Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/9d3b5c58-e0d8-3952-807a-223c8ada20e4.roa
File:                     9d3b5c58-e0d8-3952-807a-223c8ada20e4.roa (raw, json)
Hash identifier:          Nod962z7ELgTHbsrXbObL/w1uk9kgb6viTHxD4MNqAk=
Subject key identifier:   C1:56:BE:FE:DA:C7:2F:E7:82:B3:83:12:6C:B8:57:41:2E:25:CC:77
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584A9E96571A88227B8015A7C880
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/9d3b5c58-e0d8-3952-807a-223c8ada20e4.roa
Signing time:             Thu 24 Jul 2025 01:00:50 +0000
ROA not before:           Thu 24 Jul 2025 01:00:50 +0000
ROA not after:            Wed 22 Oct 2025 01:00:50 +0000
asID:                     33363
IP address blocks:        2605:a401:7::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9e:96:57:1a:88:22:7b:80:15:a7:c8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Jul 24 01:00:50 2025 GMT
            Not After : Oct 22 01:00:50 2025 GMT
        Subject: CN=b6c560f1-38bc-434b-9538-81886b5bda1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:68:9a:e9:3e:5a:a4:66:0e:f3:a7:a6:21:0a:
                    aa:b7:b2:fd:2b:59:bf:fb:40:13:aa:5e:8a:b6:1e:
                    e5:05:ee:33:b4:19:f5:f7:a6:25:38:1e:59:26:41:
                    22:d8:5f:cb:38:d2:9b:8b:e6:ad:3c:31:a6:d3:12:
                    dd:29:ad:65:68:fe:f2:79:da:e9:e8:8b:f6:3c:b0:
                    b6:91:a5:b9:2a:92:d0:aa:35:34:92:5e:9e:4d:46:
                    ba:ac:db:c9:83:39:03:b8:eb:6c:4f:68:c7:31:28:
                    3e:86:12:4b:bc:dc:83:b0:5f:ef:25:85:6a:a3:3b:
                    c6:ee:b8:0e:98:50:0f:19:55:00:ff:8c:e8:1a:7e:
                    b7:45:e3:bd:e2:18:c4:8c:f7:16:12:71:c2:c0:65:
                    fa:5e:f8:08:9b:3f:eb:8d:05:00:2c:ca:7e:af:00:
                    11:4f:2c:4a:d4:14:70:3f:b9:a7:20:eb:58:43:80:
                    77:8e:0e:33:8a:8f:08:ae:45:82:7c:4e:bf:af:4b:
                    9b:1f:a3:32:c0:38:e7:6d:06:e6:d6:bf:be:02:ff:
                    89:0d:15:f4:d3:1c:71:6b:30:dd:97:d9:44:5c:75:
                    b7:4f:04:f7:d9:1e:d4:95:64:e5:ee:05:d5:fe:8e:
                    86:81:35:a1:ec:bf:d0:65:62:26:d5:4d:f4:1c:50:
                    2c:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:56:BE:FE:DA:C7:2F:E7:82:B3:83:12:6C:B8:57:41:2E:25:CC:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/9d3b5c58-e0d8-3952-807a-223c8ada20e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:7::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:ad:27:11:28:a2:d7:37:a8:40:1a:0c:e5:e0:de:21:34:75:
         dd:d2:ac:f3:77:1e:0f:50:64:0a:f3:15:63:30:79:c6:fa:d3:
         da:aa:fa:12:58:32:d2:bb:6f:89:27:88:0a:17:36:30:4a:91:
         3d:e7:d7:23:98:65:f3:40:65:d4:39:4d:d5:4e:6a:91:93:be:
         ee:ee:2b:b8:b7:4d:df:82:ea:a2:01:a7:77:6f:1b:60:59:3f:
         f3:44:ce:18:93:ca:c3:0a:9d:8a:6c:66:14:d3:11:8c:2e:53:
         2e:93:65:d1:ff:cf:a0:10:25:99:cb:db:7a:4f:1e:07:12:d8:
         c6:f6:54:78:e9:7d:02:fa:8c:63:5e:06:80:28:6d:4a:a4:e6:
         e3:63:c3:17:d9:14:73:2c:16:a5:a1:78:49:f7:00:ed:1f:16:
         f6:66:ab:1b:13:04:3b:23:6c:b9:86:9f:73:db:6d:14:46:2d:
         23:e9:75:75:76:95:29:69:35:79:76:f6:44:ed:2c:62:ed:2f:
         59:e6:10:6f:ff:a8:c6:83:2a:80:13:bf:fe:08:e8:96:99:d3:
         04:1d:5b:92:2d:c2:7a:a4:9e:82:3d:0f:41:02:ca:75:26:b5:
         c1:80:24:77:69:9b:6f:60:c4:68:2b:05:2e:e1:b2:e9:36:0d:
         39:a6:3d:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 07:48:10 2025 by rpki-client