Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/44a9403f-17df-3731-bde8-32af09694c52.roa
File:                     44a9403f-17df-3731-bde8-32af09694c52.roa (raw, json)
Hash identifier:          M/3QjZKcZzH4KIALI8wm3xzcFGU2qHFeYXD2jL9bW50=
Subject key identifier:   A2:D9:B1:9B:A6:50:76:BF:93:24:7A:96:84:B8:BB:D0:D7:45:38:9F
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584B7F5259CAC2BFC69D71E91E80
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/44a9403f-17df-3731-bde8-32af09694c52.roa
Signing time:             Sun 12 Oct 2025 13:00:37 +0000
ROA not before:           Sun 12 Oct 2025 13:00:37 +0000
ROA not after:            Sat 10 Jan 2026 14:00:37 +0000
asID:                     33363
IP address blocks:        2605:a401:83ce::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7f:52:59:ca:c2:bf:c6:9d:71:e9:1e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Oct 12 13:00:37 2025 GMT
            Not After : Jan 10 14:00:37 2026 GMT
        Subject: CN=ce44aa68-5ea6-434a-884a-7c7ba2ff72f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:83:14:bf:f4:3e:84:da:44:56:f7:63:f6:48:
                    73:28:11:b4:bd:cb:1f:66:25:6c:37:47:94:e4:e7:
                    4e:7d:d7:4a:6e:6e:63:9c:fb:af:ae:43:c3:62:36:
                    d5:5a:ef:2d:65:5c:3e:24:e9:31:a8:80:a8:8b:e6:
                    2f:1b:c0:bf:9a:8d:1d:93:aa:1e:29:70:85:da:96:
                    9d:85:9b:50:68:3d:df:f0:f5:ad:4f:2c:db:c9:ef:
                    48:0e:c5:52:49:26:d2:cf:30:ca:2b:46:9a:32:42:
                    ed:9c:06:50:e9:d0:7e:a3:05:b8:4c:ba:1d:8c:af:
                    4a:08:0c:d5:98:2c:93:67:45:0d:9d:4e:1f:86:9b:
                    6a:b7:c5:39:ea:26:8a:35:ec:7a:f4:93:af:0f:e1:
                    a9:b9:7c:66:9a:70:b2:36:02:71:9b:73:42:f2:57:
                    2e:8b:18:0e:0a:82:42:4b:ec:7c:44:8a:d9:eb:ac:
                    8a:0a:d3:0e:76:88:a4:ca:fe:6a:39:70:20:ba:27:
                    1b:e6:a8:4c:7a:22:01:b8:a8:d6:9a:a1:be:79:d6:
                    57:49:e4:90:e3:ba:0e:6e:5e:6c:46:47:31:6b:fa:
                    c2:40:21:96:13:32:3b:61:1c:25:fe:e0:51:a3:26:
                    a6:59:37:e2:8d:e3:87:b9:b9:c3:ad:ae:58:91:c6:
                    7a:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:D9:B1:9B:A6:50:76:BF:93:24:7A:96:84:B8:BB:D0:D7:45:38:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/44a9403f-17df-3731-bde8-32af09694c52.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:83ce::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:6f:ae:68:5b:fe:c0:f7:77:60:bf:db:c4:fc:1e:ea:96:6f:
         18:50:71:33:a8:c7:2b:f0:e7:b6:39:04:d0:92:c8:9e:08:40:
         2d:07:20:ec:33:59:39:36:43:50:83:18:5d:f7:49:92:fb:5d:
         87:9a:47:4e:d8:92:ab:e7:b3:e5:d4:61:eb:69:65:fb:db:e9:
         cb:8c:6d:1a:8b:10:77:59:21:10:d8:b6:55:a2:bb:75:24:da:
         2b:fd:5a:36:82:8b:fa:fa:57:63:12:51:04:ac:d6:83:75:f4:
         3a:5c:66:da:df:58:ce:f4:b1:69:87:a2:dd:a5:65:ef:ec:62:
         db:34:2f:94:4b:ab:ed:a0:93:f9:46:b5:cb:94:77:3f:2b:f1:
         9b:21:18:d5:72:03:31:b1:94:b9:43:62:ed:3b:25:92:a8:44:
         46:4e:2d:32:98:71:35:62:d8:bf:32:68:af:3b:aa:c3:e2:1d:
         ca:e1:94:c0:70:a8:ea:b6:35:47:cd:52:a1:6e:10:6c:94:92:
         a4:93:a9:5f:56:7c:4a:aa:43:47:cf:0d:a0:e3:ef:45:5a:b6:
         b1:55:77:0a:2b:e1:11:e0:9f:26:23:91:72:c1:50:80:df:a7:
         30:38:dc:18:4a:0e:cb:01:53:04:5f:82:57:0c:e9:8f:2d:e4:
         13:5c:38:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:32:22 2025 by rpki-client