Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/4350d3ee-27c3-365e-9475-69302367ce2f.roa
File:                     4350d3ee-27c3-365e-9475-69302367ce2f.roa (raw, json)
Hash identifier:          rBw4lZcVq0SdtLQbdpNnjZjBVTfrE291UOKO/6RYFAY=
Subject key identifier:   82:65:CB:91:AD:88:9F:9B:AF:15:D3:56:CA:47:67:3C:F9:07:D5:28
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584B7F5250E2A8643377D37284E0
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/4350d3ee-27c3-365e-9475-69302367ce2f.roa
Signing time:             Sun 12 Oct 2025 13:00:37 +0000
ROA not before:           Sun 12 Oct 2025 13:00:37 +0000
ROA not after:            Sat 10 Jan 2026 14:00:37 +0000
asID:                     33363
IP address blocks:        2605:a401:8073::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7f:52:50:e2:a8:64:33:77:d3:72:84:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Oct 12 13:00:37 2025 GMT
            Not After : Jan 10 14:00:37 2026 GMT
        Subject: CN=ba1c6ebf-a21f-4029-acb4-16530687802d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:9f:7b:e9:ce:ac:05:59:de:20:54:a4:c5:5d:
                    08:11:4d:9e:09:88:37:ea:c6:0d:e8:4c:52:2f:80:
                    a9:2b:b7:cc:c7:5e:8a:f2:56:73:a0:6b:13:47:43:
                    28:3c:22:48:b6:1d:52:b5:ec:f8:25:04:39:b3:c5:
                    0e:b1:a1:ae:7b:95:5d:17:dd:47:0f:99:93:c4:92:
                    82:66:d3:a6:bb:7d:32:9f:21:f7:87:de:fd:be:54:
                    0b:f0:c3:e4:93:88:82:25:a3:59:ae:63:09:5e:ec:
                    01:b5:14:da:02:c5:ac:e0:1f:0c:71:49:89:22:d0:
                    b8:27:3b:44:b3:59:e8:3c:7e:dc:15:78:e5:ac:62:
                    c4:c3:0b:f8:83:36:28:d4:ed:59:18:3a:da:85:d5:
                    c5:61:6b:f5:97:37:68:6e:79:d8:0e:a4:8f:c9:c2:
                    8b:3b:47:e3:05:35:d0:31:8e:63:c0:37:b9:a6:b5:
                    07:24:8a:a8:03:0c:fd:20:32:88:0a:81:e3:9a:96:
                    b2:97:21:6d:fc:37:9a:31:3d:51:88:eb:bb:2d:84:
                    fe:7a:ba:dc:1f:4c:16:af:80:79:43:e9:4a:fe:c7:
                    22:0e:57:d0:6c:61:cd:42:c7:1c:40:5a:77:8b:39:
                    40:f3:48:c2:02:2a:fe:93:1b:50:bf:9f:fc:82:98:
                    0d:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:65:CB:91:AD:88:9F:9B:AF:15:D3:56:CA:47:67:3C:F9:07:D5:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/4350d3ee-27c3-365e-9475-69302367ce2f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:8073::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:49:70:aa:51:79:19:e6:dd:5a:d3:0c:7a:62:c9:4d:c6:70:
         52:b9:b0:d7:1f:1b:d5:57:d0:30:39:b6:bc:a6:60:c0:9c:df:
         71:c4:88:55:bf:71:b3:6b:bb:97:79:f2:e2:11:92:cc:79:18:
         0f:9f:c9:c7:18:0e:5f:e8:ae:52:93:1e:70:9d:75:31:74:f0:
         c0:28:a3:7d:fa:a2:4c:3a:c4:7d:ea:ec:6c:10:70:14:2f:d3:
         ae:a1:16:c7:9e:8e:2e:42:8f:58:2d:64:cd:40:13:2d:f3:4e:
         17:43:ed:60:e3:de:fe:a1:92:29:5e:00:e4:0c:9d:02:79:84:
         25:69:15:21:8d:21:fc:ec:d1:de:88:53:41:35:66:73:d1:02:
         37:85:be:a7:12:3e:b2:25:d2:93:b4:6d:05:b9:59:e5:f5:b4:
         04:c5:60:fe:44:aa:c8:21:ec:f7:3f:a6:b1:c4:c1:72:f3:e4:
         9a:0f:97:1e:c9:f0:aa:76:6f:3a:44:19:fc:10:4c:37:97:61:
         0a:ba:f5:45:9d:b9:f7:d5:c0:2d:17:a0:d9:86:2b:1c:1f:d4:
         56:64:14:51:41:82:15:18:f0:02:87:2e:c1:01:2c:a0:40:fe:
         48:05:a8:80:1d:af:94:d5:78:1a:fa:4a:5a:5c:50:7f:c8:37:
         0b:2c:87:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:32:30 2025 by rpki-client