Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/0c693926-6eee-3934-8fbd-f75a479cc8af.roa
File:                     0c693926-6eee-3934-8fbd-f75a479cc8af.roa (raw, json)
Hash identifier:          aMEyfvrTnilqUwvsXJKb6j+qh/w4qeoovNRvi5Utqxc=
Subject key identifier:   FD:79:17:D9:44:BD:01:93:E4:B9:E7:45:F7:10:CF:15:B6:71:04:4E
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584A9E962FF4AB866768B04EA4C0
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/0c693926-6eee-3934-8fbd-f75a479cc8af.roa
Signing time:             Thu 24 Jul 2025 01:00:50 +0000
ROA not before:           Thu 24 Jul 2025 01:00:50 +0000
ROA not after:            Wed 22 Oct 2025 01:00:50 +0000
asID:                     33363
IP address blocks:        2605:a401:8384::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9e:96:2f:f4:ab:86:67:68:b0:4e:a4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Jul 24 01:00:50 2025 GMT
            Not After : Oct 22 01:00:50 2025 GMT
        Subject: CN=fa717194-1ecc-49a8-b685-f7d2a7739b47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:1d:b6:65:2d:c4:88:db:07:8e:81:93:53:cb:
                    bf:18:21:cf:56:98:8a:d9:2e:70:1d:da:b2:19:d5:
                    42:e1:6f:d3:0d:fb:4b:b8:35:65:fb:62:19:ca:27:
                    72:9d:cc:e4:26:59:76:1e:b3:70:dd:f7:f5:f1:7d:
                    5b:e7:b8:f2:62:03:9f:6c:54:2d:a0:94:dd:46:be:
                    80:5e:b9:31:08:e7:04:2f:d9:68:26:c8:29:45:3e:
                    b6:97:16:95:22:ae:5c:5d:cc:a4:31:77:89:ab:ea:
                    0d:cc:f9:57:7d:7e:d6:89:a6:07:f5:05:05:22:da:
                    7b:c7:2d:8e:f9:2f:1a:c2:c8:90:a3:e1:84:51:23:
                    7e:6d:d0:0a:ac:10:d4:99:00:83:4a:7b:41:d7:77:
                    a5:fe:ac:29:a5:9d:b6:62:51:ff:1f:d6:6a:85:d7:
                    c1:f8:e3:44:3b:9f:55:d9:a9:f5:49:43:41:8f:64:
                    43:43:ec:5e:8f:d2:db:04:6a:60:77:83:bd:ee:d9:
                    44:b0:13:5d:b4:12:3f:43:7d:16:96:50:98:53:ac:
                    bc:7f:c6:7d:7f:c7:58:01:0c:d1:e2:34:c2:46:a1:
                    02:35:43:51:93:de:0f:ed:d3:ed:b0:2e:57:a6:cf:
                    20:f2:05:5e:4a:6e:ca:f0:ff:c6:2c:12:e5:4a:09:
                    98:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:79:17:D9:44:BD:01:93:E4:B9:E7:45:F7:10:CF:15:B6:71:04:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/0c693926-6eee-3934-8fbd-f75a479cc8af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:8384::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:6c:f7:ff:4f:bb:e1:be:75:05:cd:2d:43:e7:8b:33:ac:f8:
         25:7a:15:9d:6b:c9:b2:5b:93:f6:1c:a0:a0:ff:6c:4b:9d:17:
         f1:b7:a6:5b:b9:a2:76:cc:e2:ee:4e:8a:f4:d2:3d:f3:86:13:
         03:8d:32:c7:74:11:80:a6:20:99:2a:02:4a:3b:79:e9:54:10:
         1d:20:f4:df:54:bc:20:b6:4a:72:65:32:e6:e5:30:eb:9c:8c:
         fb:fa:b0:88:64:2e:1c:86:e3:3a:01:bb:89:19:08:8d:0e:db:
         e8:a9:59:27:0e:9b:d5:ad:9a:f9:9f:31:2f:a5:a4:1e:0d:64:
         7f:0c:d5:3a:56:57:21:2e:ba:97:be:f1:43:71:a9:4b:00:88:
         99:63:19:83:18:09:f9:aa:13:67:8c:30:e3:37:67:53:2f:97:
         bf:8f:c1:18:59:04:bc:4a:55:68:84:25:a2:2e:22:16:c1:c7:
         1c:6b:59:60:a9:fe:eb:5e:c8:45:86:da:00:e8:17:3a:78:47:
         95:24:82:b6:97:df:e2:89:8a:77:2e:d4:0e:51:7f:19:ee:5e:
         ca:ac:25:12:c6:cb:f2:51:49:8d:8c:f0:7a:80:05:48:0e:4b:
         b2:7c:22:65:f3:47:96:2e:66:94:91:71:03:8f:40:27:b9:73:
         8a:7e:2f:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:36:18 2025 by rpki-client