Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/421cb359-fb82-39ee-b268-d31a0df7d2fe.roa
File:                     421cb359-fb82-39ee-b268-d31a0df7d2fe.roa (raw, json)
Hash identifier:          W+Zcchh4GX104QnR5G5QYDArnIphXdWbgQR10fgxzsY=
Subject key identifier:   93:C1:97:36:76:2F:77:A8:BB:A2:04:B8:6A:1A:3A:15:E6:CF:C5:C0
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584B7F522228AA318497301A6180
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/421cb359-fb82-39ee-b268-d31a0df7d2fe.roa
Signing time:             Sun 12 Oct 2025 13:00:37 +0000
ROA not before:           Sun 12 Oct 2025 13:00:37 +0000
ROA not after:            Sat 10 Jan 2026 14:00:37 +0000
asID:                     33363
IP address blocks:        2605:a401:806d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7f:52:22:28:aa:31:84:97:30:1a:61:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Oct 12 13:00:37 2025 GMT
            Not After : Jan 10 14:00:37 2026 GMT
        Subject: CN=6a5508f1-ba95-49ab-8e2c-868e10516149
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:8c:05:e6:ce:2b:39:8a:c8:6b:26:0b:d0:ec:
                    ec:9c:3a:ae:d1:6a:a7:9e:44:de:a3:18:dd:8f:dd:
                    cb:48:f5:df:ae:b5:25:f9:14:75:68:ae:fc:e1:ae:
                    ee:db:05:27:74:1e:6d:f6:70:92:1c:7e:b7:14:e8:
                    94:7c:11:67:26:2c:33:74:80:f4:1b:b9:6b:a6:89:
                    71:a9:10:3c:63:b8:d2:09:99:cb:5e:97:7b:c1:a3:
                    36:4f:ad:4b:b0:b3:af:60:76:a0:73:fa:ac:8c:5a:
                    c3:13:cd:28:a4:f9:9a:2d:c3:80:e3:11:85:ca:d9:
                    27:18:7f:c2:22:3e:c8:39:82:9a:13:16:9f:5a:c2:
                    92:41:b5:4e:d7:fd:03:20:7e:08:40:2d:26:ba:56:
                    13:c2:e3:13:ec:5b:4e:d8:62:ac:4b:6b:e3:1b:a5:
                    4e:88:24:7c:8f:7d:ff:d1:fe:56:7a:00:d4:06:a1:
                    98:70:f1:4b:d1:42:4f:1a:cf:46:b4:e6:c8:5a:1c:
                    4f:04:60:54:3c:59:0e:7e:fa:c4:1e:a2:cc:e7:45:
                    dc:b6:e1:90:dd:b5:5e:ee:28:6c:a6:76:1d:b2:37:
                    4e:c3:ea:02:c1:bb:9d:ad:f4:85:2e:0d:ed:6a:0d:
                    c9:23:6b:13:23:29:85:46:4b:bd:e8:80:bf:d7:a0:
                    14:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:C1:97:36:76:2F:77:A8:BB:A2:04:B8:6A:1A:3A:15:E6:CF:C5:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/421cb359-fb82-39ee-b268-d31a0df7d2fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:806d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:7f:da:ee:f9:23:d5:fc:a5:66:b8:8a:21:bc:f4:88:67:44:
         aa:47:bb:8e:46:94:c5:1f:33:72:24:72:1c:b7:96:b3:92:fa:
         a4:c5:05:91:26:4c:00:d8:47:ad:f4:b8:b2:ba:df:39:79:fd:
         63:a1:75:d0:fb:24:01:6f:8a:14:c3:37:aa:cd:a3:2a:1e:d3:
         ab:04:a9:61:be:09:e7:7a:09:83:4a:4b:59:c1:5e:da:a4:ec:
         47:52:65:fd:c8:97:28:8c:df:4f:af:33:93:48:14:ae:4a:0a:
         db:05:74:9d:26:69:1a:ff:8f:a6:fd:3c:ae:65:a7:16:04:45:
         d3:16:90:2c:fd:23:fb:dd:da:26:21:c7:93:74:3a:64:f6:64:
         ab:58:3c:06:c8:f3:2a:0d:0a:35:e6:36:10:93:28:ca:d7:0c:
         db:90:7b:74:7a:d7:95:2b:e3:fd:4f:55:f8:59:2c:78:70:e6:
         78:5a:dc:9a:10:5d:c0:eb:3d:6d:83:46:bf:ec:5c:ee:69:c1:
         45:19:23:e2:f4:35:ff:66:ee:9d:74:bc:5d:48:8f:53:9d:5b:
         25:c5:d4:75:b7:fe:32:bf:a8:11:65:65:bb:4e:34:bf:f2:e5:
         5c:29:c8:24:93:cb:d5:b3:04:41:2f:f4:f3:63:a0:42:46:86:
         69:e5:77:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:26:06 2025 by rpki-client