Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/8f4129be-42f4-3968-aff2-2e4ca695144b.roa
File:                     8f4129be-42f4-3968-aff2-2e4ca695144b.roa (raw, json)
Hash identifier:          jJRRErDa12OCPN9KldMqkNGxj7mZBbY6mJrv754+CG4=
Subject key identifier:   87:54:87:7A:7D:E5:8F:EF:D3:B6:DF:C8:D5:4B:9C:B7:45:E1:74:09
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584A9E96596145C19D6C1A409180
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/8f4129be-42f4-3968-aff2-2e4ca695144b.roa
Signing time:             Thu 24 Jul 2025 01:00:50 +0000
ROA not before:           Thu 24 Jul 2025 01:00:50 +0000
ROA not after:            Wed 22 Oct 2025 01:00:50 +0000
asID:                     33363
IP address blocks:        2605:a401:80b6::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9e:96:59:61:45:c1:9d:6c:1a:40:91:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Jul 24 01:00:50 2025 GMT
            Not After : Oct 22 01:00:50 2025 GMT
        Subject: CN=001a7504-6a86-40a7-9f34-31db62444c6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:87:f9:2d:6b:53:c9:86:e6:d1:d5:cd:b9:88:
                    d1:4d:4c:f9:69:15:45:f0:29:04:47:34:bf:16:30:
                    7c:f9:dd:21:46:ae:a2:ba:cd:d5:d2:8a:2f:17:6a:
                    69:5e:61:1a:a9:d5:b7:6d:84:f1:be:d7:9a:26:75:
                    20:7c:85:cd:16:8d:e2:05:c1:de:0c:97:a7:a8:90:
                    33:ff:78:e9:9a:a1:5e:12:e0:94:ad:b8:1a:b5:20:
                    9c:f7:04:d3:1d:2b:18:75:9d:5b:f9:1b:a3:fa:ea:
                    99:e3:87:6d:4e:e3:94:46:49:e1:9e:78:d6:fd:c2:
                    09:d6:77:f0:a8:23:c7:15:9a:a6:e8:d7:2f:67:b7:
                    e3:fa:25:3d:95:56:15:4d:ef:17:f4:d7:33:2b:8f:
                    20:38:da:01:06:03:06:2a:fb:57:cb:94:b2:09:ef:
                    bf:e3:10:c3:25:4b:3a:4b:29:7b:a5:98:e9:6c:a3:
                    b3:1f:65:5b:f3:a5:26:38:9b:ac:62:8b:ac:8b:1d:
                    b7:77:6a:ed:44:82:7a:c1:02:b3:27:e5:52:b4:5f:
                    fc:5b:05:8b:e7:36:10:9e:5e:f0:f9:8b:ce:26:9c:
                    f9:d3:fe:61:09:a3:f9:24:53:ff:61:9f:6d:b8:a6:
                    1f:35:b8:13:a0:87:bd:49:72:dd:82:fa:cb:67:c6:
                    a6:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:54:87:7A:7D:E5:8F:EF:D3:B6:DF:C8:D5:4B:9C:B7:45:E1:74:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/8f4129be-42f4-3968-aff2-2e4ca695144b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:80b6::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:71:4b:3a:2d:2e:12:db:72:e3:cb:36:e1:11:6d:65:4e:b4:
         1f:10:61:b3:24:a1:8e:fa:7c:43:a7:c2:0c:c4:b7:ff:5b:a9:
         20:40:2a:c7:70:47:42:73:2e:17:20:1f:0e:19:e9:6c:b4:30:
         04:b8:2a:36:8c:45:dc:76:01:1a:72:e6:fb:2b:19:37:1c:de:
         19:06:78:05:f6:0f:c3:5e:ad:66:78:cf:bd:25:9a:9e:12:c0:
         65:13:1c:85:d1:97:a8:7f:a8:d5:f9:3e:3a:f3:65:bb:e7:11:
         eb:f8:d3:48:34:2b:16:7f:bd:e5:bb:2c:29:60:da:71:53:5e:
         ec:06:ec:e2:2e:1d:e2:f0:a0:06:5d:b5:60:80:4d:cd:f0:94:
         13:c8:6f:20:5d:6d:03:7e:97:91:0e:9b:d2:6a:97:88:83:a5:
         50:7d:36:86:63:40:26:1b:67:da:f2:5b:9e:0e:aa:25:35:3c:
         c3:2c:46:98:07:5f:85:89:9d:63:af:a3:1a:bd:6b:a5:07:ae:
         24:ce:0a:b8:a8:b2:7f:f4:23:88:44:b1:24:de:2d:9d:19:2d:
         c3:63:5c:86:64:2c:4b:c7:a7:cd:a9:1f:2f:3b:0d:12:7a:a9:
         b4:c1:0b:e0:4b:a5:b0:8d:00:3b:f8:31:e1:57:15:c4:13:1b:
         4b:e9:90:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:34:08 2025 by rpki-client