Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/ce973231-763a-3551-8c11-f2a670bc5be0.roa
File:                     ce973231-763a-3551-8c11-f2a670bc5be0.roa (raw, json)
Hash identifier:          bZqGaFrP+5ARUkxWFma9qXhiF6eyp6QBr0h8f2Docqo=
Subject key identifier:   E7:E7:B3:2B:60:FB:00:AC:E3:46:CD:93:3F:8F:C7:45:9C:96:0C:D1
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584A9E965D9A383A5A886D17CC80
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/ce973231-763a-3551-8c11-f2a670bc5be0.roa
Signing time:             Thu 24 Jul 2025 01:00:50 +0000
ROA not before:           Thu 24 Jul 2025 01:00:50 +0000
ROA not after:            Wed 22 Oct 2025 01:00:50 +0000
asID:                     33363
IP address blocks:        2605:a401:86de::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9e:96:5d:9a:38:3a:5a:88:6d:17:cc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Jul 24 01:00:50 2025 GMT
            Not After : Oct 22 01:00:50 2025 GMT
        Subject: CN=633d15ce-15e0-4321-ae3b-f7affbf42c22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c3:2d:8d:0e:3c:ff:d3:bd:07:8c:a0:75:74:
                    fa:78:a0:11:b9:71:6f:f2:56:d2:2a:a9:d9:b6:23:
                    82:5a:88:b8:46:0c:ba:3d:d7:49:6e:38:18:74:26:
                    b1:02:5c:64:84:bd:72:d3:88:68:a2:02:2d:37:0d:
                    53:35:8e:0e:27:6e:d9:73:9a:d2:46:5d:bd:04:b9:
                    b1:ee:17:d8:13:bf:b2:53:a7:33:2c:b6:9f:65:ee:
                    f0:46:dc:42:39:f8:15:31:bf:a5:e1:fa:fb:67:ce:
                    d8:9a:ae:d0:54:1f:67:85:d4:b9:08:47:a7:22:5d:
                    4e:ac:c4:a5:51:95:a8:e3:9e:f0:c2:7f:45:a1:a9:
                    f2:0e:9a:11:8e:68:09:3f:c7:01:e2:1a:55:fa:4a:
                    2f:eb:98:39:89:0b:4f:51:23:3c:95:96:a4:98:f9:
                    19:9b:5a:9d:7f:1c:c1:a3:15:fa:63:f0:15:63:b1:
                    a0:26:41:aa:20:60:01:d0:a1:51:9b:19:aa:d8:57:
                    9a:f3:7e:28:0c:64:c5:ad:e8:f5:40:04:95:d6:8c:
                    50:b6:38:f3:0e:62:73:f2:04:4d:8a:3f:3b:0a:d3:
                    cd:d4:e5:d5:00:ec:a8:1a:9f:db:ff:ba:71:70:c0:
                    f6:e4:8f:06:0d:43:bc:dc:49:8f:70:bc:ea:48:73:
                    c5:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:E7:B3:2B:60:FB:00:AC:E3:46:CD:93:3F:8F:C7:45:9C:96:0C:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/ce973231-763a-3551-8c11-f2a670bc5be0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:86de::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:84:60:96:dc:f0:a4:56:92:26:2d:08:9f:87:3e:f2:56:b9:
         23:48:0e:3f:50:b6:4a:41:71:6c:5f:8d:e4:11:03:0f:bb:eb:
         fa:66:9e:f9:b4:4b:67:24:91:f5:e2:51:1c:9b:de:9a:5a:ef:
         75:0d:e2:c0:e7:a5:e4:90:6c:57:c0:1e:6e:95:79:bc:04:ea:
         f8:5f:e0:f9:85:91:b2:ca:c7:10:64:45:b5:be:99:4e:18:e6:
         7a:a7:50:15:78:b3:ff:07:f6:c4:e9:fe:cb:28:0b:41:b2:2b:
         b8:26:9c:16:9b:40:59:b2:90:aa:ba:37:67:21:7d:aa:3d:96:
         f6:6f:c0:83:4e:86:58:3e:c4:aa:38:f1:42:3b:bc:c9:f5:d2:
         d6:61:1c:8f:c4:c8:15:bc:55:9e:eb:96:1f:74:bf:59:51:ed:
         97:f0:82:48:b8:79:89:d7:fa:ec:8e:a8:0e:86:2e:67:37:9b:
         c6:1b:6d:e1:3b:e2:f3:db:1e:b0:13:95:a3:e7:37:5e:28:44:
         bc:6a:c7:82:63:63:89:37:0b:76:ae:50:47:26:99:7b:1f:b2:
         11:78:4a:52:8c:a6:26:44:e1:5a:78:dd:01:17:cd:04:39:f4:
         2f:c2:a9:3a:a5:de:0d:08:24:13:bf:e5:9a:6c:96:31:82:b5:
         41:73:d9:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 10:06:37 2025 by rpki-client