Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/10a1e42e-ee00-3953-b639-cbb676187777.roa
File:                     10a1e42e-ee00-3953-b639-cbb676187777.roa (raw, json)
Hash identifier:          spgBdpbCXQg5n3rvRrPJI3GHMzDO+6tJA+aXGWZ2Kxg=
Subject key identifier:   95:1A:43:E0:53:13:93:79:8A:72:6E:7F:2D:C1:E1:10:23:ED:1E:C8
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584C5EC70DF695DA2223E5084A40
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/10a1e42e-ee00-3953-b639-cbb676187777.roa
Signing time:             Wed 31 Dec 2025 14:00:38 +0000
ROA not before:           Wed 31 Dec 2025 14:00:38 +0000
ROA not after:            Tue 31 Mar 2026 13:00:38 +0000
asID:                     33363
IP address blocks:        2605:a401:809d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:5e:c7:0d:f6:95:da:22:23:e5:08:4a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Dec 31 14:00:38 2025 GMT
            Not After : Mar 31 13:00:38 2026 GMT
        Subject: CN=5dd20447-1615-47dc-a164-9befd05829bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:31:de:bd:57:56:54:7f:8a:b1:6f:6d:50:f3:
                    8a:ba:08:30:e3:30:84:61:f1:d1:3e:87:7d:71:d1:
                    4d:7f:f2:71:3c:45:00:22:52:73:8d:aa:c4:1e:ba:
                    54:ca:d4:b7:6c:9b:87:b7:9f:64:05:40:2c:e1:5d:
                    c0:51:7f:46:91:a2:e5:e3:c6:14:76:96:9f:15:4e:
                    8f:44:bb:d9:6d:e7:3d:1d:da:0b:e1:0d:92:cb:87:
                    57:d2:7d:8f:f2:de:82:0c:0b:aa:57:cb:4f:d5:5e:
                    4b:76:fa:ee:5f:e4:a4:b5:94:1c:69:e6:52:79:ad:
                    9c:e4:ea:15:53:1d:11:ac:f8:6d:98:63:28:8d:79:
                    1e:b2:35:a7:9d:5d:10:33:24:7b:2f:d8:d7:a0:26:
                    08:9f:de:d9:6f:bc:df:50:03:55:99:3a:a5:f7:32:
                    a0:4f:19:d0:0c:b1:ae:c8:47:65:8e:86:ce:c5:e3:
                    85:d6:b5:8f:5c:97:b9:ad:fd:a2:e0:33:8e:ab:30:
                    d8:b7:31:45:87:99:08:40:19:a5:99:a3:53:89:f7:
                    6f:1a:d7:80:9d:0a:fd:51:97:ba:35:54:71:29:48:
                    3d:b4:a1:87:ab:0a:0d:e0:46:7c:c0:16:e9:d1:3d:
                    1d:bb:dd:05:b2:54:2f:de:23:23:99:b6:63:76:87:
                    60:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:1A:43:E0:53:13:93:79:8A:72:6E:7F:2D:C1:E1:10:23:ED:1E:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/10a1e42e-ee00-3953-b639-cbb676187777.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:809d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:4f:73:22:c5:41:0a:70:e8:5a:34:22:c8:e1:e2:6d:d9:88:
         5c:48:95:cf:f3:8d:62:bd:9f:df:c3:0d:11:4f:1a:0f:33:ae:
         23:83:f2:71:5f:6e:23:3c:e6:b9:99:f0:9c:f2:f7:3f:00:a4:
         5c:e2:8e:64:08:da:a0:e2:02:e9:7c:f0:d0:d3:f5:16:c9:b5:
         76:72:92:c6:eb:e5:5b:5b:6a:ef:a8:ea:86:a0:c8:1e:f2:dd:
         9a:a6:0d:ac:51:6e:84:a2:99:82:36:89:9f:a5:5f:9b:7e:d6:
         ed:d9:38:19:e4:84:18:13:7c:5e:71:91:c0:09:6e:d9:7d:e9:
         80:a6:22:b4:74:7a:c6:6d:25:1a:9e:c8:9c:3e:4f:9c:7f:9e:
         e9:d8:0e:47:b3:16:44:bd:70:b3:62:8f:8f:b8:c5:fd:fc:bc:
         63:9a:93:4c:4d:e9:c1:e9:27:1a:ce:e3:63:71:7b:18:ef:2a:
         25:f0:7b:f8:e2:d6:a6:02:e6:30:ea:c7:d5:ee:12:ee:4a:93:
         29:95:be:68:e2:2e:aa:24:2d:df:21:eb:55:4a:09:f6:72:9b:
         92:7b:aa:65:a9:6b:04:32:c5:60:1d:0c:cd:84:84:ab:0f:5f:
         d6:df:29:8e:0b:0e:c0:c8:90:3f:96:0b:14:d3:b5:7f:1a:4e:
         07:f9:91:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:07:03 2026 by rpki-client