Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/00647fa6-504d-3502-a211-b7ddcaeff076.roa
File:                     00647fa6-504d-3502-a211-b7ddcaeff076.roa (raw, json)
Hash identifier:          oM341FsD2HhZ4ton3UyrAVTePzzpZDZ7zAuevR9MnwA=
Subject key identifier:   29:BD:02:52:7D:49:DF:69:7F:CD:F5:AE:E1:7C:F3:8F:2C:F1:06:35
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584B7F524EFB519E67FB82881B40
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/00647fa6-504d-3502-a211-b7ddcaeff076.roa
Signing time:             Sun 12 Oct 2025 13:00:37 +0000
ROA not before:           Sun 12 Oct 2025 13:00:37 +0000
ROA not after:            Sat 10 Jan 2026 14:00:37 +0000
asID:                     33363
IP address blocks:        2603:9031:80::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7f:52:4e:fb:51:9e:67:fb:82:88:1b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Oct 12 13:00:37 2025 GMT
            Not After : Jan 10 14:00:37 2026 GMT
        Subject: CN=7a733116-b8c0-49d6-8d4c-2b6445d4e81b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:97:eb:3b:c6:d9:29:1a:c0:0a:b2:cf:ec:62:
                    67:8d:96:d8:d1:96:a5:71:14:c9:67:54:46:3f:f2:
                    24:28:e1:64:c0:8a:2c:c0:0e:47:cf:21:35:dd:85:
                    83:24:79:2f:84:2c:4b:40:73:55:f8:e7:a5:4a:1e:
                    51:43:d5:1f:2f:7e:78:aa:84:d7:86:f2:05:66:88:
                    4f:c8:f9:41:17:0c:d1:75:fd:0e:b7:c9:ea:c2:2f:
                    79:48:87:a9:33:2d:33:ee:39:89:88:ed:51:04:4b:
                    cf:5a:1a:b8:0a:3f:ea:b4:a9:b8:df:e9:d2:27:07:
                    ac:90:3e:3d:c9:ec:03:c4:cc:65:28:62:bb:bc:db:
                    88:f1:fb:88:5b:8a:fd:af:f2:41:d5:a0:30:a7:27:
                    36:c4:0f:03:77:9d:59:4a:7c:a7:d3:00:31:b1:24:
                    96:1e:3d:72:7e:9d:56:7c:60:b3:a0:2d:f9:ef:1a:
                    a0:f6:05:47:80:39:c9:85:c6:2e:69:86:31:a0:56:
                    4b:90:59:b3:37:65:dc:0a:3a:10:89:c7:e6:34:74:
                    15:cf:73:6c:d4:4b:fe:33:02:9d:ce:6d:51:ed:23:
                    a1:6b:af:f1:03:93:d0:2a:25:38:58:3d:c6:72:cd:
                    fe:a3:17:76:3e:7f:27:57:62:0e:66:c3:a2:13:73:
                    5f:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:BD:02:52:7D:49:DF:69:7F:CD:F5:AE:E1:7C:F3:8F:2C:F1:06:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/00647fa6-504d-3502-a211-b7ddcaeff076.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:9031:80::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:50:b4:14:e5:4f:9c:5e:da:ad:36:6e:b1:bf:ad:6c:fc:6c:
         a7:2c:1d:7b:cb:94:30:ea:86:8c:00:28:4c:30:b7:9d:c7:20:
         fc:f1:bd:f3:25:33:34:9d:9b:66:ae:4d:5a:2f:a3:00:ea:d9:
         5f:c9:06:8a:d6:d6:b8:5f:5a:e5:b6:97:34:e3:3f:0a:6d:ca:
         cf:d2:49:72:93:18:b0:87:67:a0:e0:73:09:72:ef:ea:99:7d:
         05:f7:97:e1:03:23:a7:30:01:31:dc:c4:da:df:ea:52:b4:d5:
         64:2d:32:9c:28:91:6d:c6:02:86:0f:c0:f9:d9:0f:99:13:47:
         5e:71:19:c2:38:06:f3:2d:22:26:0e:c1:79:8c:ad:dd:ae:fb:
         e1:a9:ba:51:3e:fc:bb:63:aa:cc:6b:9c:83:4d:e4:11:4f:f5:
         e4:50:c2:44:1b:48:e4:45:cb:ba:10:da:93:a2:0b:42:89:e9:
         01:5d:75:9c:39:0a:d4:37:f6:7c:ec:c5:78:8e:70:b1:71:c5:
         c5:be:8f:9a:5e:ff:88:a6:58:67:cf:be:1a:78:a2:63:78:a6:
         e0:0e:c8:7b:38:77:78:08:17:cd:83:b1:f0:9b:f3:5c:02:bf:
         ed:c3:64:18:33:bf:66:4d:c8:6b:d1:f3:8f:35:e4:7e:d7:f2:
         f7:3a:33:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:15:44 2025 by rpki-client