Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/f46f3290-213e-357e-85c3-762e6082fd36.roa
File:                     f46f3290-213e-357e-85c3-762e6082fd36.roa (raw, json)
Hash identifier:          q1X8zc9nmIG3Lwe34j2vRU5y+ljYdMGthJwHCrHuQeA=
Subject key identifier:   E5:9B:53:BB:84:E9:57:62:AF:7D:6D:86:5C:C3:7B:17:23:11:04:8E
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584A9E962D3479550FB81BF35EE0
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/f46f3290-213e-357e-85c3-762e6082fd36.roa
Signing time:             Thu 24 Jul 2025 01:00:50 +0000
ROA not before:           Thu 24 Jul 2025 01:00:50 +0000
ROA not after:            Wed 22 Oct 2025 01:00:50 +0000
asID:                     33363
IP address blocks:        2605:a401:80b9::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9e:96:2d:34:79:55:0f:b8:1b:f3:5e:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Jul 24 01:00:50 2025 GMT
            Not After : Oct 22 01:00:50 2025 GMT
        Subject: CN=b74a052e-15f8-49c6-b487-d9bf94d16974
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:e8:d3:b6:93:f3:43:56:13:f5:c1:3c:70:51:
                    e2:3b:8e:e5:e1:fb:55:0f:8c:ef:00:f6:59:63:74:
                    25:c8:e4:84:ea:f9:71:57:5c:e4:b1:6c:1c:ec:ff:
                    ee:5f:b4:68:ac:ff:d6:d9:58:a2:05:dd:dd:07:8b:
                    e7:53:c7:3a:0f:6c:f0:2f:aa:18:71:67:7b:b0:a6:
                    1b:e1:7a:6d:25:36:ed:0e:4d:54:85:40:4b:b4:d1:
                    cf:e1:ec:c8:96:e4:ff:a6:40:c4:ae:94:7c:76:61:
                    4a:8b:16:cd:b2:24:d1:5d:2f:c2:4b:ca:93:4c:f5:
                    cf:bb:e6:61:63:c0:43:02:e3:ea:67:4d:58:4c:22:
                    c6:13:6a:c2:b9:dc:c6:0d:d8:fa:3e:35:66:88:73:
                    8c:83:ff:a9:4c:d8:24:a3:de:8f:07:a8:f2:86:5e:
                    94:a2:c6:02:cd:8e:ad:2a:04:64:72:74:5c:6c:4b:
                    0a:9a:b4:b1:94:2e:b2:ce:db:91:3b:44:bd:bd:1f:
                    0e:5c:dc:ca:20:fb:f8:4d:aa:b3:0e:df:fe:9b:9d:
                    1c:b8:c6:a5:fd:c9:3e:0f:9e:02:42:6b:d9:c2:2b:
                    85:a7:2e:fb:f7:3c:fb:79:73:61:cb:66:ff:44:3e:
                    c2:0a:59:e7:5a:24:49:be:00:03:04:db:54:b6:89:
                    15:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:9B:53:BB:84:E9:57:62:AF:7D:6D:86:5C:C3:7B:17:23:11:04:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/f46f3290-213e-357e-85c3-762e6082fd36.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:80b9::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:3f:05:57:b9:1d:e1:5c:de:85:9b:9a:e4:1c:a2:55:5a:8c:
         4f:a2:cb:4d:15:6e:bc:a5:e6:e4:25:18:d9:cd:a5:34:9a:19:
         e7:db:5e:21:a4:ae:11:8b:57:35:1d:94:a8:6e:fb:9a:aa:6d:
         92:b6:60:03:40:ef:b5:54:30:64:6a:6e:dd:99:66:3e:a7:24:
         53:fa:b8:35:ab:60:59:a2:90:1e:4f:15:41:40:c2:7b:e4:2c:
         c4:18:3c:ba:7b:28:4a:95:90:1f:ca:dc:da:09:87:4f:52:64:
         2c:95:c0:9a:b2:5c:30:fb:4b:64:99:55:a6:80:2c:3a:2c:c3:
         3a:7b:7b:fc:9a:89:8c:f6:68:2c:05:4f:ed:78:9e:5d:b5:46:
         b3:7a:e4:e8:d9:64:c7:eb:ed:66:9e:66:15:c6:81:00:0d:7e:
         48:63:85:9c:cc:fe:6e:76:eb:d6:a6:84:43:7f:20:47:32:6b:
         fe:15:e8:1a:b3:ff:af:17:27:b9:26:63:cc:c5:ff:e3:7d:23:
         df:6f:24:c0:c9:b8:5c:0c:23:70:41:48:c5:46:db:00:3f:9a:
         2a:54:93:98:88:96:c1:02:31:2b:cb:c7:02:41:40:a5:15:0e:
         4d:a5:29:c0:96:1a:f3:dc:8b:d7:f3:42:55:b4:0c:bd:16:1f:
         39:e6:f1:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:59:08 2025 by rpki-client