Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/5144707a-8c87-37ae-9b14-452ff20c78c2.roa
File:                     5144707a-8c87-37ae-9b14-452ff20c78c2.roa (raw, json)
Hash identifier:          QWhdve4mb1QUg8fHx3+aPWaTHmwa5Q8D5wU5owZRC20=
Subject key identifier:   DD:6B:40:A2:11:70:4F:CA:60:EB:6E:6B:E9:B4:B9:F0:FB:CB:C1:C2
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584A9E96338FE035A74CF502F880
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/5144707a-8c87-37ae-9b14-452ff20c78c2.roa
Signing time:             Thu 24 Jul 2025 01:00:50 +0000
ROA not before:           Thu 24 Jul 2025 01:00:50 +0000
ROA not after:            Wed 22 Oct 2025 01:00:50 +0000
asID:                     33363
IP address blocks:        2605:a401:80fe::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9e:96:33:8f:e0:35:a7:4c:f5:02:f8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Jul 24 01:00:50 2025 GMT
            Not After : Oct 22 01:00:50 2025 GMT
        Subject: CN=cf7eac14-59a2-48ad-8d72-33770a4c187e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ba:69:28:86:41:37:43:aa:90:d2:2f:79:1c:
                    2d:3c:ab:84:86:bb:cb:98:9d:11:74:15:65:53:a9:
                    0f:8c:49:68:d3:7a:c1:90:73:ca:16:63:95:7d:38:
                    5b:76:a3:b8:0b:f9:14:0e:b9:33:5d:79:92:55:9c:
                    c1:26:eb:33:c7:93:b0:f4:61:2a:ef:8e:ca:90:1d:
                    f0:db:50:c7:92:e7:3b:66:79:9a:24:fc:e1:3a:a8:
                    e3:51:2a:75:cd:38:de:5a:22:2c:4b:8b:76:b1:3c:
                    d4:27:d5:0a:3d:ab:83:c6:d9:51:d8:30:8d:7c:77:
                    81:a8:e0:e6:50:2a:2b:14:ef:d7:8c:60:5f:94:0e:
                    3b:f7:22:24:83:fb:28:00:b4:6c:13:42:cd:a8:bd:
                    d2:11:e7:b8:9c:cb:f5:3f:06:c8:59:52:ee:82:eb:
                    ec:a8:cf:fe:16:38:ad:d1:41:61:cd:93:7a:0a:ae:
                    1f:37:c7:90:d9:3d:e8:ee:e0:d4:55:69:f5:78:52:
                    25:72:57:96:03:e7:ef:46:c8:1f:58:02:ef:93:96:
                    6d:af:fe:32:4e:b6:0a:fe:e3:de:aa:3d:11:e4:84:
                    18:c3:89:c8:68:b5:85:1d:f9:96:55:00:3e:40:e1:
                    77:da:18:79:bd:0f:ea:21:ee:67:2d:15:94:1c:09:
                    1f:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:6B:40:A2:11:70:4F:CA:60:EB:6E:6B:E9:B4:B9:F0:FB:CB:C1:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/5144707a-8c87-37ae-9b14-452ff20c78c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:80fe::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:80:e7:3e:c7:6d:87:52:0d:13:28:16:53:de:31:b7:a1:cc:
         74:a6:2e:b2:69:c4:16:e8:f1:81:37:99:c9:9d:dc:2f:48:ec:
         17:3b:ec:ae:c7:2e:a9:da:06:18:54:b7:14:4f:e9:67:25:e8:
         1e:e9:9d:a0:fb:81:f8:e2:13:3b:21:a8:59:c8:d7:0b:e7:19:
         98:a3:30:e2:81:62:09:04:83:1a:f5:35:43:5d:8a:97:60:d6:
         60:02:2e:94:08:42:bb:d0:8c:df:bc:e5:9e:e2:43:29:76:db:
         ee:8d:8d:5d:ad:a7:f0:7d:2e:87:43:8a:d4:0c:a0:c2:75:bc:
         35:11:28:84:66:8c:8e:6a:29:37:73:88:cf:f8:a9:df:99:98:
         71:18:fc:ab:dc:62:4c:57:51:54:62:97:e2:6d:91:1e:9e:ea:
         f8:b8:f0:76:96:f3:f0:ab:d4:54:95:05:d1:e4:f4:37:8b:d4:
         2b:55:64:23:69:60:1f:ec:eb:bf:14:b9:a4:a0:b5:ae:58:27:
         b4:f9:b3:1f:41:e4:6c:35:71:8e:48:44:94:2b:ba:85:52:86:
         09:69:c9:b7:ed:8b:9b:36:20:0d:38:db:7c:61:46:8a:e8:17:
         3e:5e:66:35:6c:5d:75:83:ed:97:22:51:57:8b:39:84:8a:98:
         26:81:9c:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:41:07 2025 by rpki-client