Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/78d4ed37-26cb-38e9-97e9-06757b86f6a9.roa
File:                     78d4ed37-26cb-38e9-97e9-06757b86f6a9.roa (raw, json)
Hash identifier:          9O2eHs/SbnS4zbDxDZTLc8j8Vd6OBTZDNt4eq7w7fGQ=
Subject key identifier:   AF:EB:68:9B:B5:C3:BA:9F:92:88:94:38:C2:92:44:6D:82:CF:AA:F5
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584A9E9660065FFD37FD02E8AEC0
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/78d4ed37-26cb-38e9-97e9-06757b86f6a9.roa
Signing time:             Thu 24 Jul 2025 01:00:50 +0000
ROA not before:           Thu 24 Jul 2025 01:00:50 +0000
ROA not after:            Wed 22 Oct 2025 01:00:50 +0000
asID:                     33363
IP address blocks:        2605:a401:8139::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9e:96:60:06:5f:fd:37:fd:02:e8:ae:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Jul 24 01:00:50 2025 GMT
            Not After : Oct 22 01:00:50 2025 GMT
        Subject: CN=9f2ab20e-a4f0-4357-9d15-bec644a6faa1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:22:90:8b:71:d6:67:6b:4d:7e:9d:f1:95:1e:
                    16:4d:d2:21:a9:d1:a2:cc:0e:82:92:fc:9f:cd:a7:
                    4c:d3:41:1c:4d:d4:4a:43:e5:f7:ab:6b:b0:b3:37:
                    80:54:db:3f:eb:35:85:37:ea:ba:a8:72:0f:f4:46:
                    bd:ba:ea:6a:c8:ce:4e:7e:e6:b8:80:fc:14:2a:95:
                    c9:60:58:a1:2c:90:c1:6f:ff:28:19:57:0d:67:2b:
                    26:cc:88:fc:b5:58:48:2a:1f:ac:18:1e:4d:fc:01:
                    88:35:a7:be:71:2e:f8:1a:07:5d:3a:97:75:be:e0:
                    59:c0:5e:b8:bf:15:98:55:3a:db:d3:69:6d:57:f2:
                    9c:dc:f7:07:fe:f6:76:ea:ca:a9:ff:58:bb:40:9e:
                    4d:02:a3:71:12:b3:ce:cf:6c:8a:a9:8a:a1:e3:cc:
                    37:9d:ee:dc:3c:86:0b:d9:87:bc:bd:15:00:a8:46:
                    d2:99:34:58:c0:8e:20:75:c4:4b:93:74:ac:41:cd:
                    53:4f:87:01:3e:4f:53:48:c4:a0:25:16:f8:6f:b9:
                    d6:0b:19:45:8f:86:f6:ae:24:a4:d6:6f:83:58:49:
                    35:d4:7d:c7:a4:5c:9b:1b:ae:42:97:cf:ee:81:a7:
                    1d:fe:18:d7:aa:05:f8:3e:20:2d:b8:8d:08:15:50:
                    b0:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:EB:68:9B:B5:C3:BA:9F:92:88:94:38:C2:92:44:6D:82:CF:AA:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/78d4ed37-26cb-38e9-97e9-06757b86f6a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:8139::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:11:43:9a:f9:a2:5d:fa:3a:e3:d5:58:9d:88:50:da:30:c1:
         f0:4f:8d:df:69:cf:d2:4e:79:15:b9:0b:7f:16:8c:23:01:68:
         a8:de:be:7b:fe:e4:2c:15:bc:89:59:18:8b:36:dc:63:09:b7:
         79:03:23:58:3e:fe:a1:19:c7:a0:d6:6c:70:bb:9e:4f:b3:89:
         3b:95:9a:c3:22:86:9c:76:76:db:d4:01:21:b2:7f:b2:fb:3a:
         28:7e:97:06:2c:6e:51:f1:0f:20:98:d1:cc:98:ca:81:f6:dd:
         33:f4:a6:03:d5:53:e0:61:6e:dc:88:01:b0:73:ae:2b:ac:f4:
         3c:14:dc:d4:86:d5:0a:a9:f1:42:2a:65:88:c3:bd:f2:23:10:
         a5:40:70:41:02:9f:47:e9:c2:10:0c:b7:fa:e8:3b:79:4e:c8:
         74:26:8d:59:8f:58:67:67:8a:4a:a6:c6:a5:7a:c1:d0:24:7e:
         7a:a5:a4:c5:9a:38:51:83:4d:49:1b:53:de:91:aa:df:bc:97:
         a7:51:1e:4a:58:64:6f:d9:9b:bf:bd:53:d4:19:a7:77:aa:39:
         85:10:f3:db:01:b0:ef:07:e9:1d:ab:3c:82:ac:c0:03:36:de:
         44:8f:c0:84:8f:ce:b7:ae:e0:13:cd:c5:05:41:f8:88:a1:68:
         26:08:03:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:40:35 2025 by rpki-client