Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d6c5f03d-16e8-3141-ad2f-dcd92866ea02.roa
File:                     d6c5f03d-16e8-3141-ad2f-dcd92866ea02.roa (raw, json)
Hash identifier:          bPUnR8TWclSYUr1j8Gtnd8S8kUHUMAetkiQtUVM7m+M=
Subject key identifier:   88:1A:E6:C0:29:1B:61:01:57:B6:0B:68:0A:8F:32:83:BE:01:EF:3E
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584B7F5251D6A308A7D91283A580
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d6c5f03d-16e8-3141-ad2f-dcd92866ea02.roa
Signing time:             Sun 12 Oct 2025 13:00:37 +0000
ROA not before:           Sun 12 Oct 2025 13:00:37 +0000
ROA not after:            Sat 10 Jan 2026 14:00:37 +0000
asID:                     33363
IP address blocks:        2605:a401:80c1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7f:52:51:d6:a3:08:a7:d9:12:83:a5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Oct 12 13:00:37 2025 GMT
            Not After : Jan 10 14:00:37 2026 GMT
        Subject: CN=d7ed3a52-c61c-41f6-9548-f9cfb28f944c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:9f:a7:3d:57:bf:87:29:a3:66:9d:ee:09:00:
                    9c:48:25:85:98:21:78:12:fd:8d:b5:07:7d:46:5b:
                    35:87:9d:d7:bd:f3:80:7a:fc:16:90:a8:fd:07:3e:
                    56:62:ab:61:8b:14:d0:ac:e3:f8:eb:f2:9a:2a:ba:
                    d3:68:9f:89:63:17:3f:93:b8:bf:89:c3:2b:5a:5d:
                    8d:c7:60:1e:2e:51:5f:66:a9:9a:ec:1f:64:d7:18:
                    da:1a:90:0b:1d:a5:11:10:9b:6e:a8:32:fc:3a:3d:
                    2e:5c:61:d2:93:12:bb:db:84:f3:43:30:fe:cc:00:
                    c6:8f:e2:ea:47:3f:a4:1d:dd:e5:96:83:31:52:a3:
                    9e:05:ac:6c:de:a0:2a:71:6e:7d:50:d9:86:72:52:
                    31:f6:59:39:f3:5c:f5:dc:17:81:5c:35:79:a7:c0:
                    d7:94:d4:31:45:56:35:10:bb:4c:28:ff:31:96:d3:
                    d0:59:0f:f6:c3:14:4a:3f:7c:65:ca:73:5e:15:5b:
                    d3:97:95:4f:20:01:d5:34:01:af:f0:87:15:18:25:
                    dd:4d:5d:28:cb:e9:5b:4f:96:1e:24:07:ff:3f:94:
                    dc:34:cf:c0:67:82:dd:76:b2:05:f0:b0:f7:94:6f:
                    ba:ec:8c:87:2b:b7:41:97:07:1f:30:b6:77:eb:1a:
                    58:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:1A:E6:C0:29:1B:61:01:57:B6:0B:68:0A:8F:32:83:BE:01:EF:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d6c5f03d-16e8-3141-ad2f-dcd92866ea02.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:80c1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:89:7e:c4:0b:28:fe:cb:10:bd:46:69:34:47:1d:65:04:ad:
         8e:3d:65:c5:7c:b9:5d:85:c5:8c:a5:58:9c:07:f9:d9:3a:2b:
         59:94:fc:f5:01:40:4e:ac:49:0a:31:27:d5:b2:31:c7:7e:18:
         13:e5:9e:8f:56:f0:ed:4b:5a:ce:01:ab:6b:f7:02:15:83:f9:
         74:bc:a5:10:4f:5f:7c:11:11:06:38:3d:be:09:19:31:0a:67:
         92:e8:62:ce:66:5a:e4:0a:91:5c:3f:b5:f4:2b:23:27:a9:e0:
         24:f7:0d:c7:b7:49:86:32:14:05:6e:a9:24:8c:21:8d:6c:9b:
         fa:b7:fb:60:b6:d4:12:30:f9:81:90:c7:98:55:a7:e3:c6:e2:
         2c:42:8c:74:72:4b:6f:cb:83:c9:14:03:44:be:21:08:c6:93:
         4b:3e:be:e0:e2:a7:c3:19:51:4b:d9:63:4e:ac:01:78:46:43:
         e0:e8:1c:b6:d8:fa:2b:e3:ec:d8:23:fe:ac:f1:6f:ca:38:ee:
         28:1c:da:61:00:31:4a:87:85:97:e6:35:f0:7e:d8:14:44:5a:
         48:a8:ee:01:d5:8d:bb:25:87:9d:24:4f:e2:d0:e9:84:e2:9a:
         ee:06:22:31:aa:0a:ba:7e:57:d5:93:30:a6:15:14:f0:d6:cc:
         f8:35:43:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:25:07 2025 by rpki-client