Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/e5634633-ffc6-3650-92fd-82fb376ae8d9.roa
File:                     e5634633-ffc6-3650-92fd-82fb376ae8d9.roa (raw, json)
Hash identifier:          KBFIFfbDvG+Ace7sxxkpLCC2TsvhmpD3WXSPL5xrTp4=
Subject key identifier:   61:C3:2B:2B:28:CD:6C:A1:3D:D5:07:8C:34:A7:9D:14:C1:54:0C:38
Certificate issuer:       /CN=fd356b15-92b2-4e72-b8d9-fa490480d177
Certificate serial:       010D0C9F4328584ED861DE4A5774CA136BE5DC80
Authority key identifier: 1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/e5634633-ffc6-3650-92fd-82fb376ae8d9.roa
Signing time:             Sat 15 Aug 2026 13:00:11 +0000
ROA not before:           Sat 15 Aug 2026 13:00:11 +0000
ROA not after:            Fri 13 Nov 2026 14:00:11 +0000
asID:                     30132
IP address blocks:        2001:500:60::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 16 Aug 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d8:61:de:4a:57:74:ca:13:6b:e5:dc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd356b15-92b2-4e72-b8d9-fa490480d177
        Validity
            Not Before: Aug 15 13:00:11 2026 GMT
            Not After : Nov 13 14:00:11 2026 GMT
        Subject: CN=1437b3a0-5445-4a4b-a352-641c67578bdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:0b:b0:3e:2e:87:b3:d6:7c:dc:14:e8:ab:a0:
                    09:a2:ad:cd:5b:c3:4c:00:9a:27:1b:c7:da:f1:43:
                    ea:28:0f:1a:8a:07:72:d7:36:75:cb:dc:85:15:47:
                    99:43:61:53:ac:d7:54:7f:3f:43:88:74:e6:a6:eb:
                    16:d7:96:2a:4a:ed:9c:67:bd:83:ac:63:16:6c:a8:
                    10:ac:40:6c:7e:82:4f:b4:d5:15:c8:7a:05:2f:dc:
                    6c:83:ed:ed:05:bf:13:43:e6:5e:44:04:5d:77:e0:
                    2a:f5:48:5b:aa:e5:09:54:28:0a:61:ea:84:71:b7:
                    8b:ba:50:4c:14:4c:b0:f8:bb:dd:b8:1f:09:97:f9:
                    97:52:f0:89:70:b2:62:91:e9:2c:a7:bf:ed:b4:c1:
                    02:c2:a5:84:d4:75:76:3e:26:a6:fc:8f:dc:b8:8f:
                    fd:54:0c:99:6d:37:e5:c6:7b:eb:23:fd:e0:06:93:
                    d8:7a:a4:09:54:ad:63:1a:9e:c3:77:ee:12:71:4a:
                    ca:44:6b:0e:9d:58:c8:c6:52:40:eb:e0:c1:46:96:
                    33:86:46:48:f9:c3:59:b2:ad:35:70:0c:f0:27:da:
                    c9:96:9d:81:e9:a7:6a:2f:d7:09:22:aa:3c:45:62:
                    f3:26:70:cd:21:0a:7e:43:f0:4f:29:29:9e:dc:e4:
                    47:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:C3:2B:2B:28:CD:6C:A1:3D:D5:07:8C:34:A7:9D:14:C1:54:0C:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/e5634633-ffc6-3650-92fd-82fb376ae8d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl

            X509v3 Authority Key Identifier:
