Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/ea195aaf-0f4f-35a6-ac60-6c5f3d5ffc32.roa
File:                     ea195aaf-0f4f-35a6-ac60-6c5f3d5ffc32.roa (raw, json)
Hash identifier:          MdYz3hQ5B9E9ykVJa2wwxfv1bIC0y3St0V3KtedwSw0=
Subject key identifier:   2E:EB:43:EE:A0:1D:D1:5D:0A:27:04:19:78:45:D4:DF:2E:16:C1:10
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584A9E96570C6772DCD043C58A40
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/ea195aaf-0f4f-35a6-ac60-6c5f3d5ffc32.roa
Signing time:             Thu 24 Jul 2025 01:00:50 +0000
ROA not before:           Thu 24 Jul 2025 01:00:50 +0000
ROA not after:            Wed 22 Oct 2025 01:00:50 +0000
asID:                     33363
IP address blocks:        2605:a401:6::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9e:96:57:0c:67:72:dc:d0:43:c5:8a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Jul 24 01:00:50 2025 GMT
            Not After : Oct 22 01:00:50 2025 GMT
        Subject: CN=40c6fd76-e081-44ab-bc3b-73e6fbe806ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e3:e1:ec:d7:8a:ea:ba:cf:21:6d:91:d8:2b:
                    35:36:4d:67:63:e6:7d:51:7f:26:1e:2f:0b:41:21:
                    f1:19:b4:cf:cd:03:6d:5a:a8:fd:b1:c5:8c:2f:03:
                    19:05:e1:ca:a7:9b:e0:56:85:87:4c:9a:5e:9d:49:
                    cc:9e:35:80:08:7d:ef:85:7a:d3:71:ed:a5:2f:24:
                    bd:74:86:97:ae:8b:cc:98:ab:3b:d4:f3:a1:d8:0f:
                    50:2a:b1:68:8d:c2:79:5c:07:6c:79:c9:53:db:3d:
                    25:ab:87:32:be:7d:c9:e4:4a:17:1a:a5:55:a7:34:
                    ae:27:f0:85:f5:ac:c3:7d:20:5a:fb:d8:61:28:0e:
                    49:fa:9b:49:ef:c9:51:8e:1d:65:a2:1a:6a:be:9d:
                    8f:2a:d6:a6:3a:6a:4a:c9:de:09:e1:ac:e4:e3:af:
                    c5:fa:7b:f5:e5:37:8a:6c:37:21:84:7c:ad:43:64:
                    b7:ba:2d:d9:91:76:55:24:50:86:c5:02:b6:39:74:
                    3e:cd:c2:87:1a:49:c1:79:1b:5b:53:30:4c:ea:28:
                    a4:3a:86:ad:a4:f2:a6:5c:39:90:5d:ab:04:0f:52:
                    39:b0:e4:52:27:81:2a:e9:0a:38:7f:bc:e7:4b:c0:
                    89:68:56:ee:4b:b8:43:e4:3e:95:09:0b:63:b5:e6:
                    3e:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:EB:43:EE:A0:1D:D1:5D:0A:27:04:19:78:45:D4:DF:2E:16:C1:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/ea195aaf-0f4f-35a6-ac60-6c5f3d5ffc32.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:6::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:0c:d6:11:75:ab:73:e8:89:c6:04:2c:b7:60:59:03:34:84:
         7f:87:23:a1:71:dd:c7:ce:a7:32:c3:05:3d:11:5b:75:88:3a:
         28:90:a2:0a:9e:dc:bb:57:0a:2e:77:34:8c:a5:f7:7d:84:c4:
         72:1a:10:94:99:21:e7:a4:ce:37:da:f6:c2:d9:d6:b3:44:b0:
         a1:2f:9c:b4:fa:86:81:49:f0:8b:7f:55:13:d6:2c:ba:98:44:
         f9:5f:7c:10:33:93:83:57:64:c1:56:a3:9e:10:35:06:0a:ac:
         b3:4e:76:07:63:b5:5b:61:8c:90:24:08:6c:00:9e:95:0b:c9:
         d2:79:8c:52:75:e0:d6:b8:49:3c:fa:84:e4:91:30:33:61:bd:
         c2:5d:18:88:62:09:b9:02:25:a1:9a:fa:16:b9:1c:45:6a:56:
         45:8a:df:68:19:fa:03:c4:49:a9:42:75:79:f7:e7:1d:82:3d:
         9f:5e:37:a6:e8:8d:df:58:b6:6c:89:25:0f:a2:73:d4:58:48:
         e8:15:37:a0:63:5b:1c:5f:b2:17:27:f6:d5:21:e6:e0:7a:3f:
         87:04:e1:0d:15:bf:2a:04:03:f1:af:9f:07:61:0b:e0:30:72:
         c4:4e:2d:f1:b2:2a:82:6c:88:b1:1e:d9:ed:0f:d9:92:82:01:
         96:d4:22:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:48:39 2025 by rpki-client