Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/bd08c277-7c3d-35fd-ab38-f5a54cffd910.roa
File:                     bd08c277-7c3d-35fd-ab38-f5a54cffd910.roa (raw, json)
Hash identifier:          bODSIc4fSix+ULEHqAWqKHZtpMWp6RdL/zPx7ZvHPBY=
Subject key identifier:   6F:CF:EA:07:81:4C:D1:F0:0D:B1:B7:9E:2D:20:E7:94:6F:48:90:76
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584B7F524F6D2B46566782DF4840
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/bd08c277-7c3d-35fd-ab38-f5a54cffd910.roa
Signing time:             Sun 12 Oct 2025 13:00:37 +0000
ROA not before:           Sun 12 Oct 2025 13:00:37 +0000
ROA not after:            Sat 10 Jan 2026 14:00:37 +0000
asID:                     33363
IP address blocks:        2605:a401:8009::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7f:52:4f:6d:2b:46:56:67:82:df:48:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Oct 12 13:00:37 2025 GMT
            Not After : Jan 10 14:00:37 2026 GMT
        Subject: CN=cc9d5529-1911-4115-b493-16c37c07587d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f4:0e:b7:30:32:05:38:ae:34:80:7a:7b:ee:
                    bd:68:49:aa:8a:04:5a:f5:ec:a6:36:80:dc:d3:59:
                    13:76:89:96:5d:4a:f1:72:57:29:81:2a:6e:21:4d:
                    d8:91:97:78:7f:f6:07:4e:09:40:91:f7:9d:cf:fa:
                    42:7b:da:44:14:0d:9c:b1:41:ad:5b:0a:06:8b:ef:
                    7b:a3:5b:fe:ed:07:1a:c9:c4:bd:2e:8e:ae:3d:93:
                    79:fc:7e:fe:05:01:c6:60:12:65:41:9f:71:a6:f4:
                    0d:35:aa:50:6a:63:65:c0:48:7d:5e:48:72:ff:a5:
                    cf:b5:64:c6:19:e8:05:cd:66:be:22:52:ef:90:9b:
                    c4:ca:19:6c:5f:c3:a8:7d:0a:2c:91:05:30:ff:79:
                    26:73:c2:3e:4e:fb:22:5a:b0:bd:58:d7:e0:d8:9f:
                    d4:da:58:a0:02:a9:80:de:c6:63:c4:59:6e:8a:fb:
                    7c:16:21:34:63:a0:a8:1e:a7:52:03:d6:1f:70:ee:
                    a3:66:8c:0c:13:7a:38:d9:76:73:0b:1d:ab:38:15:
                    ea:42:a1:c7:b3:e1:05:71:ce:0a:db:3c:81:dc:bb:
                    59:07:e8:b8:9b:0f:22:3a:e7:48:b8:6c:92:7c:d4:
                    3a:06:7d:47:5a:94:f6:9a:d3:4d:22:7d:5b:38:32:
                    9a:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:CF:EA:07:81:4C:D1:F0:0D:B1:B7:9E:2D:20:E7:94:6F:48:90:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/bd08c277-7c3d-35fd-ab38-f5a54cffd910.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:8009::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:39:e4:a0:89:ca:cd:d2:c2:e6:84:1f:85:3e:8c:53:5a:a1:
         0f:2b:a7:d9:33:b5:f0:0d:ad:17:f0:19:36:34:28:4f:be:60:
         1c:9a:9c:c4:e0:80:ce:ae:8d:c1:2b:6b:d4:02:d6:e2:f7:d5:
         75:58:44:80:f0:01:e6:13:9f:3c:6b:d6:fe:67:a8:d0:dd:70:
         0b:d9:7f:1f:7a:e5:bc:2f:b3:b8:f1:96:54:c2:1b:26:14:37:
         93:47:1d:23:01:7c:f8:a2:9c:23:ad:04:3a:1e:f4:b7:0e:5c:
         69:3a:3d:24:1f:91:66:92:aa:c7:88:08:f9:2b:30:e9:d8:82:
         d4:63:fa:98:b0:ab:e2:f4:c7:ec:8c:b9:74:58:2e:85:85:c6:
         c6:0e:c2:e7:fb:18:6b:b5:3f:9c:7b:62:48:7f:10:36:86:bf:
         76:bb:18:2b:c8:f3:27:f4:1f:ba:5e:ae:52:f5:ec:d5:0b:4d:
         81:04:b6:33:6e:da:61:33:07:99:3c:9d:fa:96:b0:4a:22:f8:
         ea:4b:54:c3:dd:e4:6c:1e:73:f6:3b:f9:47:60:c4:71:23:62:
         d8:9a:e9:b3:8e:a7:9d:0d:91:b7:b3:08:1d:09:a2:f0:ae:bb:
         07:99:be:0d:c9:db:e2:4c:a0:4b:ac:1b:3f:c9:eb:f4:dc:44:
         cc:14:34:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:25:23 2025 by rpki-client