Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/4d4b8223-85ee-3255-b036-a8a8294f42d7.roa
File:                     4d4b8223-85ee-3255-b036-a8a8294f42d7.roa (raw, json)
Hash identifier:          vLXO8sXG2G8zPmyg6YngUE2e5ZB/XKl6LqHVsms6Jpw=
Subject key identifier:   72:5A:26:69:6C:5B:19:02:08:3F:AA:A3:C9:07:A0:7E:14:2B:DC:27
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584B7F524F225858EFCFA9C86240
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/4d4b8223-85ee-3255-b036-a8a8294f42d7.roa
Signing time:             Sun 12 Oct 2025 13:00:37 +0000
ROA not before:           Sun 12 Oct 2025 13:00:37 +0000
ROA not after:            Sat 10 Jan 2026 14:00:37 +0000
asID:                     33363
IP address blocks:        2605:a401:80d8::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7f:52:4f:22:58:58:ef:cf:a9:c8:62:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Oct 12 13:00:37 2025 GMT
            Not After : Jan 10 14:00:37 2026 GMT
        Subject: CN=7866052a-6b69-49f5-8576-95dd3fb35577
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:ef:72:25:98:8c:81:99:f0:1c:75:b0:f8:c8:
                    03:cc:c5:8f:64:0d:9d:cd:b6:fc:99:a1:10:25:50:
                    34:46:71:11:37:1d:9f:26:cc:36:ac:b7:f7:89:2e:
                    58:83:52:6b:c6:d7:dc:78:5d:73:26:7d:9d:81:ab:
                    a0:e6:e7:dd:61:4a:a1:62:11:06:a8:11:bb:23:95:
                    63:33:a7:a2:af:57:12:fc:d1:eb:76:8a:49:08:6b:
                    0b:6d:76:97:4d:ef:0c:42:d0:29:04:c9:83:0f:70:
                    1e:10:77:ff:02:81:4b:73:c9:b9:8d:18:15:31:dd:
                    52:b7:42:68:2d:cc:20:f9:a4:74:5a:0f:80:f9:11:
                    f3:13:2f:76:86:fd:c9:78:97:c2:ea:78:25:bd:10:
                    33:45:03:11:c0:ce:bb:3b:00:1a:6d:1f:03:02:ca:
                    84:6b:ec:e3:9a:64:a9:c9:d4:e0:b6:5c:9d:92:98:
                    27:d5:7e:20:37:28:15:cb:14:05:ac:29:e0:86:b0:
                    d5:24:a8:33:b6:47:21:b0:b2:b4:f7:9f:c5:c0:5d:
                    36:a5:ea:ed:41:c2:17:69:a4:cd:a8:ac:29:e5:fd:
                    53:86:57:d5:2b:a2:d5:72:af:2e:72:cf:3c:33:a2:
                    06:85:90:cf:ba:24:32:98:e5:c9:83:44:86:07:ff:
                    f3:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:5A:26:69:6C:5B:19:02:08:3F:AA:A3:C9:07:A0:7E:14:2B:DC:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/4d4b8223-85ee-3255-b036-a8a8294f42d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:80d8::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:c4:2e:7c:c1:d9:61:e0:55:d1:8c:54:c7:b0:1a:36:0d:2e:
         f7:77:81:19:58:75:33:e1:3b:5a:ee:7d:56:36:8a:f4:be:91:
         6c:03:79:12:7e:b6:22:9e:0f:99:81:82:52:3b:49:da:3c:86:
         d7:4e:62:b6:d8:a8:d8:dd:94:dd:8f:9e:90:1a:0e:14:b7:eb:
         22:ad:94:51:40:bd:42:8d:fa:9d:fd:e4:99:05:33:1b:85:ab:
         68:2d:85:e1:77:31:cd:70:21:79:cd:f5:cd:b2:f8:e0:07:5f:
         54:da:a8:0d:ff:4e:c0:9c:11:96:f9:a3:7e:99:1e:0b:bc:34:
         4f:b3:21:ab:c5:df:5f:a1:a0:e0:45:a5:ac:c1:78:ae:ed:d2:
         df:05:b3:c1:06:ee:6f:77:5e:73:a2:e6:cd:0e:39:9f:55:22:
         55:76:27:d2:23:50:cd:c9:2d:19:8e:a0:aa:96:2a:bb:9a:59:
         d3:6d:83:63:57:f8:1a:ae:40:0d:a9:10:0d:de:20:ae:ab:83:
         9f:9a:81:c7:08:23:b7:9a:0e:db:cc:bc:b1:ca:ab:8e:45:26:
         ad:79:6e:fc:88:e2:5c:79:70:b5:00:ea:c9:33:de:f1:df:d3:
         e6:2e:64:e6:16:67:59:25:c1:0d:3a:80:2f:15:d0:00:ac:6e:
         28:49:75:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:59:42 2025 by rpki-client