Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/3a446b26-88b5-3f37-8af4-df28e4d0dded.roa
File:                     3a446b26-88b5-3f37-8af4-df28e4d0dded.roa (raw, json)
Hash identifier:          rB9QXLecFKDsHSLv+zdE2IXYyERP9YqN9Wl9rczYhXM=
Subject key identifier:   44:BE:EB:F1:87:36:30:31:03:48:EF:79:4E:59:33:D3:9B:F2:87:38
Certificate issuer:       /CN=fd356b15-92b2-4e72-b8d9-fa490480d177
Certificate serial:       010D0C9F4328584E35FF107DC7B93823FBBD0B00
Authority key identifier: 1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/3a446b26-88b5-3f37-8af4-df28e4d0dded.roa
Signing time:             Thu 18 Jun 2026 09:00:12 +0000
ROA not before:           Thu 18 Jun 2026 09:00:12 +0000
ROA not after:            Wed 16 Sep 2026 09:00:12 +0000
asID:                     53459
IP address blocks:        2001:500:85::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 02 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:35:ff:10:7d:c7:b9:38:23:fb:bd:0b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd356b15-92b2-4e72-b8d9-fa490480d177
        Validity
            Not Before: Jun 18 09:00:12 2026 GMT
            Not After : Sep 16 09:00:12 2026 GMT
        Subject: CN=4140c9a8-eb33-42f9-af96-8dd16fe773d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:89:61:41:c7:ff:89:d0:51:88:b5:19:a9:7d:
                    42:02:df:0a:fa:e2:03:81:04:14:e2:ef:19:4b:85:
                    27:5d:37:8b:a1:9f:b3:01:84:e4:9d:97:12:39:bb:
                    48:e7:36:97:f4:91:dd:bc:74:3a:56:06:43:ae:72:
                    10:0f:46:be:43:77:a6:35:70:55:6e:46:23:72:91:
                    e5:a6:46:f5:5d:de:bd:b1:68:07:1d:8b:2f:99:0b:
                    e3:cd:2e:20:08:03:33:9e:f9:ca:b0:1b:5c:45:c0:
                    49:79:d0:72:5c:ca:50:e5:0a:5c:a0:27:c3:c6:b2:
                    ed:89:d3:c5:7c:20:0c:40:07:94:e7:64:1a:45:9d:
                    8e:95:a4:09:0f:4c:09:cb:c6:4b:ad:c1:43:f6:a3:
                    08:bb:04:7f:b3:44:e1:3e:95:8e:9a:22:d9:91:41:
                    5b:ec:49:1c:b6:11:ce:0c:75:d5:ee:1a:17:f9:a9:
                    33:1c:4a:a7:14:78:69:1f:08:10:1a:9f:66:18:5e:
                    cd:21:fb:a8:9c:ec:c7:ab:4e:4d:18:1e:62:65:34:
                    c3:77:e0:97:60:d4:4c:69:3b:fd:15:1a:cb:04:84:
                    2d:8c:99:d2:80:9a:7f:b0:9f:92:f4:aa:d0:00:c8:
                    8a:de:87:bc:df:40:9b:13:fa:70:9d:7b:a3:50:6e:
                    f7:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:BE:EB:F1:87:36:30:31:03:48:EF:79:4E:59:33:D3:9B:F2:87:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/3a446b26-88b5-3f37-8af4-df28e4d0dded.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl

            X509v3 Authority Key Identifier:
                keyid:1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:85::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:d2:8d:fa:ae:22:08:6c:e4:4f:70:48:7b:f5:ff:32:54:89:
         78:ee:22:f1:98:52:3d:08:f3:ab:24:73:fc:77:21:dd:3c:11:
         8b:22:06:56:bb:13:7d:00:fd:88:2c:79:a3:bb:d6:c7:a7:9e:
         bc:e1:78:7c:32:95:91:67:fd:44:b4:5d:bb:86:a5:19:9f:50:
         ec:98:8f:f8:1a:48:79:a4:65:80:5f:95:19:72:05:2d:d9:60:
         36:b0:c4:fc:ac:1d:c8:ee:17:f4:08:4e:be:31:fe:0b:9f:49:
         5a:1e:d6:62:fd:7e:0d:6b:c1:dc:62:88:d7:3f:3f:84:76:d1:
         95:f1:c1:b9:45:05:2b:bd:05:ee:9d:08:cf:24:97:9e:45:cc:
         7b:62:25:27:29:00:6b:38:54:2c:9a:fa:49:29:d4:77:e0:d5:
         17:35:8e:51:89:ea:64:0f:6c:6c:b0:d4:96:1b:a6:81:74:24:
         4c:c0:ba:63:8a:ef:a2:0a:cd:d4:d5:38:ed:6a:6d:dd:73:86:
         f0:a9:1f:95:0c:77:a9:72:45:21:c4:93:24:8b:6e:83:7f:0e:
         6e:80:85:dc:37:26:6c:0b:44:c0:cc:60:c1:fb:ea:20:c7:d6:
         0f:54:03:31:98:15:ae:0c:3c:a0:73:27:0c:2c:92:ae:40:79:
         45:bd:d5:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 1 07:28:56 2026 by rpki-client