Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/07148156-bb61-3692-9745-eb1af2cb4215.roa
File:                     07148156-bb61-3692-9745-eb1af2cb4215.roa (raw, json)
Hash identifier:          oAyg/RjlA11gqpGPc9wkOx3TroS98rmpLkdmLBhfok8=
Subject key identifier:   C6:17:7E:01:05:FE:19:38:52:9D:02:DA:F6:18:3A:04:12:CA:33:60
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584B4081AD4399CE46B184B0ED80
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/07148156-bb61-3692-9745-eb1af2cb4215.roa
Signing time:             Sat 20 Sep 2025 01:00:32 +0000
ROA not before:           Sat 20 Sep 2025 01:00:32 +0000
ROA not after:            Fri 19 Dec 2025 02:00:32 +0000
asID:                     11955
IP address blocks:        2603:9014::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:40:81:ad:43:99:ce:46:b1:84:b0:ed:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Sep 20 01:00:32 2025 GMT
            Not After : Dec 19 02:00:32 2025 GMT
        Subject: CN=a0668b6f-d5f6-4ddd-83af-71d90fac859e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:28:01:2c:30:19:ed:4b:b8:61:9a:c4:19:79:
                    d4:9a:5e:c9:27:9e:22:be:d7:4e:fe:69:97:d0:85:
                    90:85:9f:02:a2:41:79:d7:49:45:39:72:08:42:52:
                    9c:af:b2:80:2b:c8:fa:b1:d7:63:69:df:bf:1a:f8:
                    66:f4:eb:dd:fd:c7:44:d7:f1:6f:34:18:cd:e7:c4:
                    a8:fb:62:da:15:61:2e:c3:1c:79:6b:8b:92:96:8c:
                    17:25:f0:8d:f5:0f:25:2e:bf:ea:b1:56:1e:b9:0b:
                    5b:bb:d9:76:5f:8b:9f:2f:5b:94:ac:e0:94:9f:46:
                    a7:13:a8:60:29:b9:00:49:a8:4b:1b:de:7e:97:d4:
                    62:6c:be:91:36:c4:37:54:49:fc:27:e2:91:a5:92:
                    dd:63:b3:43:2b:38:38:1d:83:00:bf:16:87:35:7f:
                    e4:fc:cd:7f:aa:d4:c9:e0:df:c3:4c:48:59:ad:81:
                    b6:9e:0d:ec:14:71:ac:dc:48:2d:7f:8f:d5:ab:31:
                    f0:cd:cb:1b:d3:e5:5c:96:80:fd:53:0e:73:6e:fe:
                    cf:4e:5f:09:c5:3f:37:07:63:de:53:a3:71:29:ef:
                    ff:21:32:eb:02:c6:71:25:15:4f:b9:3f:16:ac:a2:
                    b5:59:58:b9:4c:7e:6b:a9:2e:f4:87:45:80:b7:fc:
                    e0:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:17:7E:01:05:FE:19:38:52:9D:02:DA:F6:18:3A:04:12:CA:33:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/07148156-bb61-3692-9745-eb1af2cb4215.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:9014::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:6d:2c:06:29:92:e2:9b:89:ef:a7:1a:e0:f2:de:59:3c:1d:
         dc:b9:1b:6a:8e:4a:32:98:fe:56:a7:4e:af:5f:fd:d3:e2:46:
         b9:06:9f:31:cd:01:44:4e:93:17:16:5c:f7:ef:77:9d:05:cc:
         42:fd:06:29:85:d4:42:a5:b0:8e:0a:fb:25:19:ac:91:5a:0f:
         0a:70:5d:3d:53:bd:4a:04:22:ed:fd:c5:00:8f:7b:86:06:e7:
         cf:66:e8:13:86:cf:a3:6d:a7:65:68:63:97:26:89:42:f7:a7:
         43:58:39:63:ad:08:25:fe:53:3f:a3:84:f4:96:ae:c7:65:ab:
         d6:a1:74:f5:f8:87:e7:ba:a5:93:c8:19:e7:86:1b:9e:ac:43:
         3e:6e:4c:88:0d:03:d3:65:c1:c4:45:46:f9:69:62:fc:ae:77:
         47:15:30:f4:6b:3f:0c:27:e4:ae:95:57:cd:4d:fb:0e:82:c3:
         8f:d3:85:1b:05:d5:be:68:4c:5a:2e:61:25:c9:53:94:cd:8e:
         c5:0b:11:57:8a:38:09:91:43:2c:d4:0d:3a:2e:a9:f6:34:c3:
         37:27:23:f1:0e:1a:61:3f:dc:89:51:07:6c:86:9f:13:0a:1c:
         09:45:9f:77:a1:15:0d:03:55:bf:82:3f:f8:08:1c:ea:f4:6e:
         c5:5f:34:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:44:45 2025 by rpki-client