Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/edde4344-71b1-3460-878f-86eca61631f2.roa
File:                     edde4344-71b1-3460-878f-86eca61631f2.roa (raw, json)
Hash identifier:          B/Sk6J/wK/Ggzhc7l02xXxVZB79C9vaHpWKMOk0EwrU=
Subject key identifier:   5F:9C:99:85:92:60:47:C7:CD:49:85:B1:C1:54:A3:32:2F:4C:C4:DC
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584A9E962D784876A84873424200
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/edde4344-71b1-3460-878f-86eca61631f2.roa
Signing time:             Thu 24 Jul 2025 01:00:50 +0000
ROA not before:           Thu 24 Jul 2025 01:00:50 +0000
ROA not after:            Wed 22 Oct 2025 01:00:50 +0000
asID:                     33363
IP address blocks:        2605:a401:80da::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9e:96:2d:78:48:76:a8:48:73:42:42:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Jul 24 01:00:50 2025 GMT
            Not After : Oct 22 01:00:50 2025 GMT
        Subject: CN=5c19f23b-e96b-43a1-9976-8214f9d9fa90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:35:5a:b3:f2:aa:9f:48:04:9e:09:3d:ce:30:
                    f8:5c:4c:8e:6c:e3:71:13:39:11:23:78:c0:8b:d0:
                    ab:d9:61:ea:be:16:50:20:fa:85:73:1b:d0:00:ea:
                    8f:87:81:6d:b9:11:6b:a7:f8:f1:04:07:39:76:5f:
                    94:2c:97:10:ff:e9:97:ae:d6:2a:dd:b8:02:d4:88:
                    69:2e:65:e1:9a:c0:16:51:a5:de:4c:57:83:76:c0:
                    d1:ff:c5:f1:6d:be:ce:61:4b:0e:dd:64:aa:68:6f:
                    00:f5:f6:22:33:e2:a8:aa:11:75:06:7c:ea:6e:d1:
                    b5:fb:ee:43:42:ce:eb:bf:61:3e:3c:bf:7b:62:d7:
                    c1:7d:ed:26:8d:cc:a5:ee:b8:e8:34:fe:3c:2a:ee:
                    57:48:bb:f2:b7:6c:cd:7b:92:28:66:37:e3:01:de:
                    b2:a7:de:00:f5:a6:7a:65:95:ae:58:5d:24:fd:f6:
                    9b:82:51:c1:da:f1:75:c1:b7:ea:ac:bc:cb:45:32:
                    a3:af:f7:a3:91:2f:5e:ab:e6:2d:77:5f:92:37:df:
                    91:52:9d:cc:30:aa:e5:1c:af:28:69:64:ea:80:cb:
                    2e:dd:75:a0:38:4e:e5:70:85:fd:de:db:72:e1:96:
                    40:ae:fa:5c:0b:d5:00:2b:5b:f1:32:4e:de:9d:21:
                    24:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:9C:99:85:92:60:47:C7:CD:49:85:B1:C1:54:A3:32:2F:4C:C4:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/edde4344-71b1-3460-878f-86eca61631f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:80da::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:ae:ca:2c:8a:e9:82:0d:0e:63:0a:4f:f3:9a:ed:a8:47:23:
         ca:34:7b:22:70:0c:67:da:1c:05:a5:84:86:c7:c1:06:a8:fe:
         f6:60:f9:d5:65:8d:b2:33:f0:7b:e7:bd:9c:10:ac:36:fc:39:
         b2:4e:93:2a:66:42:ae:3b:ee:ba:4b:83:b4:86:21:33:7a:ac:
         aa:4f:ba:a9:b0:10:f5:f2:71:38:dd:5c:50:aa:c7:ca:89:a6:
         25:40:14:d7:4e:f1:72:23:a5:1e:85:db:31:08:8c:32:08:56:
         ab:d3:5a:fa:fe:8f:15:68:cb:05:d6:cf:15:3c:3a:8f:4c:4b:
         16:36:ec:3e:23:5c:e0:88:b4:41:38:ba:14:68:27:cb:fe:b5:
         b7:85:d0:cc:38:b5:4d:42:29:20:f0:b4:78:00:1c:9b:cf:19:
         25:cb:df:9f:37:5f:01:dd:91:a0:cf:44:9d:8e:8c:14:10:e4:
         2c:b3:07:af:25:9b:e6:82:06:22:b3:ac:04:29:da:6b:c8:aa:
         bb:55:23:d8:30:da:0e:89:e4:f7:e0:0d:62:7d:93:94:76:8f:
         cf:92:1f:9a:be:11:67:4a:91:f4:82:d3:99:3f:f3:fd:de:a2:
         e9:ef:37:7e:2d:bd:71:e2:fa:ff:61:ce:60:b3:82:d9:0c:b3:
         02:e8:a1:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 23:04:40 2025 by rpki-client