Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/38b4e9c6-5dc0-35c7-a5ec-40efd1cde570.roa
File:                     38b4e9c6-5dc0-35c7-a5ec-40efd1cde570.roa (raw, json)
Hash identifier:          /I6uK0Je98XzEYbjE5FfghV4ImbXONsOQweBbUF46ls=
Subject key identifier:   8D:55:0C:4E:7E:21:CD:45:2F:32:5E:F0:9B:E6:91:1F:82:53:DE:CD
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584A9E962D266A10E4FED4E07D00
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/38b4e9c6-5dc0-35c7-a5ec-40efd1cde570.roa
Signing time:             Thu 24 Jul 2025 01:00:50 +0000
ROA not before:           Thu 24 Jul 2025 01:00:50 +0000
ROA not after:            Wed 22 Oct 2025 01:00:50 +0000
asID:                     33363
IP address blocks:        2605:a401:80b7::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9e:96:2d:26:6a:10:e4:fe:d4:e0:7d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Jul 24 01:00:50 2025 GMT
            Not After : Oct 22 01:00:50 2025 GMT
        Subject: CN=1a03570c-62f4-48cb-a3f1-9a3771909f5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:e5:d9:95:d1:29:3b:06:68:a6:08:9c:3c:b2:
                    bf:1c:51:83:5d:4c:c2:a0:db:67:af:53:16:02:8a:
                    02:ca:57:b7:06:b2:59:33:17:14:92:4c:ae:73:be:
                    55:7f:7c:be:8d:6c:49:7d:84:16:f2:b0:c9:3c:c6:
                    3f:41:aa:86:58:3e:9d:04:9c:b5:a4:01:3a:b6:1e:
                    82:74:e4:e2:3c:76:6c:0d:a2:c1:30:7f:08:9d:cc:
                    04:8a:9f:9f:f0:f2:8d:d3:98:d5:e7:6e:fb:dc:28:
                    5d:85:56:67:c8:8d:8e:ae:16:99:6e:2a:d5:8e:cf:
                    58:b8:3c:c9:ee:e6:50:6d:1c:85:eb:a2:34:1e:60:
                    44:f0:30:4f:25:89:fa:09:86:51:f8:60:22:4a:86:
                    68:cf:55:68:1a:5c:56:cc:9e:bb:09:3d:ca:a1:ea:
                    8e:98:03:c2:71:c5:02:78:d2:62:15:bb:ba:43:fa:
                    f2:9a:56:1d:80:84:62:b8:0d:bf:de:89:c7:23:ce:
                    fa:59:d0:6d:a7:b2:7a:57:37:f8:47:63:38:f6:6a:
                    16:67:54:5d:47:fc:e4:ae:9e:4f:9d:08:1c:96:82:
                    dc:ef:35:4e:77:6a:b4:43:f8:6f:9b:e7:2f:77:9b:
                    b3:00:b9:d4:47:87:b8:71:07:b6:45:22:b0:69:2f:
                    61:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:55:0C:4E:7E:21:CD:45:2F:32:5E:F0:9B:E6:91:1F:82:53:DE:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/38b4e9c6-5dc0-35c7-a5ec-40efd1cde570.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:80b7::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:fd:f5:1a:fe:a2:14:31:0f:60:1e:6d:f8:2d:63:94:e8:c6:
         bf:91:20:d0:c7:c8:4c:bc:17:b1:61:b1:01:a2:a0:ca:ca:a5:
         1c:2c:57:25:3e:61:ec:46:4b:fb:ac:76:84:05:68:ae:dc:51:
         75:80:a3:af:31:6a:6e:37:be:9e:39:57:83:06:39:79:9f:a0:
         df:f1:ff:dd:ab:6c:04:08:b9:5f:ee:39:9a:7c:42:86:ab:1a:
         b9:7d:ec:af:bc:98:62:88:73:a9:05:bd:77:1a:d1:75:40:e3:
         69:3e:b9:57:62:8d:25:0e:7d:f2:3a:af:a5:5e:ee:27:47:5d:
         14:be:c2:6e:79:79:64:dd:b2:42:ab:3c:90:ec:8c:80:5b:0c:
         06:ad:ef:27:4d:77:8e:50:c9:76:e4:2e:2f:0b:4a:6a:d2:34:
         96:b8:03:5a:8f:78:60:a2:b9:a2:2b:d1:1b:12:69:06:9d:f1:
         f3:95:f5:59:d2:51:2f:88:0a:ac:e6:28:bd:7e:db:04:89:40:
         ec:a0:94:c7:c2:0a:84:e2:54:59:fc:5a:b2:6f:a0:0e:cf:de:
         74:d6:59:71:30:aa:e2:97:a0:d3:68:f8:d3:7b:aa:0a:3a:26:
         87:eb:38:75:cd:98:2c:9e:8a:9f:07:f2:46:3d:54:8b:ce:15:
         c2:48:46:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:52:01 2025 by rpki-client