Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/e9645e25-dce1-330a-8418-468ee226506d.roa
File:                     e9645e25-dce1-330a-8418-468ee226506d.roa (raw, json)
Hash identifier:          47cNXsUE6DdKdrvTXGiMhYCGt+2j6F/40AHOufPQClw=
Subject key identifier:   D1:74:8B:36:B2:5B:D3:4F:5C:ED:B7:AD:ED:8F:BF:9C:DB:28:17:A4
Certificate issuer:       /CN=fd356b15-92b2-4e72-b8d9-fa490480d177
Certificate serial:       010D0C9F4328584B970CDABC75E0CA8CB19A1A80
Authority key identifier: 1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/e9645e25-dce1-330a-8418-468ee226506d.roa
Signing time:             Tue 21 Oct 2025 01:00:31 +0000
ROA not before:           Tue 21 Oct 2025 01:00:31 +0000
ROA not after:            Mon 19 Jan 2026 02:00:31 +0000
asID:                     30133
IP address blocks:        2001:500:72::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:97:0c:da:bc:75:e0:ca:8c:b1:9a:1a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd356b15-92b2-4e72-b8d9-fa490480d177
        Validity
            Not Before: Oct 21 01:00:31 2025 GMT
            Not After : Jan 19 02:00:31 2026 GMT
        Subject: CN=d622ae57-27ad-4d55-9cf0-5dfc12605ffd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:6f:ce:24:ca:e8:2a:30:b8:b2:9a:a3:23:66:
                    03:cf:e7:9f:47:56:2a:0d:32:19:a2:84:7d:2e:93:
                    00:d9:c5:af:e3:a3:1c:94:60:d1:c9:b5:ba:88:cd:
                    ce:21:26:8c:1c:fb:0f:7e:0b:5d:eb:29:6a:05:3c:
                    5d:65:f2:4f:df:d6:62:e0:db:20:d3:d9:14:67:81:
                    c0:58:0a:41:30:61:65:5e:74:c2:1d:ca:e5:e8:f6:
                    84:5b:af:4c:3a:a0:ae:c9:d1:e9:dc:a4:38:e4:ae:
                    61:41:3a:94:99:e4:36:ee:82:bf:ac:58:51:78:44:
                    14:f1:78:e8:af:c4:f5:d4:31:14:28:f1:dd:4e:05:
                    f4:ce:c2:95:a5:a8:96:ed:80:9e:7e:79:e0:aa:96:
                    79:9f:02:2b:92:1f:17:d4:7e:39:24:6d:48:b6:b4:
                    ed:49:ee:8b:00:a8:1c:b6:16:99:02:fa:9b:1f:27:
                    a6:a4:40:28:f5:eb:37:7c:3a:79:8c:f6:3c:07:65:
                    95:66:29:17:9f:d8:7d:b7:31:99:20:d4:f5:99:b2:
                    5b:00:79:02:b6:c2:b5:0f:77:ea:e5:77:a5:20:89:
                    0d:ed:82:32:40:28:ff:90:52:7d:19:e0:6c:a2:25:
                    33:2d:fc:ad:d3:ea:b3:9e:20:87:22:0f:89:93:cb:
                    26:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:74:8B:36:B2:5B:D3:4F:5C:ED:B7:AD:ED:8F:BF:9C:DB:28:17:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/e9645e25-dce1-330a-8418-468ee226506d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl

            X509v3 Authority Key Identifier:
                keyid:1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:72::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:13:a9:03:bd:25:0a:50:57:53:be:7e:6b:ee:63:0b:4c:45:
         a0:3a:92:a6:ab:68:b4:2d:d8:74:ba:22:6d:f6:81:eb:f9:29:
         57:73:ba:0b:77:b2:78:f0:2f:2f:a0:7f:38:56:4c:77:b6:f0:
         3b:f2:09:99:24:57:38:3e:6c:80:91:89:40:82:88:32:a0:d0:
         ca:41:ed:3f:84:6e:42:38:49:f6:94:f6:4b:78:a1:f8:f4:66:
         ae:9c:c5:d6:39:6c:fe:be:70:35:f0:be:45:07:88:8c:2c:db:
         59:90:93:e6:5e:4b:0e:66:0c:32:6f:84:a5:82:85:3f:4b:1e:
         c9:f1:f4:67:bb:3c:a8:2c:87:69:45:19:7c:27:19:d4:1e:c6:
         3c:28:8e:6c:b3:ea:40:42:96:83:ed:73:b5:1d:a1:9e:b7:1f:
         02:3a:96:5c:92:55:5c:8a:8c:6b:d9:4f:48:00:7a:ce:88:8c:
         a1:2c:2c:de:87:38:71:2a:94:a7:a5:b8:d0:db:da:c1:95:35:
         72:11:e9:7a:d5:e9:c6:35:51:5c:8a:49:fb:3a:69:36:5e:62:
         41:19:5d:ec:d7:3c:2c:9e:9f:eb:d5:99:26:c7:f1:01:86:8e:
         88:05:1b:86:9f:b9:e6:3a:b1:84:73:e0:c7:10:83:fe:54:51:
         1c:3a:a4:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 13:39:19 2025 by rpki-client