Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/6aaef368-4411-35ca-bbd9-f530f4f18dae.roa
File:                     6aaef368-4411-35ca-bbd9-f530f4f18dae.roa (raw, json)
Hash identifier:          yo1ArQENkCwtPRvbIuuxupG8d986hHwaj2t7DNS7UGQ=
Subject key identifier:   19:3A:89:5C:80:49:E5:75:2A:BF:D7:7D:FE:8B:02:1F:01:B9:57:C0
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584A9E965CED4BACBB6758361C80
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/6aaef368-4411-35ca-bbd9-f530f4f18dae.roa
Signing time:             Thu 24 Jul 2025 01:00:50 +0000
ROA not before:           Thu 24 Jul 2025 01:00:50 +0000
ROA not after:            Wed 22 Oct 2025 01:00:50 +0000
asID:                     33363
IP address blocks:        2605:a401:83bb::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9e:96:5c:ed:4b:ac:bb:67:58:36:1c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Jul 24 01:00:50 2025 GMT
            Not After : Oct 22 01:00:50 2025 GMT
        Subject: CN=b25f5458-bb93-4062-a125-39b5456b92bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:5b:19:34:e5:41:08:68:9a:43:b1:1d:30:7f:
                    a3:83:2f:35:47:e7:9d:68:10:5f:d7:85:78:c2:75:
                    6d:37:35:59:59:ae:78:e1:ff:d2:98:90:06:5e:a8:
                    f5:0e:61:33:78:ab:b6:0f:11:89:b2:50:c6:39:cd:
                    eb:47:e7:fa:59:67:a5:b4:ce:2d:6c:87:45:0c:07:
                    63:0d:a5:c4:22:2c:91:7c:bf:f4:64:57:e9:ca:4d:
                    e0:4d:5a:c2:44:05:a9:8b:55:c1:87:08:c8:8b:07:
                    f7:30:c9:0b:01:73:c9:f5:9e:34:6c:9c:52:65:5c:
                    66:d9:84:75:66:dd:96:a0:62:ff:36:ff:26:38:2e:
                    cc:43:b7:b5:be:6d:d4:23:fb:0c:ce:98:96:c3:99:
                    e3:c3:8d:da:a2:3f:87:cc:59:8e:98:8c:ed:a5:28:
                    cf:00:32:d1:5d:ed:0b:8f:07:81:ae:9c:01:23:03:
                    01:09:17:65:ca:b9:cf:58:4c:b7:12:e2:79:11:3e:
                    de:a1:ea:85:46:83:e4:ba:3d:12:bf:65:e3:e0:5d:
                    08:be:fd:91:a7:77:22:ea:24:bf:4d:b4:16:34:da:
                    a6:84:4d:f9:9f:4a:9f:9d:ee:1f:af:a0:45:97:e4:
                    0a:7e:98:69:fd:2a:b0:55:28:12:84:cd:d1:79:0a:
                    b6:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:3A:89:5C:80:49:E5:75:2A:BF:D7:7D:FE:8B:02:1F:01:B9:57:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/6aaef368-4411-35ca-bbd9-f530f4f18dae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:83bb::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:bc:69:22:16:96:d7:e6:4e:c7:ce:4b:75:79:49:fe:54:b6:
         2c:e8:15:f6:78:d3:18:3d:2a:e4:79:43:7e:42:04:b1:c4:2e:
         20:56:3f:96:ca:39:9c:5a:f9:50:0b:f8:a0:6f:b7:4b:26:f0:
         f5:38:5d:df:01:98:c9:e9:14:64:7e:c2:cb:68:3f:f9:53:c3:
         1c:cd:3e:e1:94:f2:9c:b7:25:39:23:fa:16:4d:19:c0:8d:b3:
         7f:20:8c:f2:22:65:f3:66:2c:46:19:73:23:3b:82:27:ac:17:
         05:68:6b:c9:87:1d:8a:95:98:e5:10:aa:ca:2b:fa:6c:31:b8:
         b4:a7:29:d1:31:90:c5:ff:ea:2f:03:a6:53:a3:29:57:10:bb:
         a3:fe:23:da:27:77:8b:a6:7a:f8:a5:39:30:88:c6:e9:c1:ff:
         0a:1b:5b:92:f5:f0:71:42:70:e6:5f:21:a1:ea:47:40:0d:5e:
         1d:84:9b:c9:20:98:57:3f:3c:16:91:8d:dd:bd:38:75:65:61:
         2d:5d:8f:42:46:a6:ef:24:5e:2b:a0:9e:51:2e:d4:80:22:75:
         71:d3:77:9e:4a:5f:0c:d1:a1:22:34:42:39:f1:f8:e2:5a:e7:
         d2:ff:a7:2b:89:db:3e:e0:94:9b:88:44:74:55:c7:8c:c3:bb:
         94:1a:b2:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:01:15 2025 by rpki-client