Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/df8aece4-a6c4-3b9f-ac67-f606ca12b436.roa
File:                     df8aece4-a6c4-3b9f-ac67-f606ca12b436.roa (raw, json)
Hash identifier:          txXdRxo2Qa/aYa5rMPeJYRo1Po6GEdUHbkVxoUZt/Io=
Subject key identifier:   2C:E2:42:D7:1A:11:A7:A8:8C:A8:C3:D5:33:AE:91:BC:75:EC:A3:3B
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584B7F5259B96A16471918586F00
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/df8aece4-a6c4-3b9f-ac67-f606ca12b436.roa
Signing time:             Sun 12 Oct 2025 13:00:37 +0000
ROA not before:           Sun 12 Oct 2025 13:00:37 +0000
ROA not after:            Sat 10 Jan 2026 14:00:37 +0000
asID:                     33363
IP address blocks:        2605:a401:83eb::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7f:52:59:b9:6a:16:47:19:18:58:6f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Oct 12 13:00:37 2025 GMT
            Not After : Jan 10 14:00:37 2026 GMT
        Subject: CN=c3a9e23a-7f01-4af1-89ac-40da9ca2469b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:e1:4b:57:94:db:75:48:40:58:58:9c:b0:ab:
                    41:38:c9:22:d8:fc:df:54:9f:85:5f:c1:f7:09:42:
                    5f:13:8b:b2:48:d1:4a:39:06:7c:7d:6b:b1:51:81:
                    a3:12:52:cc:44:70:80:24:2d:b0:9b:f2:70:22:1e:
                    9a:f7:08:70:f4:10:a7:9c:c3:cb:d0:45:72:10:1a:
                    79:8b:a7:98:3f:bd:4d:3a:ee:3d:6c:79:98:16:96:
                    43:3a:d3:f1:3f:82:00:25:44:a1:6e:8f:dc:1a:f8:
                    d5:4e:fa:fe:97:32:5f:89:4b:0d:f2:94:bc:d6:72:
                    93:69:b8:3f:52:08:bf:03:43:ee:fb:81:6f:8e:89:
                    8d:f2:38:2d:9a:73:18:96:b8:1c:ac:90:09:ed:f7:
                    9e:8d:03:19:3b:d6:de:aa:f3:b3:58:9d:66:33:24:
                    fb:54:43:cf:e9:7f:e4:03:80:cb:73:d6:43:01:23:
                    9f:5c:82:da:f1:9b:ff:16:cd:3b:ab:60:a3:11:02:
                    f8:18:a0:70:3e:7e:c4:b1:88:66:a5:66:bd:70:bb:
                    11:3b:b5:e0:54:64:3e:1f:c9:93:4d:ce:bf:13:03:
                    8a:e6:55:df:75:27:83:fa:bb:43:f0:70:63:10:1d:
                    25:65:fd:82:57:d3:e1:7c:e7:70:98:e2:3e:29:2d:
                    5d:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:E2:42:D7:1A:11:A7:A8:8C:A8:C3:D5:33:AE:91:BC:75:EC:A3:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/df8aece4-a6c4-3b9f-ac67-f606ca12b436.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:83eb::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:c1:cf:1a:94:d4:ad:ed:49:0f:2b:03:f5:c9:15:e2:e3:0f:
         15:cc:e2:59:7d:af:e7:10:ec:d3:e2:84:d4:90:b4:67:2d:46:
         d5:11:8b:aa:8d:f6:fd:3c:4d:7a:06:2b:d4:6c:af:56:42:9b:
         5c:b2:98:a2:af:2c:fa:97:d7:92:89:62:3f:36:1a:66:0b:87:
         58:53:c0:d2:6f:e9:db:14:56:55:a6:ac:19:94:d8:91:03:3b:
         f2:6b:d4:1b:07:9a:00:07:a7:2f:d4:20:30:2a:f4:7c:af:38:
         7e:a2:db:d9:9d:86:53:a5:0b:52:f0:fd:ea:04:d1:ca:ed:c2:
         c6:7d:2a:a2:9e:cb:76:30:bc:c8:ce:f1:65:8b:eb:b8:ac:89:
         fb:46:d3:5e:1c:42:ae:50:6c:db:eb:7e:f4:93:92:1f:01:07:
         42:44:59:3f:65:d9:f4:c7:fc:e7:01:44:35:4e:d9:e7:cc:a5:
         a8:49:be:d3:27:78:26:fe:01:3a:a3:6f:d7:92:36:53:58:9f:
         a4:36:40:db:93:4b:b3:4a:31:f2:84:ea:38:a3:7f:09:7e:d3:
         94:40:ca:e9:f8:13:56:96:76:f1:15:58:1e:80:23:30:d3:54:
         84:41:a1:87:76:8d:1f:6f:8d:84:f6:bf:86:7c:c3:c7:e6:ad:
         5d:c0:f1:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:17:53 2025 by rpki-client