Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/4a2b5b61-2f20-3999-83f5-2efcc7f7b3e2.roa
File:                     4a2b5b61-2f20-3999-83f5-2efcc7f7b3e2.roa (raw, json)
Hash identifier:          mXh9H/b2F9YuoZTnaplL8BR/hsj2w6oaW5IOApaHFF4=
Subject key identifier:   09:BD:81:17:63:2C:5D:D8:7B:DB:12:D5:C2:21:81:9E:A8:BB:37:75
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584A9E962D994EB7E228B77994A0
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/4a2b5b61-2f20-3999-83f5-2efcc7f7b3e2.roa
Signing time:             Thu 24 Jul 2025 01:00:50 +0000
ROA not before:           Thu 24 Jul 2025 01:00:50 +0000
ROA not after:            Wed 22 Oct 2025 01:00:50 +0000
asID:                     33363
IP address blocks:        2605:a401:80e7::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9e:96:2d:99:4e:b7:e2:28:b7:79:94:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Jul 24 01:00:50 2025 GMT
            Not After : Oct 22 01:00:50 2025 GMT
        Subject: CN=d54aec23-6219-4460-a67a-1d570d1e43c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:a1:ad:50:d1:78:b8:b4:d5:eb:70:40:4e:2a:
                    0a:8c:ca:ca:8f:fa:4c:5e:03:3a:bf:4f:7e:43:6a:
                    5a:53:c5:85:bc:f2:47:d1:b3:f4:d4:0d:d1:6d:e3:
                    91:64:f2:60:1f:6b:06:89:d8:fa:aa:cb:a8:6f:0b:
                    71:54:50:7c:e9:03:06:2c:cf:f9:96:80:1d:2e:f4:
                    10:43:4e:90:62:70:5a:97:78:d9:ab:c3:31:25:c8:
                    ae:b0:50:f5:19:9a:a5:37:d6:21:e4:50:5e:e7:ef:
                    98:48:a1:7c:81:c9:55:59:5f:38:db:d7:0b:a0:38:
                    94:f9:c5:55:81:db:85:21:9a:4d:be:34:ad:f5:94:
                    1a:33:2b:d7:17:60:12:83:f2:e5:da:de:d9:9a:60:
                    25:16:aa:f6:f3:fc:2e:22:83:6e:bd:b9:26:de:cf:
                    89:48:07:f1:ca:aa:40:d3:0f:33:1d:8b:8d:5e:5d:
                    6b:9e:13:ec:96:64:a6:78:5c:c5:1f:a0:92:90:3f:
                    29:4c:36:0e:d2:3f:41:bd:a1:6b:db:63:ba:99:d8:
                    c9:7e:0d:56:a4:ac:65:17:3c:96:be:10:77:44:a2:
                    06:ae:c6:b8:2d:a9:61:3a:66:f3:cb:d3:98:a4:7a:
                    b7:bd:f6:ea:69:9e:b0:9e:f7:cc:40:39:89:59:6e:
                    2d:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:BD:81:17:63:2C:5D:D8:7B:DB:12:D5:C2:21:81:9E:A8:BB:37:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/4a2b5b61-2f20-3999-83f5-2efcc7f7b3e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:80e7::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:fd:23:30:8b:2e:19:cb:0b:56:a3:00:47:38:bb:fb:53:72:
         75:d2:d5:19:48:bb:7f:c4:e8:a4:13:53:ea:d9:98:59:25:bf:
         5f:34:2c:08:e7:fa:1e:7d:60:04:84:b0:12:39:6d:2c:83:7f:
         e1:0f:ea:ce:1d:0a:42:5a:9b:81:94:f0:04:24:57:2c:59:de:
         9c:65:a4:e5:44:0d:04:cc:a3:48:00:54:0c:83:78:22:ab:0e:
         f6:ab:67:7a:a0:0f:05:fc:db:a5:04:2b:3b:52:a0:54:19:c1:
         ff:af:04:ff:2b:30:5b:b1:67:97:8c:4a:9e:3e:05:5d:b9:c5:
         3f:aa:c3:34:36:e4:f4:55:51:36:8a:aa:a2:7f:a0:f3:7a:02:
         1f:e2:c0:2f:76:3f:e7:16:18:42:f3:47:f0:40:1e:bf:a2:c1:
         6b:26:80:b0:e3:23:7d:81:f1:2f:c8:6d:01:1a:97:3a:23:f6:
         df:11:c1:99:59:b6:02:e9:8b:ca:b5:ec:fb:4b:00:a7:94:98:
         b9:e8:81:54:e8:ae:eb:fb:c4:2c:d4:e9:4d:65:18:2b:a0:35:
         8b:ef:1e:73:51:5f:6c:37:3f:5d:a1:e2:fa:32:6f:54:f2:cd:
         3d:fc:3d:f9:bc:93:59:79:6b:ab:07:fd:c2:23:3c:ea:f6:0f:
         dc:d9:e7:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 19:08:56 2025 by rpki-client