Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/4a2b5b61-2f20-3999-83f5-2efcc7f7b3e2.roa
File:                     4a2b5b61-2f20-3999-83f5-2efcc7f7b3e2.roa (raw, json)
Hash identifier:          hFwnXhj8YBZjBYvojJYGbW9Gi8fpJWE1KtSRrU1v2wc=
Subject key identifier:   81:01:D9:7D:7C:B1:18:3B:36:DB:61:C6:F1:3A:4F:35:A4:B2:C3:AC
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584B7F522365D396F1EB5149DB80
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/4a2b5b61-2f20-3999-83f5-2efcc7f7b3e2.roa
Signing time:             Sun 12 Oct 2025 13:00:37 +0000
ROA not before:           Sun 12 Oct 2025 13:00:37 +0000
ROA not after:            Sat 10 Jan 2026 14:00:37 +0000
asID:                     33363
IP address blocks:        2605:a401:80e7::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7f:52:23:65:d3:96:f1:eb:51:49:db:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Oct 12 13:00:37 2025 GMT
            Not After : Jan 10 14:00:37 2026 GMT
        Subject: CN=5ebcf872-2758-4951-86ff-43fc11a42ccf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:e9:97:4d:b5:2a:8a:aa:d1:80:07:5a:1c:b9:
                    9f:d4:a7:51:d3:d0:5c:d6:f9:87:12:d9:a8:82:4c:
                    5d:7b:12:6f:9b:1c:2d:4d:04:e6:ad:46:74:a9:88:
                    40:3d:07:58:e8:af:9d:7e:0a:cb:54:2d:40:ce:ac:
                    cd:ec:f9:0d:61:44:ef:59:6f:78:5a:42:91:b8:7e:
                    59:d5:2b:b0:f9:d7:36:40:4c:70:0d:ad:6c:1b:cf:
                    b7:5a:27:f8:09:d7:2e:1d:ec:c3:b4:eb:af:f0:03:
                    e7:50:dd:ad:76:c3:97:96:59:75:db:88:99:c0:12:
                    1c:e9:cc:45:c2:27:e4:20:76:bc:e1:84:2f:03:2f:
                    fe:7d:ad:3f:68:76:d1:56:6f:43:dd:34:67:99:c2:
                    11:73:33:66:4d:a9:ba:41:b0:2e:2a:c1:3e:d6:0a:
                    63:5e:14:7d:55:ca:ff:45:bd:16:f9:c9:ca:60:f1:
                    ba:44:2e:ff:39:a3:b9:34:d0:c4:7e:64:91:d6:8f:
                    3b:d9:2a:89:4b:40:34:0e:f7:e0:6d:a9:25:7b:42:
                    c9:f8:24:e3:fe:bc:78:2a:62:c3:92:b4:1f:b0:94:
                    b3:52:71:0d:bc:2a:0d:e8:77:43:d6:30:a7:25:cc:
                    25:32:79:f1:a8:62:da:77:87:cc:fa:c9:22:54:a2:
                    a1:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:01:D9:7D:7C:B1:18:3B:36:DB:61:C6:F1:3A:4F:35:A4:B2:C3:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/4a2b5b61-2f20-3999-83f5-2efcc7f7b3e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:80e7::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:60:36:0f:87:4c:03:ab:f0:a8:3d:c2:09:5c:88:d6:65:0e:
         2b:43:a6:22:14:6a:8a:fa:c9:4a:c5:1c:f6:7d:66:c7:ef:1e:
         44:69:97:a5:a1:93:a7:22:20:1b:91:46:c9:e2:78:f3:3d:1e:
         da:8f:14:66:68:3a:0e:82:ad:e2:13:a3:8c:8d:fa:f5:3f:5f:
         4d:31:44:b6:98:cc:ae:a5:2b:a9:94:c7:26:91:3b:75:3c:d4:
         0d:32:b9:6b:96:5f:6f:94:0b:9a:6d:cb:40:3d:5d:26:3c:9e:
         98:85:19:24:de:73:15:5b:49:97:c2:89:0a:b6:28:21:b4:25:
         8c:ca:36:58:82:70:69:8d:42:52:5e:a8:94:51:70:01:4d:71:
         e1:a7:b1:12:44:ed:df:17:8b:4d:74:15:77:e3:15:e8:06:16:
         31:a4:3f:6c:bc:d0:68:cc:ef:be:47:1f:0a:38:45:48:2e:ce:
         11:86:89:30:06:ea:c2:6c:f2:fc:52:53:1e:8a:10:fc:1e:5b:
         3b:0d:fe:35:b4:2a:b4:64:55:94:13:2d:52:87:8d:20:83:94:
         fa:42:a4:6e:0d:11:33:9c:60:51:4c:d4:d0:6f:60:13:56:07:
         ec:a3:0d:58:b7:8f:58:41:47:2a:17:05:de:28:d4:20:0c:ad:
         3c:bb:c2:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:22:58 2025 by rpki-client