:30:5c:40:78:ad:79:1d:a3:06:01:44:c3:62:f0:
                    b1:e7:35:2c:22:fb:fb:f2:e5:53:ad:32:55:9e:4a:
                    88:81:8f:94:ed:6e:19:db:65:71:d3:a2:9a:df:10:
                    5d:45:da:90:c7:16:21:4d:14:b0:ff:85:0d:d2:33:
                    26:e1:88:a0:53:69:fa:05:ca:5c:dd:a9:db:b1:6a:
                    17:5c:46:2e:20:61:5e:54:a7:e6:3e:88:76:8a:08:
                    af:be:59:13:38:2b:a0:c9:4d:f8:97:35:8a:b0:92:
                    df:d2:fe:35:c8:64:38:6a:3b:12:b2:ea:7c:e7:71:
                    e7:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:64:95:1C:F0:C0:6B:9F:9A:7E:94:32:43:16:A4:81:61:53:13:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/373e5114-6177-369e-a731-f44084ebbd41.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl

            X509v3 Authority Key Identifier:
                keyid:1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4f8::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:a3:b0:97:3e:91:a1:1f:ac:12:c7:04:88:f7:a4:6a:8a:5f:
         e0:77:c0:68:ed:01:59:12:15:33:af:96:1d:47:39:92:d0:01:
         c7:21:e0:c5:a9:82:60:cd:8b:34:7a:0c:a5:ae:17:1f:e9:84:
         1a:3e:8e:68:20:7d:ce:01:df:43:1d:d2:83:ba:26:6e:04:26:
         ca:fb:c5:0b:7e:04:dc:2c:40:22:ec:1e:fe:9e:d9:d1:1d:80:
         90:24:aa:33:b6:5a:9b:ec:62:8b:48:a6:62:22:dd:69:a8:3b:
         e0:87:bb:0c:ed:1e:af:a6:be:7b:d0:9d:fe:29:0b:83:4c:00:
         e3:45:f8:5e:8c:d2:ed:ed:79:5e:26:d5:36:75:46:e3:d3:55:
         9e:fa:68:eb:79:19:3d:00:30:e3:c3:fd:42:6e:9b:f1:f9:5a:
         4c:13:a4:ad:80:28:75:40:e2:2d:17:60:c5:97:c4:f2:55:1f:
         5d:3a:17:ee:60:da:18:c8:04:7e:43:82:59:f6:f0:e7:89:4e:
         d2:d2:d0:b0:10:ba:05:bc:88:77:f7:67:f5:11:b9:64:51:f7:
         7d:8e:d2:73:4a:b4:43:76:b6:22:87:ee:97:d2:b5:05:d0:0a:
         ba:fc:9e:fc:db:bb:b9:3d:f8:2b:f0:6b:ff:ae:3d:d8:1e:07:
         ac:36:70:49
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEr1ITERo2E48HipmIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmQzNTZiMTUtOTJiMi00ZTcyLWI4ZDktZmE0OTA0ODBk
MTc3MB4XDTI1MDgyNDAxMDAzM1oXDTI1MTEyMjAyMDAzM1owLzEtMCsGA1UEAxMk
OTk4YjVlMjUtYTNlMC00MTBjLTk5MWQtNzA1NTliOWJlYmQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5XQPzkY4sylk8sWMbF7AyxwFhv0gcp9fl1/
RfEz96Vq8yv563WGomh2/GXvx40vuzQ9N7aztYsqtJJxW5OpvNi+wId7GIrYdaeJ
gI8FAIQNUljE0WS2L9mR30lfwnb+gr77/YqgZJCnSX1nRxvyGrwDCr0I5bD//Ag2
LznywwJgTjPERFacMFxAeK15HaMGAUTDYvCx5zUsIvv78uVTrTJVnkqIgY+U7W4Z
22Vx06Ka3xBdRdqQxxYhTRSw/4UN0jMm4YigU2n6Bcpc3anbsWoXXEYuIGFeVKfm
Poh2igivvlkTOCugyU34lzWKsJLf0v41yGQ4ajsSsup853HntQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFC1klRzwwGufmn6UMkMWpIFhUxNBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9mZDM1
NmIxNS05MmIyLTRlNzItYjhkOS1mYTQ5MDQ4MGQxNzcvMzczZTUxMTQtNjE3Ny0z
NjllLWE3MzEtZjQ0MDg0ZWJiZDQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZmQzNTZiMTUtOTJiMi00ZTcyLWI4
ZDktZmE0OTA0ODBkMTc3L2ZkMzU2YjE1LTkyYjItNGU3Mi1iOGQ5LWZhNDkwNDgw
ZDE3Ny5jcmwwHwYDVR0jBBgwFoAUH2WrsjwD6KtBARGUGEBfF5fCAiUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9mZDM1NmIxNS05MmIyLTRlNzItYjhkOS1mYTQ5
MDQ4MGQxNzcuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAIAEE+DBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAYo7CXPpGhH6wSxwSI96Rqil/gd8Bo7QFZEhUzr5YdRzmS0AHHIeDF
qYJgzYs0egylrhcf6YQaPo5oIH3OAd9DHdKDuiZuBCbK+8ULfgTcLEAi7B7+ntnR
HYCQJKoztlqb7GKLSKZiIt1pqDvgh7sM7R6vpr570J3+KQuDTADjRfhejNLt7Xle
JtU2dUbj01We+mjreRk9ADDjw/1Cbpvx+VpME6StgCh1QOItF2DFl8TyVR9dOhfu
YNoYyAR+Q4JZ9vDniU7S0tCwELoFvIh392f1EblkUfd9jtJzSrRDdrYih+6X0rUF
0Aq6/J7827u5Pfgr8Gv/rj3YHgesNnBJ
-----END CERTIFICATE-----
Generated at Tue Sep 9 21:38:44 2025 by rpki-client