Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/7b8fce00-3542-3cfb-8c9b-774070445cb8.roa
File:                     7b8fce00-3542-3cfb-8c9b-774070445cb8.roa (raw, json)
Hash identifier:          QfSz6gMMcadCflrmZ0qVxLdzWpaJocL9OcE5CsQSyG0=
Subject key identifier:   2E:E0:F3:8F:BC:1C:41:42:B4:C3:11:7B:05:BC:7B:95:32:C2:5D:20
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584A9E965F622186C0C9D80D4500
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/7b8fce00-3542-3cfb-8c9b-774070445cb8.roa
Signing time:             Thu 24 Jul 2025 01:00:50 +0000
ROA not before:           Thu 24 Jul 2025 01:00:50 +0000
ROA not after:            Wed 22 Oct 2025 01:00:50 +0000
asID:                     33363
IP address blocks:        2605:a401:80bb::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9e:96:5f:62:21:86:c0:c9:d8:0d:45:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Jul 24 01:00:50 2025 GMT
            Not After : Oct 22 01:00:50 2025 GMT
        Subject: CN=7d940ae7-e6b3-4a02-9682-a93cee0ca1e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:9c:93:98:8c:eb:a4:0e:35:28:84:4c:b0:88:
                    2c:fa:89:4f:49:38:a9:37:56:96:c2:98:9e:94:5a:
                    85:8f:d2:34:e3:4a:08:59:70:4a:8c:11:1a:cd:9f:
                    a8:15:fb:fb:a7:28:35:05:89:cb:ac:94:9c:49:13:
                    08:cc:57:0f:dd:c5:8c:53:e0:ef:03:f4:f9:e0:cc:
                    97:da:e6:b4:13:bc:34:6f:fc:f0:52:8e:43:85:ac:
                    c2:21:80:2e:3e:15:02:2d:98:71:5d:57:01:96:b3:
                    98:49:48:0c:94:e8:cb:69:b5:60:24:6c:7c:be:3c:
                    fd:5b:2f:34:b5:25:9e:fb:1c:0c:97:da:53:cc:10:
                    55:90:64:64:50:14:35:ff:d4:93:4b:3d:3b:5c:32:
                    3c:ed:57:97:a7:58:3c:ac:cf:d8:ac:7d:f2:08:7c:
                    76:0e:d5:e4:1c:de:46:84:00:f7:f1:a1:0e:c5:fa:
                    37:bd:c9:9b:da:35:58:7e:5f:93:91:26:12:c5:47:
                    1b:94:f6:55:53:8b:a6:a5:d1:72:63:ee:da:f1:90:
                    8b:b2:e5:3e:d5:bd:1b:be:64:6b:01:ca:51:0e:df:
                    3d:d6:29:6b:0a:10:f7:1b:24:c3:62:55:7c:a6:ad:
                    b5:ce:8e:ca:b5:72:7b:f9:95:dd:64:5b:11:83:93:
                    16:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:E0:F3:8F:BC:1C:41:42:B4:C3:11:7B:05:BC:7B:95:32:C2:5D:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/7b8fce00-3542-3cfb-8c9b-774070445cb8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:80bb::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:31:b9:3c:51:c9:06:0d:a6:29:8d:4a:52:9d:bc:82:93:f0:
         6f:d1:bd:48:46:c6:70:89:81:95:4b:e3:74:f4:44:98:3f:81:
         e9:f4:11:64:61:f9:6a:43:e2:79:d7:11:5a:d7:02:6d:32:74:
         30:c1:ae:98:2a:61:29:ac:8c:f7:15:1b:03:20:7d:7c:e4:4b:
         4e:f5:2d:2c:e7:4c:a8:d5:21:f6:74:b2:c7:9c:bd:7d:9d:cf:
         6c:bc:44:9b:6f:0f:7d:ce:ff:3d:4e:04:e6:85:f0:b8:99:bb:
         04:18:52:3a:67:73:7f:f2:e0:b3:81:9e:7f:3c:b2:9c:0a:55:
         02:3c:2f:0c:9e:73:f9:61:64:33:ed:7a:5c:8e:69:a2:7d:7f:
         50:e9:37:96:3d:2c:cc:09:2c:c4:06:5d:b0:cb:2a:24:de:aa:
         36:61:d3:61:5e:77:9b:6e:cb:ac:b7:d6:13:f4:8e:e9:56:3f:
         c2:97:55:6e:94:25:ec:b4:e0:56:16:4e:be:a8:12:72:90:48:
         82:8b:db:75:45:87:66:34:81:a4:c7:fe:86:79:73:8f:d2:24:
         eb:2c:b8:b3:c3:21:7f:c5:08:c8:98:be:19:ec:e5:cc:7c:9a:
         4c:c7:2e:77:41:9c:fd:31:9e:2a:b7:56:74:be:2e:00:06:91:
         6c:9d:65:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 13:02:25 2025 by rpki-client