Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/0ab3faa6-5749-3a04-8ef6-b4e0ed5d7bbc.roa
File:                     0ab3faa6-5749-3a04-8ef6-b4e0ed5d7bbc.roa (raw, json)
Hash identifier:          /9j06pd3Xx/r4mLxR/KhMMl7oOmK6tkEFBAsbkTiJHA=
Subject key identifier:   FD:9B:D2:0D:67:57:74:69:E1:33:BA:0D:03:ED:2C:50:D6:9F:15:39
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584B7F5251E6E79CAE96A8992380
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/0ab3faa6-5749-3a04-8ef6-b4e0ed5d7bbc.roa
Signing time:             Sun 12 Oct 2025 13:00:37 +0000
ROA not before:           Sun 12 Oct 2025 13:00:37 +0000
ROA not after:            Sat 10 Jan 2026 14:00:37 +0000
asID:                     33363
IP address blocks:        2605:a401:80d5::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7f:52:51:e6:e7:9c:ae:96:a8:99:23:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Oct 12 13:00:37 2025 GMT
            Not After : Jan 10 14:00:37 2026 GMT
        Subject: CN=f6993d77-2f9c-4d14-9c47-05980cddede2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:74:be:12:f0:a5:2e:8a:5a:d2:d1:d9:d5:4f:
                    c5:0e:3d:98:a9:98:f2:a3:28:41:0f:b4:c7:48:e1:
                    7d:11:15:bf:f4:f3:38:ca:bb:c1:c6:d7:86:b2:26:
                    8c:88:1b:91:f6:01:04:a8:bb:91:6c:28:a8:93:a0:
                    a1:ba:fc:3a:33:86:66:91:fd:e0:6d:06:9e:bf:fb:
                    d5:49:3f:ee:aa:bd:3c:23:cb:7d:d5:e1:82:75:82:
                    23:20:28:fc:cc:ca:e3:4a:23:bb:36:e3:1d:54:6c:
                    66:26:c5:44:dd:46:22:b5:1a:6f:cc:25:65:08:09:
                    70:9d:75:13:61:a3:9a:78:2f:02:4a:87:ad:f2:ac:
                    1e:26:20:93:02:b3:30:55:b4:43:ac:fa:6d:56:54:
                    b4:60:f3:a7:82:c2:6b:c6:8f:57:7a:0d:e5:ae:e5:
                    bb:12:b1:f1:31:22:74:25:ce:a5:6b:da:cd:47:e6:
                    81:30:eb:a6:8f:2f:8a:a7:68:b0:0b:30:b0:74:bd:
                    fc:8b:39:ab:09:b0:3e:8a:26:63:66:e1:5e:e4:da:
                    5c:ce:65:35:0d:23:ee:2f:3a:f0:50:d9:66:99:9d:
                    af:b5:29:c3:4b:68:61:1f:d0:63:27:97:ab:92:c0:
                    39:eb:22:81:95:61:f1:ec:23:a0:da:64:5c:6d:ac:
                    a2:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:9B:D2:0D:67:57:74:69:E1:33:BA:0D:03:ED:2C:50:D6:9F:15:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/0ab3faa6-5749-3a04-8ef6-b4e0ed5d7bbc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:80d5::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:44:5c:82:52:98:e2:40:2b:49:15:a6:62:05:dc:47:0f:fa:
         ea:15:2d:fc:13:bb:fc:3d:92:01:12:d8:e6:a5:7a:b1:71:47:
         77:57:18:dc:72:54:25:47:c0:3a:13:4f:64:93:6f:c0:a5:10:
         01:a7:0d:08:67:84:0c:c1:74:ba:c0:5a:13:ca:65:fd:1f:4f:
         83:26:a3:8d:62:98:60:60:f6:0c:03:65:bd:fa:f0:09:2e:98:
         99:34:fa:d4:59:07:4b:5a:97:24:6d:6d:a1:1d:08:d7:ee:9f:
         72:66:33:4c:51:2c:f6:48:be:b5:cd:2b:9e:ce:aa:10:04:50:
         41:0b:29:53:2b:22:4d:26:de:3d:da:79:1f:2f:f3:3c:a8:05:
         8e:2e:31:5b:53:5e:fd:df:b4:ea:dd:26:7a:d9:fd:83:a3:f3:
         28:c5:02:77:3d:e9:aa:0f:3b:a4:0b:fc:55:5c:33:48:08:1a:
         f9:fb:4e:9c:cf:8a:87:56:44:40:64:17:11:b8:08:0c:03:50:
         f4:bd:9e:79:16:db:7c:fe:a8:13:d0:88:9d:a9:74:43:d2:00:
         01:16:ad:25:90:bf:83:88:69:7c:8b:72:73:93:df:0a:76:3c:
         bb:5b:f1:6d:5f:f6:c6:8b:74:f5:c9:5d:58:ec:9f:e8:f6:d1:
         a8:8d:cd:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:15:34 2025 by rpki-client