Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/0eece25a-e3fa-3a83-981b-a18d4429a8ce.roa
File:                     0eece25a-e3fa-3a83-981b-a18d4429a8ce.roa (raw, json)
Hash identifier:          ynza0B6X+TxAAXHbI+RMbQcWRG1A3GvvLRqWduHB39s=
Subject key identifier:   C1:FE:19:86:65:37:39:3C:BD:4F:7C:D5:3D:E1:41:92:DD:5D:83:79
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584B7F524BE09CAAEB62C9D61380
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/0eece25a-e3fa-3a83-981b-a18d4429a8ce.roa
Signing time:             Sun 12 Oct 2025 13:00:37 +0000
ROA not before:           Sun 12 Oct 2025 13:00:37 +0000
ROA not after:            Sat 10 Jan 2026 14:00:37 +0000
asID:                     33363
IP address blocks:        2603:9000::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7f:52:4b:e0:9c:aa:eb:62:c9:d6:13:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Oct 12 13:00:37 2025 GMT
            Not After : Jan 10 14:00:37 2026 GMT
        Subject: CN=e8160b1d-f208-49ad-a712-ede9e01bd6f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:a9:24:f8:f0:33:30:85:22:03:8f:e5:77:f6:
                    f2:7f:82:4c:8f:61:e1:80:a4:a5:76:1e:b2:61:53:
                    91:46:3b:46:76:02:be:b4:18:81:c3:82:05:d3:42:
                    ae:46:60:ef:13:07:55:4d:8e:72:21:cb:0f:23:a5:
                    59:61:8c:e2:ba:f4:0b:64:8f:8f:61:6d:95:d0:27:
                    8a:28:63:7a:2f:82:13:72:45:59:0f:09:78:7f:f1:
                    43:0d:8c:f3:90:47:24:34:63:d5:43:f4:d0:76:6d:
                    47:c2:7c:0b:0b:a5:fa:f2:8f:28:55:2f:45:1d:34:
                    0d:47:2c:8f:6e:4f:57:93:22:05:29:e9:e9:29:c2:
                    c5:c6:97:22:01:87:fc:cd:85:e3:d1:5e:68:7d:38:
                    53:50:31:3c:ff:7a:65:be:a5:42:8c:46:3f:ad:f7:
                    68:81:f0:4c:3c:70:da:80:b7:8c:62:e2:62:ab:26:
                    da:8c:ab:b7:59:76:cf:d8:4c:26:91:c1:fd:7e:58:
                    a9:4b:de:6d:c7:27:05:5d:60:b7:f1:88:6d:6a:b1:
                    d5:ec:2c:63:44:3c:0b:d1:7b:0d:b1:62:2e:93:37:
                    d8:f2:ae:df:58:50:a3:b1:95:84:1b:ad:80:ae:cc:
                    16:b4:0d:a3:74:ef:27:0d:39:67:aa:5d:54:5d:06:
                    9c:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:FE:19:86:65:37:39:3C:BD:4F:7C:D5:3D:E1:41:92:DD:5D:83:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/0eece25a-e3fa-3a83-981b-a18d4429a8ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:9000::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:66:06:f2:e4:6a:fe:ff:11:08:c1:4b:82:ba:70:09:f9:22:
         c8:fd:e3:60:8c:4e:57:fd:4d:c3:33:5c:55:63:d3:80:37:18:
         02:06:4a:7a:f8:bb:47:f2:fa:49:35:dc:c8:5f:e8:4f:fc:0f:
         42:28:8c:ec:a3:a6:ae:e7:61:b8:f3:1e:2a:b1:c5:6c:08:12:
         9d:2a:f4:f5:32:6c:61:c8:b0:a7:d0:68:cd:87:16:ed:68:f2:
         d5:90:d4:49:fd:21:69:db:5a:db:ad:3c:71:0d:c5:9e:5a:fa:
         16:15:63:1d:9e:ec:db:a6:e5:8e:19:51:b3:4a:d8:54:4a:80:
         4e:8f:18:de:4c:61:52:12:cd:71:99:c2:b8:0b:b6:18:c2:ef:
         a8:d5:7f:36:33:27:21:bf:8c:90:b5:54:b9:6b:ab:96:08:ee:
         05:4c:a0:5d:2e:9b:87:6c:2d:f7:05:c8:78:bb:2a:70:2a:42:
         cb:17:67:d0:b4:dc:a7:98:79:3d:02:c8:af:29:d5:d2:36:ee:
         db:a3:2b:1d:9a:07:14:e4:fe:f9:3e:93:16:2f:71:e3:81:55:
         c8:c5:42:c3:77:8b:d2:cf:54:17:50:c3:b8:61:28:7a:ed:c1:
         58:d0:1c:06:37:ee:eb:40:13:54:f8:19:97:bd:a3:45:03:40:
         48:75:e7:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:06:54 2025 by rpki-client