Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/93eb17c7-c47b-3fdd-a0cc-a3d0898ed6d8.roa
File:                     93eb17c7-c47b-3fdd-a0cc-a3d0898ed6d8.roa (raw, json)
Hash identifier:          LBh5SWsRftpT+fubUwi1BxW+dejC/Nj4+A+x0gnA2Bo=
Subject key identifier:   02:D0:CA:71:A4:63:E4:E2:1C:BA:87:3C:EF:5F:1F:3D:B2:1C:56:EB
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584B7F52525D15D68F5BB9688680
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/93eb17c7-c47b-3fdd-a0cc-a3d0898ed6d8.roa
Signing time:             Sun 12 Oct 2025 13:00:37 +0000
ROA not before:           Sun 12 Oct 2025 13:00:37 +0000
ROA not after:            Sat 10 Jan 2026 14:00:37 +0000
asID:                     33363
IP address blocks:        2605:a401:80f2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7f:52:52:5d:15:d6:8f:5b:b9:68:86:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Oct 12 13:00:37 2025 GMT
            Not After : Jan 10 14:00:37 2026 GMT
        Subject: CN=09c34bf3-e0e1-4f51-b099-689c03ccb88d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:17:c5:b6:6a:0d:d6:ae:9f:63:45:c9:97:04:
                    e6:f5:d6:b9:f7:d2:a3:d7:6d:bd:e7:9b:32:b7:14:
                    d0:e1:96:af:5e:c7:3c:f8:fd:bc:9b:ce:d7:60:57:
                    0e:7b:06:3f:70:d0:d6:9c:e9:ed:cd:77:7c:5f:61:
                    6a:dc:79:e1:56:8b:17:42:1f:fa:3e:54:67:8f:99:
                    ad:bc:8c:c7:44:f4:6c:1e:e1:af:73:b4:22:85:9e:
                    72:30:50:db:af:f9:a1:e3:80:c1:4b:1b:31:e0:ff:
                    a1:b4:7e:6d:fa:bb:83:f4:f7:97:ce:1d:ac:9b:58:
                    f1:a0:b0:e1:eb:4a:64:08:47:80:80:7b:ed:79:17:
                    dd:1d:59:cf:e0:f7:d0:3c:71:3a:f2:db:70:4c:49:
                    b4:bb:2e:18:ab:8a:13:d3:b6:1b:2d:b6:ce:3f:91:
                    84:fe:eb:7f:a7:e8:80:f8:89:b9:be:eb:88:df:f1:
                    ff:17:98:76:9f:7c:ad:7b:9a:62:76:2a:79:d7:c7:
                    13:6b:41:2d:dd:26:50:f6:39:98:16:97:c5:06:08:
                    89:84:0b:b4:84:9b:6c:d1:ea:39:90:88:86:a0:82:
                    62:0c:fe:37:dd:ca:61:0f:42:5b:e8:3e:0c:ff:b7:
                    c3:d2:29:0b:4d:d1:1e:ec:50:74:4b:56:ff:75:ff:
                    68:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:D0:CA:71:A4:63:E4:E2:1C:BA:87:3C:EF:5F:1F:3D:B2:1C:56:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/93eb17c7-c47b-3fdd-a0cc-a3d0898ed6d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:80f2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:c8:31:8e:6a:3d:23:4f:8f:03:e0:d2:74:e2:d5:40:f8:c9:
         17:73:91:e2:e6:57:0f:47:70:f6:11:bf:eb:1b:12:f5:39:5c:
         95:96:b1:4b:1d:0a:c7:95:5f:29:5b:36:f7:43:9f:f2:80:79:
         bb:fc:df:6d:37:1e:42:5d:b4:56:ec:79:74:5e:97:74:4c:bf:
         8e:0b:a5:a2:ab:1d:b4:e1:c3:9b:30:e8:a0:c6:a2:e5:9d:e2:
         8c:b8:37:98:e4:69:a3:4b:0a:00:e0:d2:b6:58:6e:f2:23:bb:
         2e:7f:e9:46:5f:2b:90:24:e8:01:30:53:53:71:8c:39:d9:31:
         88:90:bb:ea:92:62:c8:e8:e7:52:59:be:74:37:3e:6a:30:df:
         d2:58:cc:a4:78:24:a6:4b:cc:ac:68:4c:cb:7d:ff:a2:1f:e7:
         50:e9:6b:5e:1c:59:0b:89:e4:41:c0:65:bd:22:81:29:0c:8f:
         d4:17:24:30:76:3e:53:fd:5f:35:df:14:5d:66:ec:03:b8:b4:
         4c:16:06:3d:c5:46:ea:91:f0:40:ea:8b:86:a1:e1:63:6b:47:
         02:1d:43:7a:1b:2c:c7:d4:ab:77:a7:3e:73:82:79:9f:c0:c9:
         7b:39:9a:89:b5:25:79:ec:2e:b0:7a:c4:77:8c:9f:e8:e0:6f:
         d9:3a:cf:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:07:05 2025 by rpki-client