Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/48b6949b-0e52-351e-b880-22e19d14ca6b.roa
File:                     48b6949b-0e52-351e-b880-22e19d14ca6b.roa (raw, json)
Hash identifier:          k+d7/bQvlVSy7vy26QipVEkq+02tVdM3MOliccIfrdc=
Subject key identifier:   BC:96:19:45:AB:CA:24:A8:E1:6F:7A:A3:DE:FE:58:87:33:A9:62:6D
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584B7F5259A81324F0CDE4486A00
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/48b6949b-0e52-351e-b880-22e19d14ca6b.roa
Signing time:             Sun 12 Oct 2025 13:00:37 +0000
ROA not before:           Sun 12 Oct 2025 13:00:37 +0000
ROA not after:            Sat 10 Jan 2026 14:00:37 +0000
asID:                     33363
IP address blocks:        2605:a401:8353::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7f:52:59:a8:13:24:f0:cd:e4:48:6a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Oct 12 13:00:37 2025 GMT
            Not After : Jan 10 14:00:37 2026 GMT
        Subject: CN=ac4efc10-e733-4ac2-b8cc-c03d996cb00c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:f1:1c:20:13:1b:af:60:d8:b4:4b:83:82:04:
                    aa:62:d2:7e:e7:39:e5:4c:b8:be:f6:b5:49:a7:81:
                    3c:de:ed:ef:47:b5:3e:4f:b1:24:5f:69:c7:25:b7:
                    3c:94:d4:ed:09:69:a4:61:d7:cd:52:8e:85:85:06:
                    2b:04:4f:44:0b:d7:20:20:fc:30:f6:3a:eb:0c:2a:
                    ef:53:2e:3e:9d:32:cc:7c:55:1b:1d:9e:22:13:eb:
                    9f:a7:88:89:d3:b8:89:2a:ae:e2:30:79:5d:75:af:
                    ad:c5:99:5a:25:42:cf:49:b2:bd:88:0a:d4:0f:76:
                    ac:f6:cc:a1:91:64:e3:a6:19:94:9c:c6:7b:7e:d0:
                    d7:6c:87:68:b9:65:a8:a1:4b:eb:cc:7e:91:d2:2a:
                    a3:fd:1a:ca:ab:04:ba:4e:75:1b:8c:6f:66:e2:d7:
                    40:b4:d5:68:40:fd:31:70:0e:5f:f7:35:e0:d9:2b:
                    80:b8:f1:a6:7a:75:78:bd:d8:06:eb:2f:a6:72:1b:
                    9f:63:52:d2:f8:5b:09:73:a7:22:7a:9e:22:80:b9:
                    f6:a8:7b:a0:a0:4b:5a:11:e6:b2:2e:04:f3:1f:cc:
                    5f:e6:52:9b:c0:e8:17:d4:3f:dc:3c:06:5e:82:3e:
                    b5:d9:de:35:6b:ab:17:9a:c9:0b:16:b5:e5:59:21:
                    3b:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:96:19:45:AB:CA:24:A8:E1:6F:7A:A3:DE:FE:58:87:33:A9:62:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/48b6949b-0e52-351e-b880-22e19d14ca6b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:8353::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:96:26:d3:c2:ae:02:03:8f:03:f0:4e:40:e6:8b:de:63:83:
         4f:64:2a:de:20:3a:94:33:57:20:de:9f:38:3d:8b:41:cf:70:
         49:ca:b1:26:c2:27:c4:cc:34:9c:e6:53:b7:a1:ba:3e:26:68:
         b5:18:30:34:18:b3:42:1c:2c:37:40:a2:05:7b:b3:60:0a:b8:
         e7:00:ac:56:52:86:b6:38:16:9b:c3:7d:40:21:fd:16:3a:67:
         0c:bf:3f:5c:69:96:20:be:0b:c3:d0:53:c8:ef:f4:9d:1d:8b:
         50:b5:4d:6c:24:0f:f6:57:eb:84:62:67:ad:0e:44:88:45:5a:
         74:d6:df:85:75:ac:a1:56:ff:25:3f:ea:77:83:dc:cb:43:80:
         a5:96:c1:9b:fe:77:af:90:85:35:f0:8d:54:8f:2d:97:8e:29:
         73:cc:57:ca:92:3d:14:79:00:6f:8c:6c:44:c8:e6:98:65:7c:
         99:62:9d:34:e7:e7:6c:dd:d7:32:30:e8:3c:e2:77:61:54:86:
         8c:42:50:c7:5e:07:d2:47:d6:57:df:33:75:a2:c5:9e:8d:b6:
         c1:bc:7a:a0:85:d7:3e:e1:1e:d2:74:29:c7:13:ef:8d:30:38:
         e4:9e:d0:59:b6:1c:37:6f:14:aa:dd:2a:ea:72:23:1d:28:ac:
         bc:e9:1b:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:24:13 2025 by rpki-client