Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/e5633dc6-1e22-3089-a2dd-611514bb6984.roa
File:                     e5633dc6-1e22-3089-a2dd-611514bb6984.roa (raw, json)
Hash identifier:          pJY/DJWaQSdiKdOjwn4T4iByBKlbF61WS51cxvXoqUg=
Subject key identifier:   16:B3:96:DB:88:BE:0F:95:B7:48:54:9B:9F:37:51:60:CC:CE:03:51
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584A9E962EE1D596A290F9AD4380
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/e5633dc6-1e22-3089-a2dd-611514bb6984.roa
Signing time:             Thu 24 Jul 2025 01:00:50 +0000
ROA not before:           Thu 24 Jul 2025 01:00:50 +0000
ROA not after:            Wed 22 Oct 2025 01:00:50 +0000
asID:                     33363
IP address blocks:        2605:a401:8188::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9e:96:2e:e1:d5:96:a2:90:f9:ad:43:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Jul 24 01:00:50 2025 GMT
            Not After : Oct 22 01:00:50 2025 GMT
        Subject: CN=6029a1ea-d33d-46ba-9ab4-905ebac6356f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:95:b0:05:a6:39:80:79:7b:c1:f3:87:59:38:
                    3a:75:d1:48:de:ef:26:2b:a4:ce:b4:bd:8b:d6:2f:
                    77:bd:ad:48:bc:d5:e6:0b:2f:43:f7:70:08:a7:b7:
                    18:c6:af:99:f7:ca:d9:67:ee:42:bd:04:22:db:83:
                    3f:50:02:5c:1c:64:cc:bf:b7:0c:f7:7c:38:64:a8:
                    1f:66:08:8e:8a:aa:ed:bd:31:ca:97:a8:10:c0:dc:
                    89:dc:0b:5e:28:66:e0:ae:91:25:34:ea:bc:b7:5c:
                    1f:eb:ed:d1:40:67:b6:36:8e:12:16:d3:9b:98:59:
                    e8:07:67:73:c4:d5:c2:6c:75:37:41:76:0e:9f:dd:
                    57:f4:9c:4c:13:be:5d:06:a0:ac:46:43:ab:11:50:
                    bd:50:07:15:65:00:cf:f7:cf:09:5e:ca:b9:8a:d3:
                    b1:d4:c5:9e:80:19:01:e6:fd:ad:59:90:4a:64:ea:
                    01:2c:0a:a5:78:97:d0:17:55:ef:70:22:69:c7:ac:
                    5b:02:19:4e:d0:30:84:39:7b:a3:32:4c:16:53:d8:
                    2c:e5:31:0d:6c:92:ed:14:aa:4c:ba:52:6d:45:6b:
                    18:3d:d3:eb:28:01:cb:7a:5f:cd:c0:8a:2f:6a:c2:
                    c1:2c:b8:11:e5:53:ce:61:20:54:f6:e5:27:28:23:
                    25:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:B3:96:DB:88:BE:0F:95:B7:48:54:9B:9F:37:51:60:CC:CE:03:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/e5633dc6-1e22-3089-a2dd-611514bb6984.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:8188::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:1e:ab:cf:a1:e8:76:67:37:c6:76:ab:df:df:2b:9c:71:89:
         f2:21:a5:61:ef:2d:80:02:49:93:a6:e5:2c:de:f2:d2:04:7f:
         2c:cf:9c:d4:c9:84:fa:b7:b7:c7:9a:4e:f6:20:cc:ec:39:64:
         b6:80:f2:49:51:5d:71:fb:64:3b:be:4d:92:76:c7:bf:de:e9:
         64:2c:36:87:2c:eb:18:c4:76:23:5d:eb:60:69:33:f1:0e:f3:
         f2:a6:d4:aa:3e:19:28:95:6d:ba:1d:98:e2:8f:5d:69:93:0f:
         d4:87:47:bf:00:ef:60:c9:79:ac:f4:c9:2c:36:14:e3:b5:91:
         83:3c:c3:4a:7a:06:4e:8c:d9:37:56:60:81:aa:05:d2:fd:60:
         53:1d:e4:a0:28:38:30:31:59:5f:80:3c:5e:49:a2:cc:17:a1:
         c9:4b:97:4d:c7:97:4a:e0:07:21:5f:37:c3:ce:bb:80:ce:69:
         c5:81:ec:45:a0:f7:09:44:9f:86:ac:b2:f0:4d:5f:7a:a8:da:
         06:92:ea:23:3a:d2:80:03:2b:92:76:bf:bf:eb:fb:3c:87:53:
         3a:00:9d:79:fd:9d:ff:fe:74:1f:75:15:7b:88:35:c8:ff:74:
         b8:dd:94:04:0e:fb:2e:4c:a4:a7:28:e2:7b:89:85:ea:9b:95:
         f5:97:9b:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:33:10 2025 by rpki-client