Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/db811f0d-eca8-3f2e-8f3d-70ff67a7ea58.roa
File:                     db811f0d-eca8-3f2e-8f3d-70ff67a7ea58.roa (raw, json)
Hash identifier:          YqF9yzXljK/gm6DTnIuokRD5JKXv2j/n7b4SWaLOHI4=
Subject key identifier:   9E:5D:39:DB:AA:1E:7C:A6:D6:A5:B0:A9:12:FE:B6:68:65:27:8C:10
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584B7F5255A217FC9548BFFF3480
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/db811f0d-eca8-3f2e-8f3d-70ff67a7ea58.roa
Signing time:             Sun 12 Oct 2025 13:00:37 +0000
ROA not before:           Sun 12 Oct 2025 13:00:37 +0000
ROA not after:            Sat 10 Jan 2026 14:00:37 +0000
asID:                     33363
IP address blocks:        2605:a401:840e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7f:52:55:a2:17:fc:95:48:bf:ff:34:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Oct 12 13:00:37 2025 GMT
            Not After : Jan 10 14:00:37 2026 GMT
        Subject: CN=ea278501-d5fc-4505-ba99-78ed2be7b35c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:cb:df:f7:2e:99:0f:60:9f:f4:1a:d3:5e:72:
                    ba:91:4d:72:61:d0:57:46:5f:d5:0b:97:dc:3b:68:
                    29:d5:47:2f:04:34:33:85:e1:97:1c:26:c1:8a:05:
                    0a:ce:84:b9:18:f6:b3:c1:77:01:13:c6:28:dd:e6:
                    3c:40:a4:07:bf:87:0d:01:ea:97:bb:4a:88:d2:89:
                    c4:c6:c7:7b:7f:c6:74:14:35:a2:81:d6:8d:04:3f:
                    56:42:6c:b8:7c:51:fe:f1:8d:8f:d6:86:14:11:a2:
                    e8:b9:f2:6f:32:f6:5a:14:d0:6d:35:a6:bc:51:c4:
                    d0:cd:57:0f:ca:ff:49:95:82:b5:71:34:37:01:ca:
                    d2:9e:85:6f:c5:63:1e:cb:03:8c:24:f8:2a:86:d9:
                    6d:1c:2e:54:78:0d:f9:31:a9:6a:10:0d:6a:41:30:
                    cc:24:ee:32:e1:4e:bd:7c:c6:57:7a:65:57:4a:a6:
                    7c:4a:0a:33:89:4b:3d:91:a2:6c:1d:1d:db:e8:b9:
                    be:2a:c6:32:a5:a6:28:9e:f8:ba:1b:09:0a:28:1c:
                    dc:c7:c5:9a:b0:be:35:18:eb:d8:06:e0:98:be:af:
                    3d:bd:ab:57:dd:92:c5:7e:64:c9:83:11:af:db:ec:
                    47:3d:48:f0:43:66:b6:96:49:f1:fb:c2:52:3b:c6:
                    b2:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:5D:39:DB:AA:1E:7C:A6:D6:A5:B0:A9:12:FE:B6:68:65:27:8C:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/db811f0d-eca8-3f2e-8f3d-70ff67a7ea58.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:840e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:64:eb:76:71:8f:ae:89:c7:cb:59:ab:f6:b0:a5:9a:fc:04:
         9a:44:3c:fe:59:17:5b:de:03:93:a9:51:a6:35:9f:fc:a7:d1:
         3b:96:37:58:fb:40:fc:98:6f:40:4e:bc:d5:bb:56:8e:8e:79:
         a1:fa:f8:1b:57:ea:e4:f7:0a:5b:ea:52:5d:22:e9:ce:9f:32:
         74:9c:89:38:f9:3e:73:54:87:45:d4:f1:56:9b:da:48:ed:b5:
         20:d9:00:2e:a9:fc:60:64:88:11:22:f7:c9:af:c3:d7:64:79:
         c2:3e:1f:a9:94:0e:5c:1d:8d:5f:26:71:14:75:39:16:8b:df:
         e9:63:e1:fa:72:bf:7f:54:f4:64:3c:47:bf:c1:26:d8:8a:d1:
         bb:c3:71:29:a1:ff:33:b0:4c:d4:cd:cf:74:61:38:c0:3a:e7:
         25:04:73:ab:15:dd:78:8b:2f:07:21:64:fa:c9:bb:17:2b:4e:
         86:7d:11:d4:f7:f9:d8:e6:39:91:fe:c7:e4:a3:32:b3:6c:6e:
         9d:0b:cc:60:78:1c:9e:37:e4:ec:a7:fa:6b:62:2f:a8:1b:37:
         92:bc:7e:34:9f:a9:10:25:73:b0:5a:ab:3a:b0:f6:44:cd:28:
         31:c2:9b:ab:52:4b:04:d8:a8:00:3b:12:35:58:28:dc:af:14:
         7f:e3:e1:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:17:56 2025 by rpki-client