Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/0709058c-ef7e-3670-9594-a367055ddd09.roa
File:                     0709058c-ef7e-3670-9594-a367055ddd09.roa (raw, json)
Hash identifier:          uIRY5BznSUKyyt4nRsxlzuGDCOR2+VBmQgouauvmQyM=
Subject key identifier:   21:67:F6:40:46:AB:5B:DD:84:40:0A:49:51:BC:1D:F9:D6:81:D5:73
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584C5EC6E6A7989D35BB4F5D1780
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/0709058c-ef7e-3670-9594-a367055ddd09.roa
Signing time:             Wed 31 Dec 2025 14:00:38 +0000
ROA not before:           Wed 31 Dec 2025 14:00:38 +0000
ROA not after:            Tue 31 Mar 2026 13:00:38 +0000
asID:                     33363
IP address blocks:        2605:a401:8122::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:5e:c6:e6:a7:98:9d:35:bb:4f:5d:17:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Dec 31 14:00:38 2025 GMT
            Not After : Mar 31 13:00:38 2026 GMT
        Subject: CN=de0e3db7-a89e-4138-9bec-e9c1a365149c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:72:92:b0:ee:00:b9:a5:7f:a7:c6:f4:a3:b9:
                    07:fa:6d:02:ad:06:22:b3:c2:96:96:39:9d:fe:a8:
                    ce:96:2e:65:32:0e:07:01:b0:98:c9:ad:aa:51:15:
                    43:90:78:9c:38:c3:9e:d2:e9:2a:36:f7:72:78:ac:
                    d8:0e:8c:8c:f6:6e:0d:79:e9:ba:70:ac:51:41:1b:
                    ba:69:d1:05:ca:19:93:61:07:91:44:cc:45:f3:80:
                    74:0a:6f:c7:11:12:c8:d6:c4:07:6c:69:3c:36:d5:
                    fa:a9:4e:c1:40:d0:95:7a:b1:5b:59:92:59:62:df:
                    be:10:76:fa:83:06:d6:94:3d:47:37:bd:37:65:48:
                    f7:88:07:5e:bd:ce:25:69:ab:a7:0d:09:53:0a:9a:
                    27:db:30:c6:39:9b:26:b8:9f:a7:97:10:39:ad:1b:
                    36:24:0c:97:85:1a:69:65:80:b4:8a:42:ad:90:7e:
                    1d:bf:2c:72:12:2d:55:77:9d:c6:dd:18:f6:9b:53:
                    e5:d4:b5:e5:34:5e:9b:61:3c:5b:d2:bb:4a:f1:c3:
                    85:28:77:86:d1:e0:62:36:ec:52:b5:67:c8:93:65:
                    b4:3a:8d:d8:27:6d:9b:ca:f1:f2:5c:30:e7:51:c0:
                    05:83:ba:72:a5:1e:16:42:92:16:75:66:e6:cc:ff:
                    c7:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:67:F6:40:46:AB:5B:DD:84:40:0A:49:51:BC:1D:F9:D6:81:D5:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/0709058c-ef7e-3670-9594-a367055ddd09.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:8122::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:4b:c9:eb:59:06:03:c0:d3:58:82:b6:09:c3:6b:04:51:71:
         10:81:bf:7b:e9:be:9a:d1:f8:b4:fc:a9:b6:7c:3f:41:72:7a:
         a9:f7:81:45:5d:98:1c:c6:e5:20:08:3c:69:8d:78:6a:fb:6f:
         0d:b2:ca:77:90:84:92:ec:b6:f2:28:41:82:28:71:03:c1:df:
         1c:4e:4a:bb:75:19:0c:7e:62:77:e1:1c:34:39:f1:eb:cc:15:
         06:1d:5e:54:52:8c:95:27:92:03:62:62:0b:30:ca:9f:8e:70:
         76:bd:93:15:e2:68:0d:03:ad:cb:c9:a7:07:19:6e:a1:27:91:
         da:0f:79:7e:89:5d:ce:d0:db:cf:bd:b7:66:14:5c:1a:2d:19:
         f6:4d:9c:68:bd:ef:d0:a6:c6:54:1a:35:6a:e7:00:a9:71:d0:
         fd:a5:32:a4:8f:06:13:c2:75:f4:c5:8f:96:54:76:a3:10:a7:
         92:b7:53:26:d1:cd:65:f0:4e:b2:d0:da:5d:5d:23:0c:2e:6b:
         13:cd:06:a2:91:dc:af:00:fd:03:70:3c:4e:e7:74:48:96:82:
         83:b2:dc:c0:dd:62:9d:0d:24:61:2c:79:01:27:02:04:d6:34:
         7d:f3:ee:70:3b:0f:ae:e9:d8:75:0a:ca:59:c0:7f:d0:2d:d0:
         79:38:6f:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:15:02 2026 by rpki-client