Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/9742ac58-6e69-3ca5-abd7-db669fc14e93.roa
File:                     9742ac58-6e69-3ca5-abd7-db669fc14e93.roa (raw, json)
Hash identifier:          XOS6Kgd/MWVeUiKhxVZaEVqMwKLqpibjlhRzCQuD07A=
Subject key identifier:   C3:EA:F9:7A:F9:0C:21:86:DD:44:7F:29:33:F1:2A:05:C5:6A:E5:BC
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584A9E965C80DE5A0D045BC1A800
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/9742ac58-6e69-3ca5-abd7-db669fc14e93.roa
Signing time:             Thu 24 Jul 2025 01:00:50 +0000
ROA not before:           Thu 24 Jul 2025 01:00:50 +0000
ROA not after:            Wed 22 Oct 2025 01:00:50 +0000
asID:                     33363
IP address blocks:        2605:a401:82a9::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9e:96:5c:80:de:5a:0d:04:5b:c1:a8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Jul 24 01:00:50 2025 GMT
            Not After : Oct 22 01:00:50 2025 GMT
        Subject: CN=99e8570f-dc05-445f-96c1-361749b27c78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:6b:2c:cf:59:ac:0c:57:a3:30:a1:7a:35:dd:
                    be:bc:5d:bc:a6:33:ae:bb:26:9f:88:b8:8e:c9:19:
                    f4:c0:fc:dc:83:db:d3:7d:95:bc:f9:1a:99:96:9f:
                    a1:57:ca:32:85:98:9f:a6:e8:ba:63:c6:f0:fe:91:
                    b8:72:3e:2c:bd:43:e3:1d:88:f8:dc:be:0f:46:ca:
                    3c:6b:23:6e:ca:bf:9f:83:5f:4d:cd:0f:95:a9:1c:
                    f4:54:b8:1f:32:37:4f:1c:25:7a:ce:af:77:78:52:
                    0d:52:d6:66:8a:ac:3a:9f:5d:3d:6e:12:2f:d5:36:
                    e0:42:bc:f4:92:ae:2f:b3:6e:f2:f0:bb:bb:b8:16:
                    8d:d6:dd:03:c6:03:f2:b2:34:dd:e8:52:2e:f8:70:
                    99:73:9c:f5:74:8d:c0:5a:a0:66:96:14:a0:02:0e:
                    75:6e:11:88:5c:84:21:ea:fb:61:0f:92:e9:16:c9:
                    b3:30:15:59:ee:fd:b7:26:ef:0e:66:7a:13:29:29:
                    1d:0b:e3:fd:03:d2:4e:5b:85:14:a1:50:f7:47:38:
                    e3:fe:5b:84:84:a1:81:ff:26:41:af:21:9a:a7:d9:
                    7c:f8:06:25:73:dc:90:ab:35:f4:43:3e:b6:af:f2:
                    12:8e:2a:dd:ac:f0:19:66:2a:4b:b9:ac:a7:e9:75:
                    3c:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:EA:F9:7A:F9:0C:21:86:DD:44:7F:29:33:F1:2A:05:C5:6A:E5:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/9742ac58-6e69-3ca5-abd7-db669fc14e93.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:82a9::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:22:11:5d:ab:4d:82:c3:2d:dc:7b:f4:e3:a5:c2:e4:5a:ad:
         c5:c1:b6:33:30:b8:98:10:ba:e0:cc:1d:43:ba:b6:ce:f9:ff:
         63:02:bc:49:04:fb:19:7f:05:1c:7a:77:71:79:73:47:46:db:
         8b:ed:94:1d:3a:75:a4:af:fc:28:33:44:81:59:31:bd:b5:0f:
         11:d7:69:b6:9a:c2:92:59:d0:49:71:61:23:ec:6e:1c:76:88:
         db:8f:4c:8c:73:78:bb:4a:d2:bd:4d:f5:53:36:03:ea:70:dd:
         54:cd:7d:1b:fd:fc:21:65:41:d2:cb:c2:c6:69:85:a0:d0:60:
         19:4a:bf:d8:30:ea:5e:67:0a:e4:a3:2c:30:eb:b7:a1:57:dd:
         5b:07:10:dd:64:c5:13:6d:cd:8f:74:7b:0a:af:6e:a3:a9:97:
         c1:1e:91:02:b4:0c:3b:a2:c4:74:33:fb:57:fa:42:cc:3d:5f:
         06:68:96:be:2f:8a:e2:89:ea:af:47:1d:97:a3:a6:61:a9:a3:
         da:6e:86:77:d6:32:08:12:52:b8:1b:f2:36:6b:00:f5:86:df:
         d5:be:f8:47:44:f5:87:8f:7e:66:47:74:43:87:55:e8:d8:c8:
         ca:58:a7:13:be:4e:37:42:af:a2:0d:c1:a9:e8:68:7d:d6:8c:
         78:f7:8a:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:08:38 2025 by rpki-client