Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/336ebe1a-9de6-3543-9827-dd2812bf6a9d.roa
File:                     336ebe1a-9de6-3543-9827-dd2812bf6a9d.roa (raw, json)
Hash identifier:          agSDjZ6DbNidRuLqK92z8TcJamPBPgJOmOyhhfJtOrg=
Subject key identifier:   C2:04:DA:EE:53:25:6D:8B:61:6B:5D:EE:E8:6C:93:43:A4:E7:D1:24
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584B7F522CEE5CDE00FD89486D00
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/336ebe1a-9de6-3543-9827-dd2812bf6a9d.roa
Signing time:             Sun 12 Oct 2025 13:00:37 +0000
ROA not before:           Sun 12 Oct 2025 13:00:37 +0000
ROA not after:            Sat 10 Jan 2026 14:00:37 +0000
asID:                     33363
IP address blocks:        2605:a401:858d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7f:52:2c:ee:5c:de:00:fd:89:48:6d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Oct 12 13:00:37 2025 GMT
            Not After : Jan 10 14:00:37 2026 GMT
        Subject: CN=4d6a0a4a-582d-4775-a4fb-2d21657d5156
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:db:63:88:e1:b1:a4:15:f9:1a:8a:6b:e1:c2:
                    2e:ec:c8:15:33:cc:c3:6b:4b:9a:7e:38:ad:a7:0f:
                    a6:23:59:7e:3d:60:e1:9b:f9:02:0d:1d:c7:b4:89:
                    87:42:cf:c0:93:ab:24:f4:78:8a:1a:3a:07:67:65:
                    4a:fb:79:0b:7f:2b:e9:5c:8d:98:97:9d:c1:eb:e4:
                    4e:b8:8d:15:6e:7d:f0:41:36:28:24:3c:37:64:c8:
                    0e:70:60:6c:e4:cd:8d:2a:c6:c5:10:64:65:ed:20:
                    a7:70:73:03:32:b4:9c:ec:48:22:fa:8f:99:4f:14:
                    d2:a3:a0:72:19:f6:ef:0e:81:7d:cd:9e:ec:9d:c5:
                    37:1c:30:fb:06:96:1c:5a:27:a3:bd:d0:24:95:93:
                    ca:ba:d0:7e:5a:01:83:93:4e:53:90:36:a5:bf:75:
                    88:4a:f0:c1:63:4c:1d:43:50:9d:4d:b5:24:cd:0b:
                    58:a3:f5:fe:07:74:df:95:6f:3a:74:9f:87:dc:9e:
                    c0:8f:47:a8:34:4d:45:77:5e:68:53:83:4e:fd:e3:
                    d6:c7:3b:ff:d8:f0:2d:aa:fa:1b:e3:8b:f1:fb:82:
                    65:11:83:03:8a:ad:86:f3:76:3a:07:32:86:6d:e8:
                    7f:46:d5:58:06:db:fa:2a:0c:18:88:47:2a:e7:d7:
                    50:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:04:DA:EE:53:25:6D:8B:61:6B:5D:EE:E8:6C:93:43:A4:E7:D1:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/336ebe1a-9de6-3543-9827-dd2812bf6a9d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:858d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:b9:02:45:67:0c:aa:7a:a6:6b:2c:8b:98:22:7f:74:33:5b:
         2d:3f:14:6a:c6:9c:5e:1a:95:45:3e:64:f9:ad:dc:b9:54:3e:
         9c:e4:b9:0a:60:5e:b1:98:c3:ea:84:34:5b:bd:bc:7d:68:df:
         25:cc:2b:9f:84:17:3b:47:fb:8e:1e:65:6b:5d:9c:1d:84:d5:
         0d:51:53:55:57:ec:6e:05:02:6b:15:05:e4:ff:b9:c6:20:cb:
         d6:ed:b7:e2:65:a7:0e:e1:11:a3:f9:04:8e:86:24:9d:4a:2f:
         0c:9a:08:fb:6f:1b:3e:ab:a6:84:d8:18:72:7f:2c:fa:f9:20:
         3b:18:7e:91:68:fe:9c:f1:92:49:4b:d2:77:94:08:cb:b1:84:
         61:62:c6:d9:c3:35:55:65:58:b0:21:e0:b8:b9:e3:80:81:8c:
         91:46:e6:e1:cc:27:78:59:d0:73:f6:3b:ba:16:4d:63:7c:43:
         b0:86:6d:13:11:ee:7e:4b:06:52:be:90:b6:ba:ee:36:9a:3d:
         cb:e2:fe:5b:16:5c:e2:0d:df:f1:99:e1:e3:95:5a:68:80:2b:
         e4:11:ae:5c:66:1c:4b:a9:06:f5:9a:51:64:dc:87:5e:ce:fd:
         da:8f:7f:26:0a:19:75:93:df:09:ff:14:67:88:3f:3e:1b:90:
         9a:91:18:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:58:14 2025 by rpki-client