Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/8d0a6469-5623-394a-a2cb-44b3125943b7.roa
File:                     8d0a6469-5623-394a-a2cb-44b3125943b7.roa (raw, json)
Hash identifier:          /nx/uMg4DWomlPRhFT0ds8+4qd1IRszuLCOZflT098o=
Subject key identifier:   72:77:7C:EC:92:2D:3B:3C:7A:9C:5E:79:6F:26:29:5E:B3:2F:3C:6C
Certificate issuer:       /CN=fd356b15-92b2-4e72-b8d9-fa490480d177
Certificate serial:       010D0C9F4328584B95A78ABBC09850749F4CC100
Authority key identifier: 1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/8d0a6469-5623-394a-a2cb-44b3125943b7.roa
Signing time:             Mon 20 Oct 2025 13:00:38 +0000
ROA not before:           Mon 20 Oct 2025 13:00:38 +0000
ROA not after:            Sun 18 Jan 2026 14:00:38 +0000
asID:                     14618
IP address blocks:        2001:4f8:b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:95:a7:8a:bb:c0:98:50:74:9f:4c:c1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd356b15-92b2-4e72-b8d9-fa490480d177
        Validity
            Not Before: Oct 20 13:00:38 2025 GMT
            Not After : Jan 18 14:00:38 2026 GMT
        Subject: CN=d10648ce-8814-4f79-8f51-a6f2701ee820
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:f8:22:62:4c:55:75:e6:c9:63:2a:1b:ca:c0:
                    c3:9b:21:8f:b2:b7:0d:8e:2a:04:42:78:28:fc:e7:
                    24:8e:70:e1:3a:fb:0b:ae:c8:e9:13:d2:61:9a:60:
                    b4:da:c9:d4:77:ec:42:ab:d3:65:67:57:b5:1c:d8:
                    3c:fd:04:6d:0f:5b:7d:78:95:43:c6:96:3c:5e:6b:
                    9e:b6:ea:ff:9e:7b:61:22:a8:62:36:aa:84:7f:f5:
                    2d:75:61:9c:fc:da:cc:34:05:2e:02:0c:6d:e0:88:
                    9b:21:26:31:c3:84:38:e8:7a:3d:fd:f7:5b:33:7c:
                    76:ba:e1:18:a3:cb:e8:19:2d:67:d9:f0:f2:28:ab:
                    c3:72:9d:e4:23:cd:74:b3:e5:d8:20:c5:9d:e4:b2:
                    76:58:54:b6:61:37:90:d5:c0:74:5d:79:75:85:70:
                    8d:11:37:d9:87:57:88:81:de:f7:61:40:94:6b:68:
                    b5:b0:f6:74:dd:59:a7:7b:4c:f3:5b:7e:e7:6d:34:
                    ef:fd:d0:6d:d3:d5:15:c9:00:2f:53:fc:b5:68:d9:
                    8a:21:2e:64:0a:2d:99:f8:20:a8:1c:3f:7f:5b:2d:
                    44:42:f1:4f:87:76:91:9a:a7:1e:96:b2:2a:6f:bd:
                    f3:17:93:8e:2c:54:0b:2d:60:d0:a5:cf:84:78:c1:
                    65:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:77:7C:EC:92:2D:3B:3C:7A:9C:5E:79:6F:26:29:5E:B3:2F:3C:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/8d0a6469-5623-394a-a2cb-44b3125943b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl

            X509v3 Authority Key Identifier:
                keyid:1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4f8:b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:fd:28:86:0e:d0:23:e0:70:20:e9:16:5c:72:db:2a:25:8b:
         b0:68:17:1a:81:99:13:e2:36:a8:cb:93:93:ce:1c:21:05:44:
         98:1c:93:bc:87:b8:ee:d1:e2:3b:92:da:f3:57:9f:8a:9b:24:
         18:2a:1a:1f:1f:c0:73:61:6d:41:44:60:dc:f8:0c:fd:3f:17:
         df:79:70:68:25:b6:58:34:7b:45:f2:af:80:94:cc:58:03:b4:
         c7:5f:14:c7:64:bc:e5:b3:ba:4c:85:13:3e:94:31:24:fc:44:
         6a:69:14:47:ff:5c:17:5a:74:8c:c6:3e:65:50:0f:70:41:9d:
         a4:63:0b:c3:fb:84:06:2e:f2:de:47:03:16:d0:b4:a8:8f:41:
         e6:ae:0c:be:06:5c:64:1e:a6:5e:46:bb:af:36:7e:cc:63:65:
         28:88:7d:f0:da:20:1c:43:06:bb:f6:37:c4:be:2a:ea:40:a0:
         dd:51:32:34:0e:96:4f:2a:4c:2a:88:da:58:a0:1d:77:5e:27:
         b2:ec:b0:45:3a:c7:11:c5:bd:66:a8:51:e5:75:14:01:39:a6:
         19:ab:40:b8:66:78:e5:98:d3:b4:15:62:d5:65:12:4c:1b:ed:
         e8:0b:c3:30:dd:a6:73:6e:15:40:92:85:81:e4:58:8d:27:b7:
         67:51:cb:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 13:40:14 2025 by rpki-client