Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/386f2b26-4a36-3769-ad36-2706cdf55418.roa
File:                     386f2b26-4a36-3769-ad36-2706cdf55418.roa (raw, json)
Hash identifier:          /h6ELQqrPhfki6X/7Az6zdA5YL3oAcYXcU4olqR/nF8=
Subject key identifier:   95:B7:44:1E:10:21:CF:EB:76:44:B5:E8:21:8E:41:85:B8:88:00:70
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584A9E962ED32ED1D71512B7D2C0
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/386f2b26-4a36-3769-ad36-2706cdf55418.roa
Signing time:             Thu 24 Jul 2025 01:00:50 +0000
ROA not before:           Thu 24 Jul 2025 01:00:50 +0000
ROA not after:            Wed 22 Oct 2025 01:00:50 +0000
asID:                     33363
IP address blocks:        2605:a401:8177::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9e:96:2e:d3:2e:d1:d7:15:12:b7:d2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Jul 24 01:00:50 2025 GMT
            Not After : Oct 22 01:00:50 2025 GMT
        Subject: CN=09c0b204-09f1-4bce-98e3-5826833fa413
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f1:4b:29:7e:92:1d:cd:41:81:79:22:b2:bd:
                    8c:b8:72:2d:28:6c:c1:bc:59:83:95:d3:a6:57:29:
                    2a:ae:82:74:96:82:57:d9:44:5f:a6:0a:10:28:47:
                    5b:ad:1b:7e:7e:8f:06:76:ca:ce:d5:9e:93:c3:c0:
                    6e:4d:41:f8:2d:7c:c0:ff:4c:54:e7:ff:b1:b2:15:
                    b5:23:72:d0:9d:2f:c6:db:4f:e0:71:d3:23:a4:40:
                    10:ba:9d:a1:6d:12:6a:d4:66:51:b7:d2:4e:f2:36:
                    c2:09:4e:7e:08:33:2b:6e:90:37:cc:cd:93:3d:38:
                    09:f0:d1:61:ff:87:87:72:11:d5:16:c0:3c:29:aa:
                    fd:41:0c:47:37:4a:2c:86:dc:e7:48:c5:0d:b2:12:
                    04:f8:b0:9a:6e:ca:a0:be:32:f5:40:19:ad:ce:23:
                    c2:56:a1:7d:ca:05:4f:e4:b5:58:2e:43:e6:d9:e1:
                    02:57:9c:d4:ce:08:8a:28:24:b0:34:3f:29:b6:2e:
                    ef:96:0b:1e:fb:72:da:c0:16:b4:e8:71:34:f3:ac:
                    04:37:d6:7f:e5:6c:da:d0:45:7f:6a:5e:d7:e7:17:
                    af:fe:73:de:c0:0a:f1:d7:f5:29:74:be:aa:01:fd:
                    f7:c9:87:68:70:16:15:e2:0b:5c:17:10:b2:11:14:
                    b2:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:B7:44:1E:10:21:CF:EB:76:44:B5:E8:21:8E:41:85:B8:88:00:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/386f2b26-4a36-3769-ad36-2706cdf55418.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:8177::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:16:e4:26:81:b0:c2:03:6b:96:59:cb:d8:0a:f4:cb:87:b0:
         32:e1:f3:81:48:b8:f8:63:ea:ac:b9:b6:b9:34:1b:67:70:8f:
         19:29:ec:4b:db:56:36:e2:ce:0f:62:24:ca:06:c1:62:af:b5:
         34:7f:33:56:5f:40:c4:54:64:93:52:e5:20:16:cd:82:19:45:
         2b:3b:e2:70:51:99:a7:aa:e5:62:34:6e:86:ac:23:ac:16:e7:
         79:19:98:13:96:12:1c:d3:3d:0a:8c:36:e2:32:7f:71:05:97:
         7b:3e:87:99:f4:b2:2a:bf:bd:3b:9f:37:48:ba:ab:f0:99:74:
         82:9c:b0:bd:78:84:54:da:68:ad:cf:3d:95:b2:ae:22:d0:69:
         05:2b:4e:78:14:40:2f:34:de:aa:4b:76:0e:2f:b6:1a:6b:ea:
         eb:bf:c8:48:3f:80:91:80:cc:91:1e:56:6f:a8:47:57:98:8d:
         2c:03:38:fe:cb:f2:5f:72:1d:b0:64:34:1f:e3:07:7f:29:e8:
         db:90:a7:b5:70:3a:b6:16:99:b5:35:d7:02:ef:62:71:cc:69:
         49:db:72:d1:6d:c4:aa:f3:a7:66:a9:db:92:3d:48:4a:ca:bd:
         49:22:60:a5:b4:5a:84:3b:ac:36:2b:40:a0:de:08:cf:36:e5:
         93:86:37:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 14:11:26 2025 by rpki-client