Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/01bdb806-626f-31de-a1ba-3a3cb0785b29.roa
File:                     01bdb806-626f-31de-a1ba-3a3cb0785b29.roa (raw, json)
Hash identifier:          kwEmbmuhSWQJ5CZgQsYIlWL5L0aGMVY9e4/85KJHgOc=
Subject key identifier:   35:33:7B:A3:F8:28:14:C0:7F:71:E2:FA:13:24:7D:8D:39:34:B0:7D
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584A9E96611E1FDAD7D8F2B2DF80
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/01bdb806-626f-31de-a1ba-3a3cb0785b29.roa
Signing time:             Thu 24 Jul 2025 01:00:50 +0000
ROA not before:           Thu 24 Jul 2025 01:00:50 +0000
ROA not after:            Wed 22 Oct 2025 01:00:50 +0000
asID:                     33363
IP address blocks:        2605:a401:84f3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9e:96:61:1e:1f:da:d7:d8:f2:b2:df:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Jul 24 01:00:50 2025 GMT
            Not After : Oct 22 01:00:50 2025 GMT
        Subject: CN=d854f609-16be-4b22-9117-a9b18379ed9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:78:90:ac:ad:18:35:b9:be:e6:5a:8f:d6:ea:
                    02:cc:89:d3:76:95:06:ba:ff:58:fb:d1:b1:01:77:
                    3d:69:2e:7d:99:b9:0e:df:17:37:87:45:7a:23:0c:
                    3a:6b:e7:9e:15:c8:81:97:f5:b7:23:7e:13:6a:a3:
                    f3:be:4f:a7:8f:fc:00:fe:06:77:b6:54:78:99:19:
                    90:91:d5:4a:71:80:c2:78:92:c5:45:70:c5:f3:d6:
                    52:ea:74:b8:34:2e:a0:49:84:4c:91:4d:f6:ca:49:
                    66:0f:86:f4:2d:1e:b0:ec:40:24:78:9e:53:da:63:
                    5b:58:e6:12:13:7c:34:6f:26:ff:76:1b:83:e1:11:
                    dd:04:3a:86:37:12:4d:e0:17:fd:d3:af:0d:83:d4:
                    de:b3:b4:f1:b0:89:56:5b:0a:cb:e5:82:36:b0:43:
                    3d:a4:ad:e2:8a:d3:7a:7a:f3:9f:49:ea:ca:a7:1d:
                    d2:b8:20:5f:94:cf:f2:e6:62:48:b0:9b:a2:b9:51:
                    dc:37:86:e2:30:d3:4e:08:67:06:39:79:89:2b:0c:
                    cd:c1:cb:d0:3b:ec:56:ee:8f:5f:82:bc:d4:86:cf:
                    69:be:00:f8:b4:1a:2e:a7:17:d0:af:f7:2a:a9:09:
                    af:ee:6f:36:81:a7:89:f0:5a:56:54:1b:48:8b:7d:
                    1f:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:33:7B:A3:F8:28:14:C0:7F:71:E2:FA:13:24:7D:8D:39:34:B0:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/01bdb806-626f-31de-a1ba-3a3cb0785b29.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:84f3::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:41:fb:5a:72:ad:5b:30:bb:41:81:d0:7d:a5:60:47:18:e3:
         57:71:2f:be:af:18:cb:e8:1b:9f:85:38:8d:4c:6e:37:d6:56:
         82:a4:f7:00:12:bd:54:34:ec:f3:c9:a8:1e:5a:d1:69:07:4a:
         5d:00:86:ca:20:b3:9c:b0:e8:1c:6c:48:fd:08:38:e5:87:cf:
         11:99:2a:f2:44:46:13:2b:24:0f:ff:7a:b2:78:c0:a0:93:67:
         0c:ca:f4:2a:cb:73:36:9e:61:1d:09:9e:ac:cc:8f:cb:93:fb:
         bf:56:82:98:c6:1c:27:e5:69:24:ef:65:2a:56:49:c2:c4:b4:
         99:43:92:dd:4f:34:76:ee:a5:0c:cd:db:d0:59:b4:71:02:ce:
         4e:b8:9f:b0:ab:35:ab:58:a6:3e:68:7f:36:03:87:4a:30:a8:
         15:e1:3f:d6:79:65:56:86:02:a7:47:5c:52:47:d8:64:01:30:
         fb:34:13:e8:5d:50:0e:e9:5a:d2:4f:36:11:fa:77:31:0f:73:
         c4:2b:23:3a:18:ab:12:6b:e3:69:b6:9a:e5:a4:7d:30:4f:98:
         0f:b5:59:12:43:29:c1:21:eb:85:d1:d6:aa:43:bc:51:c2:87:
         89:65:f3:c1:b5:1c:9c:9e:ac:35:0c:e1:cf:cb:f0:09:7a:cd:
         28:ce:7e:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:32:34 2025 by rpki-client