Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/c92b77a6-1e38-3adc-bdee-17ae8b3108dd.roa
File:                     c92b77a6-1e38-3adc-bdee-17ae8b3108dd.roa (raw, json)
Hash identifier:          u4kmzGfHomhWU5aw8VVgw52aAzNnSo7XPCxNV6vchq8=
Subject key identifier:   C4:76:4B:1C:8A:30:05:76:58:38:15:B8:C2:EA:72:89:F8:FF:3A:9D
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584B7F522DE4FD366E7F999D5400
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/c92b77a6-1e38-3adc-bdee-17ae8b3108dd.roa
Signing time:             Sun 12 Oct 2025 13:00:37 +0000
ROA not before:           Sun 12 Oct 2025 13:00:37 +0000
ROA not after:            Sat 10 Jan 2026 14:00:37 +0000
asID:                     33363
IP address blocks:        2605:a401:8b12::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7f:52:2d:e4:fd:36:6e:7f:99:9d:54:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Oct 12 13:00:37 2025 GMT
            Not After : Jan 10 14:00:37 2026 GMT
        Subject: CN=0c93b28d-af76-492f-9fcb-bcf13e4c8151
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c8:48:60:ba:23:72:7f:61:83:de:98:bc:e2:
                    29:30:0f:98:8c:4f:43:60:43:44:d5:dc:9f:75:3c:
                    64:79:4e:28:d5:9e:49:89:cb:b4:7d:38:27:02:60:
                    7e:39:dd:4c:28:eb:e8:3b:25:db:0f:da:8c:06:e7:
                    bc:90:01:1d:98:9e:56:ff:52:c4:f9:cc:99:fb:4d:
                    86:f5:9d:72:3f:12:d7:c8:1e:f3:cb:d6:69:bd:dc:
                    00:c4:13:31:62:8b:5d:08:3b:f2:ec:b9:40:b3:5e:
                    f9:36:1d:f0:d4:49:7b:67:28:24:96:80:c5:4d:38:
                    44:63:bd:20:58:42:83:90:d5:84:e4:ac:00:3c:3e:
                    8a:80:c3:41:d4:fe:ba:ba:c3:e1:f2:11:c9:ba:02:
                    12:d2:f8:8e:09:59:8a:a6:c6:f3:e6:79:33:25:89:
                    24:0f:aa:3f:58:48:e1:76:1b:03:e7:34:14:73:14:
                    e7:85:fb:b7:7e:34:9e:ff:2d:34:cd:61:9f:a5:16:
                    94:b1:82:9a:99:cf:d3:d1:0b:cc:50:96:67:e6:41:
                    1d:62:f5:bf:22:0e:b4:bd:34:9f:72:95:b1:13:cf:
                    68:86:de:7d:c4:94:f9:26:61:0f:e7:c9:7d:04:66:
                    de:6e:8e:08:3a:81:1b:bc:82:40:c7:fd:99:04:0b:
                    3b:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:76:4B:1C:8A:30:05:76:58:38:15:B8:C2:EA:72:89:F8:FF:3A:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/c92b77a6-1e38-3adc-bdee-17ae8b3108dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:8b12::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:d0:e5:30:71:7b:b4:29:0f:97:e7:be:83:f1:49:45:d3:9f:
         50:6d:c5:bb:89:ef:51:4c:4d:5c:5b:13:8d:bc:ab:7b:6a:7b:
         18:ba:28:93:68:4a:0e:b5:d8:80:4b:17:b5:bd:17:20:89:61:
         b5:2d:21:44:2b:23:11:fc:9c:f2:06:3c:f1:6c:a1:79:27:4d:
         b7:ee:22:19:1d:d4:b8:49:56:1e:64:77:fa:90:46:19:6e:86:
         84:27:47:26:b0:65:26:77:84:01:43:1c:67:6c:af:3f:a8:ec:
         74:e3:a1:e3:2f:b6:78:58:24:5a:1c:a5:19:9c:c6:6e:ee:96:
         cc:46:c3:97:3e:f8:25:28:cb:fc:3f:6f:29:05:ec:38:82:43:
         78:80:1a:90:f9:0a:ea:59:a8:d7:69:b6:d7:fd:c6:73:e1:4e:
         05:4e:68:f5:c9:b9:4c:2e:44:05:92:73:5d:b5:f4:3d:15:f4:
         22:66:17:0c:11:96:bf:34:12:3b:23:8d:e3:89:e2:41:23:c9:
         16:ba:2f:11:75:75:f5:1f:ec:a8:39:b1:a8:88:46:ec:01:6a:
         1f:f7:a3:4c:34:b2:a2:98:e9:02:c9:97:23:b7:b5:93:2b:27:
         e8:3a:f0:ad:1a:e3:b1:ef:de:e8:01:ef:f2:7e:81:23:9f:83:
         5c:d5:39:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:17:19 2025 by rpki-client