Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/044f446c-dc4d-3902-985c-fb205bc421ce.roa
File:                     044f446c-dc4d-3902-985c-fb205bc421ce.roa (raw, json)
Hash identifier:          IINp9tOvHv9pdHBvJcNSPcXmICcIzirz8lAw42lLhl8=
Subject key identifier:   03:EA:68:38:43:4B:20:94:CF:C8:B9:3F:9D:5E:C8:40:80:7A:77:13
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584B7F522C841BFA716B6F4FB480
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/044f446c-dc4d-3902-985c-fb205bc421ce.roa
Signing time:             Sun 12 Oct 2025 13:00:37 +0000
ROA not before:           Sun 12 Oct 2025 13:00:37 +0000
ROA not after:            Sat 10 Jan 2026 14:00:37 +0000
asID:                     33363
IP address blocks:        2605:a401:83c5::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7f:52:2c:84:1b:fa:71:6b:6f:4f:b4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Oct 12 13:00:37 2025 GMT
            Not After : Jan 10 14:00:37 2026 GMT
        Subject: CN=fed5736c-5187-45d5-839e-041bb290844d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:95:5a:4a:e1:7c:07:a2:5f:03:29:42:93:2d:
                    41:12:f3:96:41:9f:78:23:5c:b0:9d:3a:1e:a4:5e:
                    e0:35:8a:bb:fd:d0:53:c1:b8:14:a3:57:ba:2a:7b:
                    3d:2f:05:15:ff:3e:23:af:17:78:1e:32:f8:a5:79:
                    38:07:2f:49:d3:70:c4:76:4b:f5:d3:79:47:55:7b:
                    17:12:27:17:a7:bd:e4:8b:d5:fe:40:0f:a1:71:19:
                    a7:16:0f:cd:45:4b:23:46:f7:94:fd:f3:d8:51:e5:
                    ee:7a:02:01:45:58:c8:35:2f:43:1c:20:ad:bb:b7:
                    f0:b8:3f:5d:95:c0:aa:e0:6f:47:a6:a4:67:58:13:
                    c1:cd:12:9c:a5:81:3a:b1:3a:b6:71:ca:e9:f8:3e:
                    c3:0a:cb:06:89:d9:5b:52:ce:45:4d:08:21:53:33:
                    5a:78:7c:4b:ae:19:b3:be:4b:a0:ff:52:a6:5f:dc:
                    27:55:d4:ca:84:d8:b7:28:24:10:41:a6:17:05:44:
                    05:ed:bf:bb:f7:18:79:64:00:a6:e0:02:30:fa:f3:
                    32:1f:dd:3c:e8:d9:87:7f:54:e9:4a:31:c4:b4:c2:
                    4c:9c:47:26:f5:a4:f6:2b:e0:1e:fe:1c:4b:0d:ca:
                    4f:d9:dd:ff:c7:42:8e:66:ce:04:dc:1e:bd:c7:7b:
                    c1:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:EA:68:38:43:4B:20:94:CF:C8:B9:3F:9D:5E:C8:40:80:7A:77:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/044f446c-dc4d-3902-985c-fb205bc421ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:83c5::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:e3:37:1c:4d:32:6e:88:c3:01:de:6b:ca:bc:3e:d0:8c:86:
         98:9b:75:2c:ce:26:c9:7a:02:30:e2:c0:79:d0:33:4c:31:76:
         30:32:d9:3e:6d:59:af:c3:f8:e3:56:e2:ba:a7:db:9a:9a:86:
         ec:8a:52:e2:a9:18:f7:98:20:ee:d2:0e:ed:97:38:e7:3e:ab:
         a9:ba:f6:49:0c:ef:fb:27:29:3e:34:61:78:74:58:df:67:de:
         4d:85:a9:53:57:0e:f0:60:81:f4:3a:ba:09:9e:61:57:e9:cd:
         af:67:6a:18:96:1b:b1:55:c1:e1:34:12:c0:d5:94:02:81:76:
         f7:55:61:c7:89:97:86:f1:76:fa:7d:61:bc:0a:d0:87:c4:24:
         69:3a:76:4a:35:c1:92:9e:fe:35:f8:97:92:78:31:66:43:79:
         a1:d5:cd:7e:c7:d1:65:49:b6:3e:f4:6c:95:38:f0:5c:e5:db:
         ee:8a:64:d2:69:58:ea:fa:0d:7c:9f:11:39:29:9f:e2:75:e5:
         ae:52:2b:e0:48:5b:21:9f:be:79:f7:b0:c1:0c:3c:37:06:43:
         c3:b5:20:ad:23:6a:6d:b2:26:5e:48:ac:01:ad:d0:12:24:67:
         86:38:32:f3:66:87:2f:95:64:fd:79:f3:94:10:83:f9:4a:38:
         08:c0:15:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:16:03 2025 by rpki-client