Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/2db1f454-3527-345c-a857-68b9d2939fd7.roa
File:                     2db1f454-3527-345c-a857-68b9d2939fd7.roa (raw, json)
Hash identifier:          t7A1Xm9JGBrc21UQ/rNB6gJOkFlP+ErBb01mntm9rCI=
Subject key identifier:   1E:1A:FA:E6:8B:9C:85:CC:67:27:5E:24:44:3C:86:81:E7:1B:64:F5
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584B7F52299062E1F80FBC4294A0
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/2db1f454-3527-345c-a857-68b9d2939fd7.roa
Signing time:             Sun 12 Oct 2025 13:00:37 +0000
ROA not before:           Sun 12 Oct 2025 13:00:37 +0000
ROA not after:            Sat 10 Jan 2026 14:00:37 +0000
asID:                     33363
IP address blocks:        2605:a401:80c3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7f:52:29:90:62:e1:f8:0f:bc:42:94:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Oct 12 13:00:37 2025 GMT
            Not After : Jan 10 14:00:37 2026 GMT
        Subject: CN=a3548f10-c615-426a-9599-db954cd360d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:50:a3:fb:b4:ee:18:12:d4:d3:e8:52:62:c5:
                    aa:3c:61:42:d3:06:a8:1d:04:f9:e1:53:3a:3f:7d:
                    68:6d:00:2a:77:ee:83:3e:4b:50:88:e2:71:be:af:
                    f0:7c:12:9b:45:18:e1:11:ad:b2:50:0b:44:92:fb:
                    38:fd:8b:a9:bb:41:b8:ac:5b:7e:ea:a4:89:b9:3f:
                    d8:1e:fb:4d:8f:b5:96:40:43:79:8f:01:9b:fd:59:
                    49:8c:02:6c:50:31:e8:56:44:ff:08:e0:9e:0b:5e:
                    5a:83:64:6e:1b:67:ee:97:45:f7:f2:de:dd:62:32:
                    c4:a0:5f:39:bb:b6:7e:0a:7e:0d:85:52:36:65:04:
                    9a:5c:f7:fd:fa:87:d4:c9:6d:c8:ee:28:fe:a6:4c:
                    39:9b:08:6d:32:72:74:f1:9e:58:ce:2c:e1:40:e5:
                    c2:d9:1c:55:d3:5f:d0:42:66:f6:13:07:39:11:54:
                    e7:85:0c:d8:2d:66:b2:e7:89:83:61:b0:0d:ca:59:
                    fb:8d:98:60:64:74:32:be:9a:a0:cf:9e:76:5a:99:
                    98:83:0f:76:f9:d0:f7:22:fe:c8:56:69:6f:59:b0:
                    e7:f3:41:b3:9a:53:5e:9a:cd:0e:0d:9c:ea:d2:03:
                    39:03:ab:81:a3:78:3b:0e:f4:b4:02:d1:48:06:6c:
                    14:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:1A:FA:E6:8B:9C:85:CC:67:27:5E:24:44:3C:86:81:E7:1B:64:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/2db1f454-3527-345c-a857-68b9d2939fd7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:80c3::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:f0:fb:51:e2:07:a4:24:7c:3f:7a:01:c7:24:f9:45:89:68:
         6c:b1:b4:83:66:e6:01:74:09:93:8e:fe:ef:0c:47:4d:d1:b0:
         ff:9a:3c:9e:d5:f8:fb:65:ec:0b:a3:cb:79:7d:53:a6:88:73:
         90:1f:56:17:46:19:3b:15:26:b5:b7:a5:82:6e:6c:91:e6:6b:
         b3:4f:8a:b0:38:cb:90:cb:82:af:f5:ec:c3:ab:40:92:56:79:
         a7:41:66:ce:2f:5d:50:10:4a:31:98:3c:bd:14:d6:f6:47:e0:
         50:ac:61:23:7c:fb:a5:e6:ce:e6:79:5d:2e:51:77:04:c2:d7:
         25:45:a1:81:2a:29:e2:73:86:f6:bf:a3:15:d0:f9:e5:82:de:
         79:27:d1:dd:f7:cf:ec:71:64:ab:e0:8c:1a:f5:8b:00:3c:c8:
         a8:1d:45:dc:65:8a:c8:0b:29:aa:f6:d0:28:05:ea:87:3b:16:
         79:5f:34:d3:0c:9c:7d:ae:31:16:1e:d1:8f:bc:e0:af:f2:c0:
         c9:d4:15:15:86:55:f4:b7:52:2d:01:a4:ba:c8:08:a6:1a:47:
         aa:11:dd:a7:63:3f:2d:16:96:ee:a2:71:92:29:5c:cb:64:51:
         0b:b7:59:40:60:1c:a0:30:ef:84:a8:5d:fa:74:c1:0c:4b:df:
         aa:f8:ed:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:58:14 2025 by rpki-client