Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/5177fd9a-3f59-39c7-9b84-0ed8405a35ff.roa
File:                     5177fd9a-3f59-39c7-9b84-0ed8405a35ff.roa (raw, json)
Hash identifier:          s+XNem/iKT7cYS9n39nOM9beTdkUHUrg1UeZ77ogPh8=
Subject key identifier:   E6:BD:C5:11:D1:13:3F:DC:6E:36:AE:F2:A3:FB:79:98:D4:75:70:7A
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584B7F5259ED75012ADD51C64C80
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/5177fd9a-3f59-39c7-9b84-0ed8405a35ff.roa
Signing time:             Sun 12 Oct 2025 13:00:37 +0000
ROA not before:           Sun 12 Oct 2025 13:00:37 +0000
ROA not after:            Sat 10 Jan 2026 14:00:37 +0000
asID:                     33363
IP address blocks:        2605:a401:84be::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7f:52:59:ed:75:01:2a:dd:51:c6:4c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Oct 12 13:00:37 2025 GMT
            Not After : Jan 10 14:00:37 2026 GMT
        Subject: CN=f097dd18-4158-4f00-b274-6a2e058196d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:bd:59:37:99:90:2e:2d:39:b5:d7:31:59:d2:
                    36:b1:07:a4:44:23:03:d7:5a:5e:24:59:92:4b:19:
                    7b:23:44:36:0b:78:f3:be:ff:dc:9a:a8:88:23:c6:
                    c5:48:e5:f3:b2:75:05:32:4c:9c:10:8e:20:6e:34:
                    92:a8:3e:78:93:30:3a:60:42:1f:57:b4:36:01:3e:
                    aa:36:6c:74:fe:d1:bd:e0:32:40:cf:37:95:94:cd:
                    57:98:54:cc:ea:82:d4:6d:c2:82:db:2d:77:01:29:
                    49:8f:6d:46:e6:c7:5c:ca:68:0d:8f:11:b9:fa:56:
                    6d:56:d3:29:9e:b6:e9:87:cb:00:88:9f:41:4f:80:
                    d9:ba:6e:16:28:dc:3b:56:11:ed:b5:79:ce:ff:25:
                    05:bf:1b:cc:03:62:7b:ae:56:7c:ea:48:30:8f:80:
                    46:fb:09:9c:b8:eb:87:c8:51:83:a2:7b:e1:57:5c:
                    da:f3:ca:c5:c7:77:8b:ca:e4:cb:b6:6b:4f:e7:6e:
                    b5:ae:cb:54:5b:cc:ec:76:69:7f:02:86:b7:2e:eb:
                    7e:ac:b1:72:d1:6b:05:21:aa:53:50:cf:25:94:e7:
                    2c:dd:cc:51:f4:9f:34:b1:52:ad:ae:79:40:33:07:
                    eb:99:fd:48:08:39:01:85:5d:e1:ac:b7:27:83:d0:
                    0b:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:BD:C5:11:D1:13:3F:DC:6E:36:AE:F2:A3:FB:79:98:D4:75:70:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/5177fd9a-3f59-39c7-9b84-0ed8405a35ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:84be::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:c1:f2:4d:24:00:3f:ac:15:51:ac:da:9d:b4:36:80:e0:aa:
         54:28:da:b0:55:a7:c7:fd:88:ae:32:54:54:7f:d6:6b:82:53:
         9b:03:45:f3:e8:99:7a:cd:a9:d2:c1:1f:1d:fb:6f:f2:a9:09:
         a5:b2:09:7d:eb:b9:a0:35:15:fa:95:3f:a1:fb:14:69:40:c4:
         e2:0f:8a:20:d3:17:a7:87:ad:66:04:bd:30:99:2b:bf:da:a5:
         4a:40:14:24:32:55:52:6b:5d:63:36:33:69:6f:db:1c:9b:42:
         18:80:f0:e6:72:a9:b8:4b:e0:01:d5:70:fb:cf:d3:8b:4c:e6:
         52:31:6c:03:d6:31:ed:7f:d5:87:24:e8:bd:cd:25:fe:76:04:
         a6:d4:ba:c2:fa:18:eb:87:e7:73:67:ad:2e:19:27:18:b3:df:
         b4:6c:8d:02:bc:66:82:ac:6f:b3:de:fb:fd:55:12:ee:39:9b:
         8f:89:b2:58:d8:5f:3f:9d:f5:b2:e1:85:6f:e6:68:0d:ee:04:
         de:d0:db:72:78:89:ef:87:f2:fb:92:1a:f2:cb:42:b4:67:0e:
         d7:46:11:c6:3e:2f:52:27:f0:be:d7:24:a9:ed:f1:f9:ca:5b:
         41:26:de:90:9b:1e:46:50:9b:ed:82:1b:c8:33:75:69:01:47:
         49:7b:df:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:22:56 2025 by rpki-client