Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/586f6cb2-af88-323e-8989-57ed1af960c5.roa
File:                     586f6cb2-af88-323e-8989-57ed1af960c5.roa (raw, json)
Hash identifier:          77dl6eFt/VD/6MCJJoBV7IEyvmRL5+NvcKgnir+QGhA=
Subject key identifier:   DD:B3:83:EB:5A:A8:D8:F3:4B:B0:6E:25:FF:0B:65:BA:5C:78:AC:5B
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584A9E9630951F8DAA0711C324F0
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/586f6cb2-af88-323e-8989-57ed1af960c5.roa
Signing time:             Thu 24 Jul 2025 01:00:50 +0000
ROA not before:           Thu 24 Jul 2025 01:00:50 +0000
ROA not after:            Wed 22 Oct 2025 01:00:50 +0000
asID:                     33363
IP address blocks:        2605:a401:8500::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9e:96:30:95:1f:8d:aa:07:11:c3:24:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Jul 24 01:00:50 2025 GMT
            Not After : Oct 22 01:00:50 2025 GMT
        Subject: CN=8e29b767-ed72-4e5b-803c-fac3bc7efb42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:ee:d1:58:73:5d:4d:7f:9f:62:6c:a4:9b:90:
                    bd:1b:7f:74:09:83:65:7e:ae:7e:e0:37:30:ef:82:
                    ca:6e:bd:36:ad:00:b5:79:0c:4c:b3:f2:6a:16:2f:
                    78:44:8b:15:6d:2a:1d:9c:fe:d2:68:23:31:1c:c5:
                    a7:5e:c9:b9:aa:43:0a:4c:7a:44:f4:f5:fe:db:d1:
                    ac:53:5f:d5:23:c3:fb:49:c7:33:df:63:4b:b8:e1:
                    eb:bc:73:31:92:09:9e:fc:ac:0d:6c:2e:b7:ed:6d:
                    45:ca:a9:be:4c:09:7d:b0:1e:59:76:bf:3e:63:10:
                    36:20:c5:d5:da:81:65:7c:3e:da:43:38:d4:cc:77:
                    f9:27:bd:8e:7d:b3:1e:c6:b5:9a:be:d6:56:63:34:
                    0d:b7:98:a7:fe:e7:7b:ef:96:11:d1:3e:c6:de:4d:
                    bd:a4:c0:74:a6:b8:a5:92:af:e5:40:b4:fc:3b:5b:
                    bf:d2:20:c9:23:9b:08:3b:8a:07:ff:c3:60:79:ef:
                    cf:83:8d:91:f3:f2:35:88:da:e1:bd:f2:c4:73:54:
                    59:04:c1:3f:6d:aa:6b:df:ce:d5:e6:54:53:51:13:
                    e7:ac:78:46:90:26:c4:60:44:c9:6c:f5:0b:a3:d1:
                    91:f2:ff:c9:2b:69:d4:df:e7:86:49:9b:31:c7:c2:
                    96:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:B3:83:EB:5A:A8:D8:F3:4B:B0:6E:25:FF:0B:65:BA:5C:78:AC:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/586f6cb2-af88-323e-8989-57ed1af960c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:8500::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:41:d6:1d:62:8b:e3:9e:2f:5a:d5:3c:2b:bd:6d:d1:bf:12:
         01:fb:d2:91:dd:9f:30:78:8e:f5:05:12:ed:63:dc:72:b6:42:
         f8:2a:1f:f9:86:40:0b:76:72:26:b2:66:e8:dc:35:ce:27:fe:
         30:2c:81:20:dd:11:70:89:2b:05:82:a5:fd:38:9d:34:19:64:
         87:f4:2e:72:9b:e4:cd:2d:2e:8c:64:72:81:16:00:e1:65:09:
         e1:96:a1:82:4a:e0:f6:38:49:4f:99:76:de:a7:33:52:0c:b0:
         c2:8a:d2:4e:80:d9:6a:71:40:87:d8:0e:9c:de:10:27:a5:fb:
         8a:3c:2f:15:9a:e7:e5:87:e3:ff:82:3b:c9:ae:06:e2:24:54:
         1c:92:b5:ac:60:25:89:76:b0:3b:99:82:1d:cb:a8:10:2a:b7:
         ed:c8:7a:e1:f9:09:cd:76:8b:1d:05:14:59:dd:53:d9:3c:8b:
         d0:3b:bc:dc:8a:48:10:ce:dd:f2:a2:77:11:d9:c1:db:6a:61:
         91:00:33:de:4b:5d:ee:aa:bc:72:ad:00:68:29:75:30:0a:b2:
         3f:97:64:bb:d3:b7:3a:52:75:8f:80:42:92:84:c0:e8:de:80:
         5a:c0:e0:98:f0:e3:ce:3a:e5:aa:0e:bb:26:09:88:6f:4d:ff:
         e7:62:13:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:23:06 2025 by rpki-client