Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/04467d97-4061-38b5-9207-71b697628f7f.roa
File:                     04467d97-4061-38b5-9207-71b697628f7f.roa (raw, json)
Hash identifier:          jodmwzwASnBJqNxJ3fCvJ3wyejmtqsskbcc+duaNZig=
Subject key identifier:   F3:61:9B:7D:B3:9F:F7:32:34:08:D5:5F:44:53:D2:F3:F5:22:1C:1D
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584A9E9656D37E13C906869E4AC0
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/04467d97-4061-38b5-9207-71b697628f7f.roa
Signing time:             Thu 24 Jul 2025 01:00:50 +0000
ROA not before:           Thu 24 Jul 2025 01:00:50 +0000
ROA not after:            Wed 22 Oct 2025 01:00:50 +0000
asID:                     33363
IP address blocks:        2607:f098:3200::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9e:96:56:d3:7e:13:c9:06:86:9e:4a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Jul 24 01:00:50 2025 GMT
            Not After : Oct 22 01:00:50 2025 GMT
        Subject: CN=3e003ae5-89d8-4c9c-8140-b873eec728ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:21:74:d4:74:87:34:4e:5b:93:a4:1b:6e:57:
                    42:61:da:5e:00:b6:5d:1f:28:93:95:61:59:60:9d:
                    19:99:10:ec:ae:6b:e8:75:c4:32:78:17:1e:51:ea:
                    bc:09:44:24:45:08:a5:1b:27:62:b6:df:29:2a:3c:
                    7b:19:b7:ae:c9:68:50:cf:b9:8e:00:c5:62:88:93:
                    1c:47:f3:6e:5a:aa:fb:15:20:6e:78:7d:82:86:98:
                    ed:90:80:8d:15:df:1f:aa:53:0a:51:c8:83:67:4b:
                    60:7f:b8:ed:6d:bd:b3:5f:ce:48:69:1b:03:58:53:
                    da:b4:ca:06:2e:37:6f:bb:99:c1:b8:10:02:30:7f:
                    db:10:3c:93:38:7d:59:98:d5:72:9f:62:9d:85:c1:
                    5e:56:bc:7f:4d:88:72:ee:56:60:c4:b7:97:a2:05:
                    42:6f:92:c1:ba:d2:1e:fb:73:d1:47:1f:2c:6b:06:
                    d5:4c:2a:c2:0a:02:d5:85:bb:00:50:d5:39:c8:ee:
                    33:7d:21:82:70:8b:8e:06:df:a2:43:e3:7b:04:b3:
                    aa:5e:c7:2a:e5:7a:87:aa:fe:d9:89:5f:1d:20:ee:
                    a3:7f:47:ce:9d:a3:43:75:b3:48:c2:0a:25:ac:8d:
                    28:d3:30:c6:19:b5:fd:a7:0b:6c:d9:5d:67:91:3d:
                    35:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:61:9B:7D:B3:9F:F7:32:34:08:D5:5F:44:53:D2:F3:F5:22:1C:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/04467d97-4061-38b5-9207-71b697628f7f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f098:3200::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:ec:cd:56:b8:54:9f:b8:ef:bd:df:1a:34:7d:e7:74:0d:7d:
         56:cd:90:cb:cd:3a:ec:e9:aa:6d:5a:46:89:c6:c2:9e:4d:44:
         5a:c3:b5:fa:9b:76:01:70:c6:bd:5c:2f:a6:b5:b9:7a:f0:cd:
         e6:7c:a5:34:17:37:88:40:0d:56:77:4b:f4:ca:cc:a3:a1:09:
         1f:a0:0b:e9:80:25:ff:4a:f0:44:32:bf:d6:82:93:29:d7:d8:
         b4:ac:33:f4:b5:4a:06:a5:06:55:be:06:b2:ed:a2:fc:d0:44:
         f3:ab:3f:70:44:68:20:38:d6:91:da:55:1c:4e:f8:56:29:e2:
         d1:fc:44:8f:67:96:b3:57:37:4c:39:d3:54:85:86:a5:b1:44:
         61:ae:dc:8f:13:7b:47:4e:c8:9f:23:9e:8d:a8:b7:a7:f1:c5:
         c9:41:a8:68:d2:df:74:78:4c:83:60:c9:2f:2a:ee:ab:94:37:
         bb:6e:68:5f:f2:65:e7:f9:e5:6c:94:d9:b9:51:6a:a5:b5:25:
         a9:88:73:17:85:ac:b5:6d:f9:2d:79:e6:2a:d5:19:b0:97:7c:
         13:20:88:41:2d:a6:ce:70:b7:d6:a9:61:a0:fb:dd:ad:1e:0d:
         57:fe:a0:9f:52:35:e1:63:7b:05:7b:fb:a9:8d:b9:8f:32:73:
         78:58:9c:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 22:28:02 2025 by rpki-client