Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/7e02c2d9-d3b7-3ea9-a0fa-f571fe212398.roa
File:                     7e02c2d9-d3b7-3ea9-a0fa-f571fe212398.roa (raw, json)
Hash identifier:          k4247VIPMaLqKJXhOYmGAGj+FMdmLQ0bPD0SQkIZHqs=
Subject key identifier:   D3:96:F4:9C:33:CE:25:4A:06:5F:5F:EA:95:C9:15:34:3F:DC:33:F2
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584A9E963563B6AA775D0F1D8E40
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/7e02c2d9-d3b7-3ea9-a0fa-f571fe212398.roa
Signing time:             Thu 24 Jul 2025 01:00:50 +0000
ROA not before:           Thu 24 Jul 2025 01:00:50 +0000
ROA not after:            Wed 22 Oct 2025 01:00:50 +0000
asID:                     33363
IP address blocks:        2605:a401:82f3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9e:96:35:63:b6:aa:77:5d:0f:1d:8e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Jul 24 01:00:50 2025 GMT
            Not After : Oct 22 01:00:50 2025 GMT
        Subject: CN=8b9ecc4a-bf87-485f-ac6e-52d02a328440
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:40:b6:e2:e3:c1:5c:66:14:73:23:2c:69:de:
                    fa:3d:a6:82:00:e7:7e:8d:65:df:a5:68:01:d8:e3:
                    a0:46:9d:76:a6:9d:fd:e5:31:7e:f9:f7:71:d4:73:
                    ed:5c:c9:05:d5:c8:3c:3e:ad:52:d5:a0:39:21:b0:
                    04:d2:6a:4b:e8:32:cb:a7:95:e9:42:93:e6:60:e4:
                    b9:49:d8:ae:ff:0a:fa:ba:0a:5f:0d:f0:57:69:3a:
                    7b:ea:8a:1e:6a:c0:0b:47:33:cc:8a:cd:45:b8:a6:
                    31:d0:6e:b6:4b:7a:3c:38:a0:ee:6d:5a:90:46:03:
                    6f:9f:c8:53:45:22:76:b6:6a:93:1e:fd:e9:76:75:
                    c2:e2:d8:1a:3b:55:f4:81:7c:3b:cc:bd:b9:b3:94:
                    f5:9f:7c:27:32:d0:2a:b9:ab:5d:13:12:89:fc:74:
                    ec:e7:19:e9:e5:a6:e7:96:e9:79:1d:12:57:83:67:
                    ad:b0:8f:49:be:90:8c:24:57:55:0c:7a:78:e7:76:
                    89:b0:bf:a6:95:51:93:e8:42:ce:63:a6:91:4a:c3:
                    27:96:e7:cd:2c:9f:ab:f9:25:aa:d7:6c:98:01:4c:
                    3d:8a:a0:40:c4:cf:9c:93:3f:b7:36:4b:da:bd:cd:
                    04:12:af:d9:1d:b7:58:6b:c1:b6:b6:97:e8:1d:f7:
                    2e:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:96:F4:9C:33:CE:25:4A:06:5F:5F:EA:95:C9:15:34:3F:DC:33:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/7e02c2d9-d3b7-3ea9-a0fa-f571fe212398.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:82f3::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:3c:52:92:d2:e4:c4:a0:e0:45:2f:89:c6:10:77:eb:6a:b1:
         fd:c0:54:77:a9:17:40:4d:85:99:11:02:12:88:1e:65:24:90:
         e7:32:ea:d8:7e:12:93:39:c7:36:59:eb:86:d4:ce:1c:28:c9:
         43:7d:f0:eb:56:1e:10:a5:55:a2:3d:fe:06:d3:1e:53:a5:42:
         c6:bd:d2:1a:ae:a2:fb:63:67:ae:a4:4a:c6:32:a6:89:1d:58:
         1a:80:a6:d2:6c:9b:a2:b5:1b:eb:d2:5c:c7:e0:fa:8d:ea:ba:
         a3:44:8e:99:a6:eb:5c:d5:67:ab:1b:26:0a:aa:06:84:54:f4:
         b0:49:b1:17:8d:3b:67:0f:31:88:28:22:f5:e9:57:c1:0c:03:
         ab:6d:84:ec:a4:a7:83:1d:7c:d3:7f:e8:66:17:ec:09:33:04:
         e5:69:96:e7:93:93:04:85:a9:40:e4:5c:9f:c5:05:79:c9:55:
         6d:0c:aa:9b:3b:8d:b2:d8:ff:bd:49:d9:b3:ca:53:06:f4:b0:
         3c:04:a7:88:6f:cd:31:93:6e:f5:54:c7:c7:f3:0a:b1:10:f5:
         23:6f:49:2f:db:b7:53:a4:09:d1:cd:b8:0d:d3:75:5b:ea:96:
         a5:f8:5f:d2:53:ae:1a:e5:e1:0d:1d:67:72:1a:9c:cc:cf:69:
         7a:6f:6a:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:02:24 2025 by rpki-client