Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/0d19fb5b-f7ec-3b89-b51f-131fcfafb05e.roa
File:                     0d19fb5b-f7ec-3b89-b51f-131fcfafb05e.roa (raw, json)
Hash identifier:          L+WZErdoMCohZR+oc07NaEtXWNHU3FZeAxucVfIoq2E=
Subject key identifier:   55:DE:C8:8B:62:71:5D:16:C5:17:B1:57:3D:95:A2:A6:26:91:98:49
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584A9E965CA0D502465A608A8FC0
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/0d19fb5b-f7ec-3b89-b51f-131fcfafb05e.roa
Signing time:             Thu 24 Jul 2025 01:00:50 +0000
ROA not before:           Thu 24 Jul 2025 01:00:50 +0000
ROA not after:            Wed 22 Oct 2025 01:00:50 +0000
asID:                     33363
IP address blocks:        2605:a401:82c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9e:96:5c:a0:d5:02:46:5a:60:8a:8f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Jul 24 01:00:50 2025 GMT
            Not After : Oct 22 01:00:50 2025 GMT
        Subject: CN=c7960323-407f-4874-9818-1210fd6e4bee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:f1:fb:21:67:18:f1:16:d9:df:d5:94:2e:9d:
                    17:a1:1c:41:ae:2e:53:03:82:d7:16:aa:74:28:be:
                    4a:1a:72:ac:4b:62:4c:0b:37:33:ff:47:b5:51:f9:
                    7a:0e:01:0f:91:78:79:4f:76:d7:de:22:38:38:d0:
                    d4:54:4d:b9:01:de:df:72:47:3d:8a:7b:87:00:b4:
                    e2:49:0b:8a:65:d8:11:f1:09:d0:e3:5e:86:ba:66:
                    c4:cf:3e:93:a3:e7:50:fe:3c:24:bd:4b:56:c8:31:
                    df:ce:f6:ac:c1:2d:8e:79:e9:a9:d4:cc:f2:81:54:
                    5d:a4:c9:53:95:f9:24:d8:96:70:ac:f8:69:c5:78:
                    c7:12:ff:80:f6:36:8c:14:34:34:ea:a1:82:9b:76:
                    b0:48:67:ba:de:5d:f6:7b:60:b9:97:40:c8:07:8a:
                    b9:cb:e0:5d:a7:86:d4:6b:51:31:d0:c0:08:a2:5e:
                    d0:87:c4:5a:b5:c5:0c:a4:eb:ba:0c:85:2d:3c:30:
                    25:12:e7:e1:e3:ca:da:f8:4f:d6:e3:93:fa:69:c6:
                    a0:72:f4:63:7b:9b:fe:e0:52:36:1b:82:2d:ce:2a:
                    f1:1e:5c:66:3c:b6:1f:36:f5:fe:75:2a:f8:41:1f:
                    21:64:bb:11:49:2f:74:75:6f:3c:5c:25:c1:2e:75:
                    de:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:DE:C8:8B:62:71:5D:16:C5:17:B1:57:3D:95:A2:A6:26:91:98:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/0d19fb5b-f7ec-3b89-b51f-131fcfafb05e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:82c0::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:21:ab:e0:46:b7:e6:1d:86:ed:75:a1:f0:43:78:b1:17:9f:
         05:a7:90:53:89:22:5a:7d:d3:cc:8d:f7:b8:8d:5d:9e:35:27:
         f0:f4:0e:f7:7c:74:62:df:96:26:73:b9:29:ae:cf:81:7d:39:
         c8:e6:23:ba:49:63:d9:38:ca:60:c1:93:4b:ba:21:56:24:1b:
         51:41:9e:b2:84:15:7c:68:55:89:cc:c0:59:c0:da:bb:30:b8:
         6c:f2:3b:52:3f:2e:1b:79:63:41:e3:80:96:33:95:20:c2:5f:
         7c:81:e0:b3:ee:b9:f4:a1:bd:69:6b:91:2e:a4:29:cf:80:0b:
         6a:2d:f8:48:ad:01:91:e8:77:af:a2:72:6c:1f:9c:37:89:33:
         33:a1:ba:02:d5:af:c4:a8:a4:d2:b6:ec:53:34:54:19:34:32:
         97:ad:62:47:10:a0:66:4e:1a:ab:fe:4d:6c:98:ca:e0:74:53:
         88:19:43:2a:1e:17:44:7a:2e:7f:b2:c8:e0:1f:26:40:f7:6f:
         2f:03:f4:49:20:31:00:2d:bb:8d:99:fd:5e:30:28:07:ac:92:
         fd:5c:55:74:f8:6b:8f:2e:8c:bd:5e:96:a7:58:43:ab:30:c0:
         4e:af:cf:21:66:42:06:ba:8b:79:96:6a:9d:65:89:44:db:c0:
         2c:7b:9c:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:21:01 2025 by rpki-client