Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/1c76116b-fc80-3dd3-a67e-7e3c0541e35b.roa
File:                     1c76116b-fc80-3dd3-a67e-7e3c0541e35b.roa (raw, json)
Hash identifier:          4g17ys21OGIv/GZK98MGTH8068wysAECRY4/Q9riPz0=
Subject key identifier:   37:61:F5:E3:2A:40:1A:58:4C:EA:5A:A5:F3:36:22:06:1D:C1:CE:25
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584B7F52512AC841491B96111C80
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/1c76116b-fc80-3dd3-a67e-7e3c0541e35b.roa
Signing time:             Sun 12 Oct 2025 13:00:37 +0000
ROA not before:           Sun 12 Oct 2025 13:00:37 +0000
ROA not after:            Sat 10 Jan 2026 14:00:37 +0000
asID:                     33363
IP address blocks:        2605:a401:8088::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7f:52:51:2a:c8:41:49:1b:96:11:1c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Oct 12 13:00:37 2025 GMT
            Not After : Jan 10 14:00:37 2026 GMT
        Subject: CN=694eb66b-6fc4-4ed4-823f-c5963d3b7fea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:6e:ea:ae:18:56:68:84:fa:7e:39:ca:ed:58:
                    51:d8:ad:85:aa:40:87:27:22:56:2d:7e:07:33:40:
                    b3:0a:7d:60:92:e3:54:d9:8b:76:35:5b:00:df:14:
                    49:9b:04:33:84:e4:62:50:15:14:02:e3:bb:a9:2e:
                    29:d6:3a:ef:e7:9d:9e:5a:64:a3:1f:db:a5:cc:70:
                    74:ec:bf:21:5b:e0:fa:b7:ae:c1:68:42:89:65:8f:
                    65:1e:3d:c5:1f:a0:38:5a:ef:84:00:5e:b4:da:5b:
                    c5:bd:62:12:89:5e:fc:a8:f1:1f:c0:27:16:b7:29:
                    b6:67:89:32:11:56:81:e5:a1:19:71:32:c8:74:ac:
                    3e:10:cf:ed:4c:6f:9d:55:07:99:91:6a:7e:f9:58:
                    b7:ad:fc:5d:7c:92:8a:8a:a4:cf:86:a7:ee:d3:8e:
                    51:76:4d:64:17:a3:55:cb:93:98:44:21:d0:cd:38:
                    fe:5f:2a:9f:2e:dc:f7:4a:1a:8a:78:da:b2:cf:3c:
                    e1:6a:67:10:57:62:f1:dd:7c:9a:06:f0:a2:50:b6:
                    1f:19:08:2a:6b:cb:e0:da:e6:cd:7f:aa:8f:36:44:
                    24:9e:2f:b0:3c:0e:e2:e3:71:0c:f4:b9:f5:f4:87:
                    77:6e:17:b0:58:0a:36:51:1f:24:dd:ca:93:b6:0e:
                    5e:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:61:F5:E3:2A:40:1A:58:4C:EA:5A:A5:F3:36:22:06:1D:C1:CE:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/1c76116b-fc80-3dd3-a67e-7e3c0541e35b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:8088::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:16:10:4c:f6:82:c2:9b:2e:cb:1c:70:2c:a8:a4:62:09:57:
         90:f7:bf:be:9b:b6:44:a5:67:4f:61:b1:20:b4:e5:0d:81:18:
         51:d4:c5:28:03:10:49:f8:7f:38:2f:ec:38:fe:b4:92:12:84:
         c1:15:4a:82:c9:78:9b:e2:35:0d:8c:cc:32:b0:2a:4b:ad:a0:
         02:2c:3c:0d:32:93:cc:6c:b0:d6:92:44:16:7c:81:9f:76:1f:
         ef:e9:1b:08:7c:13:fc:39:71:5c:db:ed:91:aa:bd:99:b1:c9:
         ec:4d:44:85:71:4f:0f:c0:31:79:b1:7a:cf:d8:48:eb:6c:40:
         08:7a:a6:83:ef:3e:89:42:1b:ab:58:e0:3d:7b:f7:78:c7:f4:
         5b:7d:a2:66:f8:b3:72:d5:15:e5:21:27:5e:23:42:eb:da:82:
         b0:56:be:c6:b1:db:20:61:b6:63:70:42:eb:fc:86:12:82:01:
         c1:4e:d1:2d:61:92:53:5e:63:24:d4:51:39:ca:87:1b:35:a2:
         02:44:b8:26:a3:31:4b:13:a0:af:3e:cb:a0:70:00:63:34:fa:
         78:17:1d:d8:4e:23:ce:7f:c1:fb:fa:f4:8d:52:a4:a1:25:f4:
         d5:a8:99:f4:7e:2d:30:d3:a8:f7:75:29:96:c7:d5:91:ac:e0:
         32:b3:03:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:15:21 2025 by rpki-client