                keyid:1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:60::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:c3:e1:8f:a0:87:7b:1d:53:8a:85:b5:86:31:34:4a:c3:b7:
         33:1c:eb:bb:09:7d:eb:dd:77:86:88:08:f7:ca:a4:c5:80:d2:
         d1:4b:5a:4b:c3:88:16:66:f8:70:40:d3:0d:1f:bb:fb:6d:ff:
         72:07:98:21:02:4e:e2:19:92:e5:c3:0a:9d:59:95:d6:f7:08:
         31:4e:cb:9a:e0:ea:2b:e9:2a:56:e7:32:73:af:d8:52:38:7c:
         a1:72:0c:08:16:5e:b7:5c:15:28:c9:29:ef:a5:fa:58:ab:7f:
         3d:2b:e3:96:4f:7e:12:4f:0a:3e:44:32:35:09:8e:1d:e6:37:
         81:ab:f7:2a:bb:a1:7a:f9:28:e3:ac:74:f3:37:15:a8:f7:35:
         92:80:5c:f2:33:9b:10:87:6e:c6:2e:04:6c:ab:12:f2:b5:bc:
         f8:34:49:50:8b:17:98:b9:4c:1c:a4:0b:e3:45:1d:8a:0d:f8:
         68:da:21:0f:e3:02:c1:af:59:e3:15:1b:ff:78:95:35:db:a0:
         0d:60:64:e7:ca:df:a0:ea:f7:73:3e:9f:2b:f4:01:73:07:97:
         7b:2d:8d:da:d7:c9:16:3a:34:9d:51:a8:6f:bf:20:6a:c3:bf:
         4c:3c:10:2a:7a:d7:18:bf:26:dc:00:df:2f:ea:ec:f1:7a:99:
         27:4a:a2:b4
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE7YYd5KV3TKE2vl3IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmQzNTZiMTUtOTJiMi00ZTcyLWI4ZDktZmE0OTA0ODBk
MTc3MB4XDTI2MDgxNTEzMDAxMVoXDTI2MTExMzE0MDAxMVowLzEtMCsGA1UEAxMk
MTQzN2IzYTAtNTQ0NS00YTRiLWEzNTItNjQxYzY3NTc4YmRmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1AuwPi6Hs9Z83BToq6AJoq3NW8NMAJonG8fa
8UPqKA8aigdy1zZ1y9yFFUeZQ2FTrNdUfz9DiHTmpusW15YqSu2cZ72DrGMWbKgQ
rEBsfoJPtNUVyHoFL9xsg+3tBb8TQ+ZeRARdd+Aq9UhbquUJVCgKYeqEcbeLulBM
FEyw+LvduB8Jl/mXUvCJcLJikeksp7/ttMECwqWE1HV2Piam/I/cuI/9VAyZbTfl
xnvrI/3gBpPYeqQJVK1jGp7Dd+4ScUrKRGsOnVjIxlJA6+DBRpYzhkZI+cNZsq01
cAzwJ9rJlp2B6adqL9cJIqo8RWLzJnDNIQp+Q/BPKSme3ORHIwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFGHDKysozWyhPdUHjDSnnRTBVAw4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9mZDM1
NmIxNS05MmIyLTRlNzItYjhkOS1mYTQ5MDQ4MGQxNzcvZTU2MzQ2MzMtZmZjNi0z
NjUwLTkyZmQtODJmYjM3NmFlOGQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZmQzNTZiMTUtOTJiMi00ZTcyLWI4
ZDktZmE0OTA0ODBkMTc3L2ZkMzU2YjE1LTkyYjItNGU3Mi1iOGQ5LWZhNDkwNDgw
ZDE3Ny5jcmwwHwYDVR0jBBgwFoAUH2WrsjwD6KtBARGUGEBfF5fCAiUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9mZDM1NmIxNS05MmIyLTRlNzItYjhkOS1mYTQ5
MDQ4MGQxNzcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAABg
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAArD4Y+gh3sdU4qFtYYxNErDtzMc67sJfevdd4aICPfKpMWA0tFL
WkvDiBZm+HBA0w0fu/tt/3IHmCECTuIZkuXDCp1Zldb3CDFOy5rg6ivpKlbnMnOv
2FI4fKFyDAgWXrdcFSjJKe+l+lirfz0r45ZPfhJPCj5EMjUJjh3mN4Gr9yq7oXr5
KOOsdPM3Faj3NZKAXPIzmxCHbsYuBGyrEvK1vPg0SVCLF5i5TBykC+NFHYoN+Gja
IQ/jAsGvWeMVG/94lTXboA1gZOfK36Dq93M+nyv0AXMHl3stjdrXyRY6NJ1RqG+/
IGrDv0w8ECp61xi/JtwA3y/q7PF6mSdKorQ=
-----END CERTIFICATE-----
Generated at Sat Aug 15 18:12:47 2026 by rpki-client