Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/ff755af3-d6f0-3895-8754-223c615724be.roa
File:                     ff755af3-d6f0-3895-8754-223c615724be.roa (raw, json)
Hash identifier:          Iphmwu4pYpzEgO2SOVXrF90rNQMJ+JaFITjhD6Ft8Yg=
Subject key identifier:   64:E1:DC:39:FD:48:CB:EF:C5:F5:34:B7:19:EE:D6:6D:22:50:23:BE
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584B7F522BD8CB4BE3D400F36700
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/ff755af3-d6f0-3895-8754-223c615724be.roa
Signing time:             Sun 12 Oct 2025 13:00:37 +0000
ROA not before:           Sun 12 Oct 2025 13:00:37 +0000
ROA not after:            Sat 10 Jan 2026 14:00:37 +0000
asID:                     33363
IP address blocks:        2605:a401:8245::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7f:52:2b:d8:cb:4b:e3:d4:00:f3:67:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Oct 12 13:00:37 2025 GMT
            Not After : Jan 10 14:00:37 2026 GMT
        Subject: CN=641262a9-630d-4fac-8713-80822d65ed62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:35:be:6a:1c:a9:c1:a5:a7:e9:fe:09:cc:c6:
                    e6:ce:4a:61:a4:a9:27:f8:bc:d7:09:97:fc:b8:85:
                    db:70:1b:1a:c7:2a:af:ee:b8:6a:06:96:27:b9:24:
                    84:33:36:d9:a6:56:db:2c:51:54:49:55:a8:79:59:
                    fa:a6:0f:eb:c7:54:59:3f:a6:35:17:eb:15:41:c6:
                    9d:cd:8c:3f:d5:60:7b:5e:2a:85:8b:d7:b1:bf:5a:
                    02:71:c7:cb:00:0c:07:39:be:fe:eb:fe:0b:3e:3f:
                    a9:9d:2f:22:99:8c:5b:3e:c9:41:c3:4e:b2:8d:5b:
                    12:31:c6:86:3a:46:4d:59:6d:77:0f:31:40:6c:8f:
                    aa:e3:17:fe:f9:28:f4:15:5b:ae:bb:80:25:67:fa:
                    e6:48:90:19:d3:24:ff:36:e3:86:99:6c:0f:d7:af:
                    73:be:d4:f3:ee:bd:6c:b1:34:16:b1:2d:06:d5:04:
                    a4:54:81:cc:da:ab:40:bb:fb:27:8a:26:92:c5:50:
                    09:5a:67:8f:5b:d2:b1:04:57:c7:9d:14:c1:db:b4:
                    f5:5f:05:cc:fc:b5:a2:60:cf:d6:a4:35:eb:be:79:
                    f0:7e:74:15:25:65:8d:c2:31:91:be:15:a7:2b:38:
                    19:e9:79:f2:07:6c:34:01:5e:e1:8b:4e:7d:f5:f3:
                    30:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:E1:DC:39:FD:48:CB:EF:C5:F5:34:B7:19:EE:D6:6D:22:50:23:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/ff755af3-d6f0-3895-8754-223c615724be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:8245::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:3f:89:80:db:bb:ff:28:46:9f:d6:aa:5c:8e:3a:57:a4:0a:
         56:0b:11:a1:c1:00:69:eb:43:48:a6:a7:18:20:22:e9:74:39:
         c7:20:d4:e5:3f:08:b4:bd:d9:d8:fd:bd:c2:9b:27:b9:49:3e:
         a8:7d:ce:b3:00:e8:4c:60:56:c9:14:8f:d4:ec:dd:8d:ba:63:
         4c:5a:33:a8:93:90:01:97:29:fe:dc:c9:42:12:cb:e0:c7:7f:
         60:3f:25:44:f4:d4:7e:0b:9c:7c:de:19:54:6b:1e:99:81:c6:
         3b:f8:6f:ef:db:e4:6e:ee:68:39:1a:67:c0:54:48:6d:31:b2:
         8f:b0:c4:56:55:65:94:cc:0d:84:dc:23:dd:28:51:a0:41:64:
         30:be:a9:a5:ec:78:90:50:83:bc:c9:54:78:a6:82:0b:13:c8:
         0e:2c:9d:2a:5e:34:f4:7e:54:60:da:13:b9:8a:94:15:14:84:
         d9:37:74:ae:be:44:f4:85:02:8d:26:07:2a:44:c2:e5:ab:ed:
         d3:14:10:89:72:7f:65:ad:c1:ad:6f:61:61:4a:80:5c:fe:9a:
         b7:62:5c:17:c0:9c:12:7b:d7:24:b2:0d:1d:32:a3:fa:e0:93:
         49:a6:30:0b:6d:68:c6:62:42:15:e3:cd:e0:2f:5e:ad:f1:2e:
         0b:55:6d:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:44:48 2025 by rpki-client