Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/298a7052-e15d-3332-8c49-21d9dc45a6a3.roa
File:                     298a7052-e15d-3332-8c49-21d9dc45a6a3.roa (raw, json)
Hash identifier:          ioj/0UhqslJKc7cqc+v1QAr5xc3kbMDI/WqNh8LN1ZM=
Subject key identifier:   E2:10:4F:D5:42:86:63:C7:5F:47:75:6B:22:66:91:54:0E:36:CF:01
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584B7F52541766F98896BDE0EEC0
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/298a7052-e15d-3332-8c49-21d9dc45a6a3.roa
Signing time:             Sun 12 Oct 2025 13:00:37 +0000
ROA not before:           Sun 12 Oct 2025 13:00:37 +0000
ROA not after:            Sat 10 Jan 2026 14:00:37 +0000
asID:                     33363
IP address blocks:        2605:a401:8179::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7f:52:54:17:66:f9:88:96:bd:e0:ee:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Oct 12 13:00:37 2025 GMT
            Not After : Jan 10 14:00:37 2026 GMT
        Subject: CN=3ee6a9a6-9b7e-4c5a-9c79-32e61dc4189e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:6e:0f:6f:d0:ab:d4:38:de:9c:8f:3d:46:77:
                    18:30:70:3c:3d:7b:a0:11:6d:ab:0f:a5:0c:a6:ae:
                    92:d1:0c:db:1e:c8:6e:0d:e0:5b:e8:78:f8:a8:a5:
                    e7:a3:10:d6:2a:35:3d:9b:ca:ad:75:ec:1f:60:61:
                    ae:8b:4e:fe:77:4b:ad:57:c7:36:21:31:f7:1d:6a:
                    77:3e:a7:fd:f0:3b:2c:49:99:c4:3e:4d:c0:fe:96:
                    b1:22:1a:00:32:6b:82:7c:01:84:17:39:ce:01:e6:
                    e3:68:12:41:1f:7d:b2:6c:44:b6:5b:43:99:70:d7:
                    35:d7:b0:ef:c0:a7:e7:07:42:33:aa:f8:56:61:62:
                    d4:26:a0:cb:7a:c0:57:b8:4e:f6:32:d3:42:6f:8f:
                    3a:c9:85:c1:63:70:7e:cc:5f:ff:46:33:32:4f:d2:
                    44:8b:9d:da:5b:96:cd:c4:4e:69:c3:cf:e3:8c:a8:
                    0d:41:e3:72:83:43:22:d1:fb:17:05:b3:23:ec:65:
                    87:e8:9b:df:b3:f7:60:b8:9c:77:a7:0c:ad:c6:f5:
                    df:7e:df:63:a7:13:d0:4a:78:2f:21:63:f3:21:ac:
                    f5:87:3c:18:46:77:1c:ee:df:43:66:e4:6a:c5:37:
                    53:87:15:81:c6:e6:81:fc:7c:c1:be:58:6c:a1:bc:
                    28:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:10:4F:D5:42:86:63:C7:5F:47:75:6B:22:66:91:54:0E:36:CF:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/298a7052-e15d-3332-8c49-21d9dc45a6a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:8179::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:95:be:6b:b7:c8:41:9f:0c:91:e9:1b:62:49:c5:34:91:c5:
         d3:5f:0f:b5:fa:e1:13:0d:a6:78:17:35:43:23:33:1e:9e:97:
         f0:d7:97:3a:dc:b4:10:fa:f7:51:dd:ed:d4:94:70:24:83:39:
         dc:b0:35:f6:98:5b:65:14:d9:d3:a0:ab:2f:5e:de:01:6b:ee:
         c6:57:5b:9c:72:c9:3a:06:02:1f:0d:0e:9c:ef:06:25:7b:ee:
         47:c1:d4:9d:aa:7b:c8:93:78:32:7b:fa:7e:88:f0:d7:42:13:
         49:27:66:e4:7e:dc:a3:ae:43:80:ba:3e:60:bc:21:22:eb:b6:
         30:10:20:10:32:42:a2:34:3b:77:f6:73:be:e5:67:c7:be:07:
         c6:71:64:d0:be:77:78:72:fd:e4:7d:40:b9:c1:9b:e8:64:fe:
         13:44:b7:28:b6:8f:9c:9a:fe:cd:6d:cb:90:7d:43:61:b3:85:
         37:21:74:e3:fd:55:c2:98:db:a2:af:92:fe:4b:01:78:b0:18:
         84:c5:29:0a:28:3d:4c:eb:c3:c4:ab:07:ff:28:80:fb:43:0e:
         f8:0c:1b:84:f2:22:4a:ed:77:9e:db:c6:52:62:7a:52:93:d4:
         50:cb:b3:80:ac:d8:a5:93:99:1c:e5:c1:e9:36:42:6b:80:2f:
         71:1c:96:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:57:47 2025 by rpki-client