Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/898fc129-a8c3-3759-8a3b-c6b6c109c074.roa
File:                     898fc129-a8c3-3759-8a3b-c6b6c109c074.roa (raw, json)
Hash identifier:          rgQ2uzwVS8qV/nq/x78zurHS2HjrIkRikI0gAz1XLEo=
Subject key identifier:   B7:20:20:26:1D:18:3D:F5:F2:F6:F0:0D:A2:83:BB:38:CD:4D:22:A4
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584A9E9658711B10F9A780ED4300
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/898fc129-a8c3-3759-8a3b-c6b6c109c074.roa
Signing time:             Thu 24 Jul 2025 01:00:50 +0000
ROA not before:           Thu 24 Jul 2025 01:00:50 +0000
ROA not after:            Wed 22 Oct 2025 01:00:50 +0000
asID:                     33363
IP address blocks:        2605:a401:8065::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9e:96:58:71:1b:10:f9:a7:80:ed:43:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Jul 24 01:00:50 2025 GMT
            Not After : Oct 22 01:00:50 2025 GMT
        Subject: CN=c414779e-5f01-4229-b170-1f6c9aed656e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:bc:d9:06:7f:84:5d:fa:2b:fe:3b:1b:48:9d:
                    82:21:be:98:4c:f6:39:6f:26:15:d5:5c:d1:45:fc:
                    0c:b6:d8:61:06:a8:7f:96:42:06:d3:ba:b8:b2:e1:
                    bd:4f:07:73:1c:84:97:64:e3:26:92:41:08:d3:c5:
                    c3:f1:03:9e:5f:f1:f0:aa:52:80:fa:bf:cf:65:94:
                    5a:22:4d:9d:fd:a5:bb:41:b8:ff:23:09:29:4c:a3:
                    4b:d9:f2:0c:b1:a0:95:ff:d9:f3:f0:65:5d:2b:8b:
                    3d:68:f3:6a:79:79:73:9c:d6:bf:41:a4:60:d7:66:
                    97:e3:0f:20:5f:5e:8d:50:2c:29:a0:1c:3d:6c:e8:
                    cf:66:2d:c3:4c:6e:38:6c:27:f1:ea:4f:3d:36:e0:
                    7c:54:b1:92:e1:c8:15:9d:4d:34:a4:55:20:71:a6:
                    cd:a6:ff:70:b9:ca:50:11:cc:e7:30:2a:77:82:22:
                    5f:a6:83:12:36:39:38:ff:8a:e5:fc:df:c4:99:ca:
                    88:78:40:38:b9:92:32:68:32:a8:68:4a:a5:b3:91:
                    78:80:03:81:0e:34:6b:69:b9:59:2d:35:fe:8d:4f:
                    b5:92:26:80:65:bc:cf:70:f8:c6:3f:9b:53:b5:42:
                    df:e3:2e:68:22:11:f9:48:f8:f1:eb:5e:6f:ba:77:
                    99:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:20:20:26:1D:18:3D:F5:F2:F6:F0:0D:A2:83:BB:38:CD:4D:22:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/898fc129-a8c3-3759-8a3b-c6b6c109c074.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:8065::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:bb:50:12:c6:e2:b6:7d:29:7c:3b:0f:76:5d:b7:d3:f6:ba:
         7c:8f:ae:86:54:0b:93:9a:66:7f:c0:de:52:f5:4a:4b:c0:b8:
         2a:72:ec:dd:5a:4c:6f:06:39:c3:72:3d:0c:3b:b7:2b:f4:5c:
         84:ab:06:71:b5:b8:15:e5:b9:e4:a3:9d:05:27:b4:3c:cb:d2:
         3d:9c:f9:20:c1:a9:9c:e6:06:17:23:a4:a9:2f:2a:f0:ac:f8:
         10:19:86:22:7a:5d:3a:e1:22:a5:01:d6:8d:e1:a8:0c:93:27:
         40:7b:49:57:90:04:2c:34:8a:58:d6:80:c0:e6:b3:f8:8e:a6:
         0d:67:01:58:9e:9f:6a:22:76:e7:32:45:96:78:63:59:14:1d:
         7c:8e:e0:43:58:d6:64:b0:e6:d7:2c:26:d8:bb:ea:06:b1:6a:
         0f:f1:89:5f:3e:06:e4:d5:66:51:65:dc:c9:41:ed:75:6b:c7:
         78:f6:84:71:05:36:e4:ef:85:ac:2a:b6:82:80:c3:42:25:87:
         5a:b0:d9:d0:ff:25:4c:bf:78:43:46:8b:f6:69:d2:fa:d7:7d:
         c4:8c:59:fe:ac:fe:c0:f9:cd:e1:3e:ef:ca:a9:77:fa:3c:a7:
         eb:67:cc:73:54:9c:a1:c0:68:50:ad:23:4f:f7:a5:5f:38:3f:
         c4:92:08:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:39:15 2025 by rpki-client