Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/666935f4-85c6-3049-90b7-8c4a927ffb81.roa
File:                     666935f4-85c6-3049-90b7-8c4a927ffb81.roa (raw, json)
Hash identifier:          4Pr9BPpZqRhCkr8wF8xvc28dM2jsMOo1c+YEfeZlwEc=
Subject key identifier:   45:D5:72:86:97:A5:80:BB:11:D0:4B:A4:48:E7:BF:40:B2:C9:DF:E8
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584A9E962CE80D6CF8D316CBD940
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/666935f4-85c6-3049-90b7-8c4a927ffb81.roa
Signing time:             Thu 24 Jul 2025 01:00:50 +0000
ROA not before:           Thu 24 Jul 2025 01:00:50 +0000
ROA not after:            Wed 22 Oct 2025 01:00:50 +0000
asID:                     33363
IP address blocks:        2605:a401:8091::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9e:96:2c:e8:0d:6c:f8:d3:16:cb:d9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Jul 24 01:00:50 2025 GMT
            Not After : Oct 22 01:00:50 2025 GMT
        Subject: CN=844496b5-16c8-4783-9f85-93652a169559
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:d9:ec:b9:07:18:84:87:bc:92:e6:40:6b:65:
                    06:1a:14:2c:ed:ef:0d:60:41:0d:23:ba:36:33:62:
                    82:09:2c:c9:cc:9a:9a:56:55:e3:a9:24:c1:03:2f:
                    eb:af:c4:44:d5:69:fb:d0:28:d6:45:db:43:08:d9:
                    f3:db:55:bc:c7:b7:e6:3c:a9:18:4c:7b:63:1d:4e:
                    73:87:06:bb:9e:d2:3a:28:a2:ad:93:e2:33:c4:cb:
                    7a:da:94:9b:be:0c:c4:9d:bc:92:b0:54:10:9f:52:
                    12:21:85:83:56:23:bc:cb:dc:ce:a7:08:b9:32:ed:
                    07:7a:1f:e1:4a:15:58:e1:2e:0f:7e:b1:77:d1:02:
                    d6:95:2b:41:00:a2:dc:f8:48:b3:87:72:5b:b3:a1:
                    41:cd:62:86:d2:e9:47:ae:4f:26:9c:bb:9b:18:4b:
                    ff:3a:e5:9b:12:a5:70:bc:ed:ae:19:c8:62:bf:ea:
                    e2:13:23:28:77:a0:e7:55:f6:66:d9:ae:b1:84:e2:
                    8a:83:f7:37:df:b1:32:d9:15:71:60:7e:a8:39:d1:
                    de:4f:89:b1:2a:63:15:2e:ec:f2:27:27:8f:01:67:
                    02:4a:8a:99:83:4d:fa:61:89:bc:02:06:8e:d5:3f:
                    29:b0:18:62:d2:99:44:77:af:c9:5e:db:cb:0a:0c:
                    6e:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:D5:72:86:97:A5:80:BB:11:D0:4B:A4:48:E7:BF:40:B2:C9:DF:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/666935f4-85c6-3049-90b7-8c4a927ffb81.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:8091::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:a2:79:7f:9f:19:13:82:37:00:c2:ab:0d:f8:c2:87:08:2e:
         13:43:bd:0d:cb:fb:5f:67:16:c7:9c:94:f7:f0:74:f7:52:0e:
         e4:59:60:10:c3:5c:e3:ed:e4:33:68:2c:c3:ed:b4:52:a2:91:
         b9:72:65:10:d8:7d:32:c7:dd:56:3c:e4:f4:51:47:b2:15:09:
         7d:79:82:bd:78:b7:aa:dd:64:79:50:5e:f8:04:43:30:22:72:
         1c:1d:99:58:90:a5:cb:10:9e:c2:b4:33:e5:de:13:8e:bd:9c:
         28:66:59:23:41:4c:ee:b5:e3:c4:00:f9:fe:9b:98:c0:c3:4c:
         29:4e:d8:a4:1e:c4:32:01:a2:61:36:44:e2:a5:16:08:81:c0:
         09:a8:19:55:c9:0f:32:f3:7f:4c:26:74:b3:b2:d6:26:60:3b:
         66:ca:98:f7:a9:b5:b9:91:a2:48:dd:9e:de:d0:c1:0e:17:44:
         a0:87:5c:2f:a9:df:a2:7e:93:85:7f:a5:67:e3:6b:fc:0c:e0:
         9e:bc:a9:ad:a8:33:a4:fb:77:1b:af:3d:b2:42:cd:a1:ef:14:
         f0:b9:5e:e3:03:d9:b2:b3:70:20:f0:06:cb:c5:74:16:5f:6e:
         d2:88:c0:23:d1:89:8e:ff:6f:d5:43:a2:3d:5a:de:07:a4:57:
         80:e0:d9:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:38:37 2025 by rpki-client