Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/66e675aa-eb27-3078-94db-9ad43cb2659c.roa
File:                     66e675aa-eb27-3078-94db-9ad43cb2659c.roa (raw, json)
Hash identifier:          8FYOjSp/4Vyjfl6SBfXdhYmXkhEHIKotiP/RsFi93xo=
Subject key identifier:   A7:D7:1A:B5:F9:E7:45:BA:57:AB:CD:C6:C5:C5:EB:93:CB:0F:3C:B6
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584B7F5256ACC65A22C0E27D4A80
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/66e675aa-eb27-3078-94db-9ad43cb2659c.roa
Signing time:             Sun 12 Oct 2025 13:00:37 +0000
ROA not before:           Sun 12 Oct 2025 13:00:37 +0000
ROA not after:            Sat 10 Jan 2026 14:00:37 +0000
asID:                     33363
IP address blocks:        2605:a401:2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7f:52:56:ac:c6:5a:22:c0:e2:7d:4a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Oct 12 13:00:37 2025 GMT
            Not After : Jan 10 14:00:37 2026 GMT
        Subject: CN=e365b6db-645d-4d20-8c60-dd136cfa2808
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:6c:04:75:82:75:d2:bc:3e:1c:f7:9a:26:97:
                    3f:0c:15:e8:5e:f5:58:bc:b5:4e:9a:cc:01:65:d7:
                    8e:a5:3b:60:4c:69:e3:98:83:b9:64:20:06:ba:98:
                    24:95:62:8f:b8:e3:16:e0:fa:26:60:07:4e:ca:8f:
                    25:8b:f4:59:d9:d6:bc:88:6d:63:d3:d3:cb:0b:b8:
                    d6:7c:b0:cc:72:39:e8:9e:3a:ab:2c:3f:0c:f7:34:
                    86:f9:f1:e6:0c:14:4c:16:8b:ec:ad:8f:75:e1:f6:
                    af:de:b7:6c:72:e1:12:ce:ba:ad:04:0c:d7:6a:ce:
                    4b:e2:70:08:e9:a7:7d:d1:9e:ac:a9:11:ff:d1:c3:
                    ad:d1:64:f7:50:03:46:dd:6c:e6:5b:92:7c:20:f7:
                    3e:33:e3:71:10:27:32:08:e6:8a:01:35:27:51:f7:
                    ab:8e:02:64:cc:5e:a2:10:b0:ee:3d:2f:a3:f1:dd:
                    4f:6e:36:9b:42:aa:d6:41:8e:a4:3d:90:90:bf:45:
                    04:2f:ab:67:21:65:4c:ef:5f:b2:10:77:34:44:37:
                    ed:82:cd:2c:55:88:41:ac:47:fb:bb:a7:26:cc:63:
                    7f:b0:07:d6:42:11:78:76:38:e1:bb:aa:39:92:3f:
                    d2:05:47:23:35:b7:a9:de:ed:1e:37:59:a3:a5:93:
                    62:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:D7:1A:B5:F9:E7:45:BA:57:AB:CD:C6:C5:C5:EB:93:CB:0F:3C:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/66e675aa-eb27-3078-94db-9ad43cb2659c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:e6:bf:a4:29:0f:e2:41:8a:16:20:88:26:14:01:27:3b:dd:
         da:da:ef:aa:34:b6:e6:b1:64:be:0a:28:a0:b4:22:e9:15:85:
         33:03:88:68:ac:04:af:1b:b9:de:c4:a4:20:e5:1a:73:d0:9b:
         68:fe:21:fe:b1:52:ca:0b:a0:36:0b:c5:bc:22:ce:a5:32:ab:
         39:81:2f:4c:b9:28:b7:94:34:d4:99:f0:8e:48:4d:62:d2:ad:
         01:9c:78:66:73:cf:20:c9:7e:e3:d7:0c:ac:52:ae:06:96:73:
         e1:c7:f7:17:a6:6f:b9:9d:07:96:29:02:76:3d:b1:52:75:0d:
         e3:e8:ab:e9:16:cc:05:80:a7:c2:25:6f:78:6c:1e:fd:34:6d:
         48:d5:a4:5f:ee:09:85:58:c3:47:33:52:36:77:9d:02:9e:0f:
         f5:9d:9a:3a:73:b2:79:2b:79:69:13:5d:37:8b:ef:6f:8a:22:
         3c:70:ea:fa:1f:c2:5f:40:a7:28:d4:89:cc:ab:fc:66:3c:9f:
         41:06:91:4c:a3:fe:52:f9:4f:80:1f:32:77:f4:64:8b:96:37:
         49:30:04:7a:cb:86:8e:96:2a:da:52:93:f7:7f:ae:96:46:ae:
         c0:66:1d:be:51:41:63:a8:d4:3a:5e:08:0d:67:04:93:3f:0d:
         78:d7:e3:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:22:42 2025 by rpki-client