Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/51b3e376-e396-3765-af46-c792e6c4e2d4.roa
File:                     51b3e376-e396-3765-af46-c792e6c4e2d4.roa (raw, json)
Hash identifier:          BXXe9kV8XuYtiPqKX+a4dMSat6R6RSH5uuaDg7oh0ps=
Subject key identifier:   5F:46:75:83:CC:F4:FC:35:28:6B:EA:E0:BF:4E:EA:92:61:DA:34:3A
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584B7F52270805928D69A0E8B0BB
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/51b3e376-e396-3765-af46-c792e6c4e2d4.roa
Signing time:             Sun 12 Oct 2025 13:00:37 +0000
ROA not before:           Sun 12 Oct 2025 13:00:37 +0000
ROA not after:            Sat 10 Jan 2026 14:00:37 +0000
asID:                     33363
IP address blocks:        2605:a401:8664::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7f:52:27:08:05:92:8d:69:a0:e8:b0:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Oct 12 13:00:37 2025 GMT
            Not After : Jan 10 14:00:37 2026 GMT
        Subject: CN=3130b8a3-c2d9-42b5-910e-964cb39869d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:f8:c3:20:5c:c4:7c:02:2d:04:70:33:74:d4:
                    9b:98:14:9c:43:2c:1e:c4:2e:02:1c:91:70:94:86:
                    5b:da:de:ac:08:87:08:8c:21:96:cb:9e:a0:cb:31:
                    c3:28:9c:58:82:1f:8a:0a:3f:9f:51:eb:58:c3:41:
                    c2:d1:8d:05:2d:f5:a0:7d:ec:a3:da:f2:47:b8:03:
                    52:bf:29:36:c2:b2:a5:8b:a5:75:19:60:f9:cc:5b:
                    2d:d1:1b:6e:81:c1:60:0e:79:3b:97:7d:4e:fd:92:
                    04:be:17:3a:d8:12:a7:b4:4c:da:4f:a3:4b:76:45:
                    e9:4a:14:7e:15:a9:ae:72:d5:24:8d:05:e0:3c:4b:
                    49:84:e9:40:b4:33:1d:e3:98:7a:8d:61:ab:d0:ee:
                    3e:51:da:7f:19:6b:a6:8d:2d:f8:23:b6:e3:d4:74:
                    c7:04:19:d7:f2:d2:6c:c6:0c:4e:dd:42:39:84:59:
                    81:07:ef:9e:c3:14:fa:67:74:89:c6:17:8a:34:ee:
                    cf:17:97:05:19:73:3a:4c:c6:93:b8:a2:c0:21:1e:
                    c0:cc:8f:0b:09:4e:80:5f:3c:29:a9:9a:c7:a9:c1:
                    d6:9e:46:2c:a6:68:9d:9b:fc:23:3d:76:6b:8c:5b:
                    82:f3:da:a9:7d:19:98:2d:f6:24:94:f6:74:6b:81:
                    0d:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:46:75:83:CC:F4:FC:35:28:6B:EA:E0:BF:4E:EA:92:61:DA:34:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/51b3e376-e396-3765-af46-c792e6c4e2d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:8664::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:e3:85:ce:39:fd:34:a8:4a:40:db:79:68:ae:47:fe:0d:a6:
         05:29:c2:0a:ee:7d:b3:c2:9f:ca:c0:f6:5d:e7:6f:20:49:15:
         ff:df:b0:b7:13:c0:71:58:1a:6e:51:5b:eb:22:d5:21:eb:ae:
         d1:ca:03:b7:f5:33:27:c3:1a:e9:d4:3f:83:27:fd:81:33:7c:
         ea:df:0a:58:90:ed:bd:70:46:28:9b:cb:fb:5c:ca:e8:30:21:
         c4:5b:d4:00:a2:e0:35:5d:94:ec:2c:d6:9d:3a:99:45:bd:c6:
         f0:77:e1:58:23:f1:d4:3b:b2:bb:e1:9b:11:6c:cb:92:86:94:
         95:1f:2f:7c:9c:ae:0a:66:6a:f7:d9:65:af:09:ed:2c:98:31:
         1c:30:a4:47:c2:3a:a4:52:52:cb:ad:58:b5:14:f9:68:25:20:
         6b:85:28:c5:42:5d:62:bb:56:c9:b5:1d:07:bd:83:bd:19:7b:
         28:95:2c:be:71:58:56:ee:5d:b6:b1:c2:34:d7:aa:ae:83:69:
         f8:31:8b:34:e8:09:5b:7c:e3:08:3a:0d:6d:3a:07:7c:19:8b:
         f6:b6:91:94:40:29:a9:e7:84:24:08:62:4c:e2:c0:9b:a6:48:
         07:da:a6:f0:99:72:67:2e:8e:b1:16:6f:96:ea:c0:df:f4:27:
         a1:19:49:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:14:05 2025 by rpki-client