Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/09a1217d-f368-394b-9070-eae21f9c775e.roa
File:                     09a1217d-f368-394b-9070-eae21f9c775e.roa (raw, json)
Hash identifier:          jOF1JNGMIolwiuA/CDjwiqonSspByxKlqpv6S2MXHdw=
Subject key identifier:   3D:2C:E4:AA:6B:3F:A3:39:C0:90:7E:2C:71:9A:13:20:D5:15:96:79
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584A9E96613E183F4C176AE34400
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/09a1217d-f368-394b-9070-eae21f9c775e.roa
Signing time:             Thu 24 Jul 2025 01:00:50 +0000
ROA not before:           Thu 24 Jul 2025 01:00:50 +0000
ROA not after:            Wed 22 Oct 2025 01:00:50 +0000
asID:                     33363
IP address blocks:        2605:a401:87c3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9e:96:61:3e:18:3f:4c:17:6a:e3:44:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Jul 24 01:00:50 2025 GMT
            Not After : Oct 22 01:00:50 2025 GMT
        Subject: CN=30d42347-69fa-4cd6-bf2c-4d4935950a92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:9c:50:c8:50:37:1b:37:3f:bb:97:f1:71:33:
                    c5:28:80:b9:0f:05:4a:58:7b:6b:40:b7:2a:fc:20:
                    ca:2c:67:a7:0a:15:5c:7f:72:2b:d1:23:85:68:91:
                    08:98:3a:7e:0e:db:79:50:9c:c3:d1:89:0e:9a:ea:
                    fe:28:43:e0:37:8a:ac:f8:0a:79:ba:3e:80:83:55:
                    31:86:a4:42:5c:86:40:c2:ac:45:81:85:49:4c:8f:
                    90:f1:5b:18:21:6b:69:06:81:1e:e4:f5:7b:c6:6d:
                    08:e9:c9:31:d5:f5:2a:e9:ed:17:0c:41:b0:9d:c8:
                    16:06:ac:b7:13:27:e2:4c:72:ec:b1:62:af:fa:8a:
                    6e:34:97:89:c8:17:76:80:45:94:d9:b9:56:c2:d1:
                    ad:75:44:cb:1f:4a:38:72:90:50:bf:18:e6:da:5c:
                    c0:b6:71:34:46:d7:14:ae:4f:b4:f8:eb:2b:7f:ca:
                    3b:1a:dd:f4:3d:dd:5e:00:84:e6:c0:69:7a:c1:b1:
                    ae:08:7e:bf:d8:8f:b6:19:f5:83:ff:d0:8d:1e:91:
                    45:99:16:e2:fa:af:13:10:0f:ae:6d:3f:1e:4c:c4:
                    63:c0:1a:31:65:e9:39:94:bb:60:09:35:97:05:82:
                    47:07:24:6e:5d:75:e0:bc:0e:00:e5:cd:9c:75:bb:
                    79:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:2C:E4:AA:6B:3F:A3:39:C0:90:7E:2C:71:9A:13:20:D5:15:96:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/09a1217d-f368-394b-9070-eae21f9c775e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:87c3::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:d3:0c:a7:37:25:a7:18:34:3b:7c:b1:be:b9:f0:cd:94:aa:
         2e:be:f6:45:a0:ba:c4:8f:43:c7:0b:a1:91:3c:11:78:a5:e3:
         9e:79:4e:7b:cb:ef:98:1d:1c:3b:92:23:c3:94:1d:ab:47:37:
         2a:d8:8e:ea:00:7e:30:db:e4:8e:44:10:34:78:bc:d8:ab:50:
         0b:a3:15:fb:a4:a1:8d:c9:0c:62:af:52:29:11:34:74:3f:bb:
         37:50:fa:5c:d0:6a:68:5d:a2:ad:38:3b:c9:34:7d:94:6c:78:
         00:b5:d7:d8:a2:a1:2a:ff:38:fa:07:ec:93:15:58:74:c8:8a:
         e0:12:03:f0:c6:c5:12:2b:89:86:8e:c4:67:4b:11:05:18:27:
         5f:3c:55:2e:d7:a1:2e:f7:7b:64:33:5e:92:44:cc:7c:64:e9:
         7b:4b:2f:e5:39:2e:b7:98:9f:0a:dc:f4:62:a4:33:b2:0e:94:
         cb:cc:f6:74:15:1e:e7:08:de:5e:d0:73:f6:8f:67:6f:c8:be:
         89:4c:85:2e:9c:0c:d7:c3:b4:6d:7f:c5:a6:3b:4e:66:b9:5c:
         20:06:dc:37:8a:a3:14:e7:18:90:d5:00:47:92:49:50:1b:3a:
         48:bb:38:71:6c:70:ca:30:9f:3e:2b:5c:db:48:86:86:4b:71:
         3d:2c:08:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:08:31 2025 by rpki-client