Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/f828f3cd-0480-37d8-8fd0-d33e82cf9f98.roa
File:                     f828f3cd-0480-37d8-8fd0-d33e82cf9f98.roa (raw, json)
Hash identifier:          MAlt3wFg+Q8MCzgxjLlGBp1vjnfF9+3cSdI/Sjq1IT8=
Subject key identifier:   15:01:5E:0B:30:1B:88:55:A1:41:41:7E:A9:CA:9B:A4:6F:EC:FC:C4
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584A9E96325D0D65A4495EF25180
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/f828f3cd-0480-37d8-8fd0-d33e82cf9f98.roa
Signing time:             Thu 24 Jul 2025 01:00:50 +0000
ROA not before:           Thu 24 Jul 2025 01:00:50 +0000
ROA not after:            Wed 22 Oct 2025 01:00:50 +0000
asID:                     33363
IP address blocks:        2605:a401:8079::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9e:96:32:5d:0d:65:a4:49:5e:f2:51:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Jul 24 01:00:50 2025 GMT
            Not After : Oct 22 01:00:50 2025 GMT
        Subject: CN=5f4216e7-c0b8-4942-b971-dd6a4fb88441
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:cf:a5:e4:9a:31:71:12:3a:69:dd:73:c5:9a:
                    f7:3a:67:a1:7d:f4:6f:dc:51:8d:da:e6:fd:d4:13:
                    45:37:b1:ad:d7:45:29:bd:71:c5:aa:a8:60:7b:a7:
                    ab:84:ba:d2:fd:79:bf:bd:c9:27:7e:03:4c:2f:92:
                    3a:ef:9e:7f:c7:3a:64:24:64:cb:39:6e:a0:4c:70:
                    f6:72:41:7b:5b:7c:12:90:18:ee:c3:d7:12:3d:42:
                    31:a6:97:50:8d:db:79:c1:83:24:87:6e:cf:eb:61:
                    b1:55:9b:0a:b7:f6:cc:3d:5e:7d:b9:0d:5d:c1:bb:
                    b6:54:de:17:ed:85:6c:7c:56:af:51:71:5b:f7:7e:
                    29:bc:72:8a:e6:bb:2c:c5:f7:7c:20:d4:bd:ea:e5:
                    0a:62:d9:44:c4:da:9b:e0:99:ef:d4:0c:ae:42:77:
                    e6:9a:6b:6d:07:a7:43:2b:aa:1e:f4:81:f3:43:9a:
                    0e:47:66:31:16:44:b5:c0:da:4b:75:48:f6:79:d4:
                    be:c1:90:25:4e:43:52:8c:1f:a2:27:20:94:c4:25:
                    3e:8f:26:7b:94:04:68:21:85:a5:e9:a5:d0:a0:3c:
                    c7:aa:2f:41:dd:d1:04:84:9b:ee:e6:61:d0:6c:74:
                    d2:d2:05:b5:6b:e4:49:08:8b:5a:9d:ef:b6:7a:21:
                    aa:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:01:5E:0B:30:1B:88:55:A1:41:41:7E:A9:CA:9B:A4:6F:EC:FC:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/f828f3cd-0480-37d8-8fd0-d33e82cf9f98.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:8079::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:c4:ce:78:ab:77:e2:19:f9:b6:39:0c:61:fd:12:fe:0e:54:
         a1:aa:3d:7d:82:de:3e:45:27:26:eb:eb:3f:70:25:a7:f4:3a:
         a6:2f:2b:5c:f7:61:42:b9:41:12:ad:b2:0b:c3:b2:4f:9b:d8:
         e3:86:af:8f:81:93:d8:32:2e:ff:32:05:3a:ff:b7:51:42:d9:
         9f:7d:c0:ce:72:c1:01:62:0c:8e:99:5b:0c:2f:15:ed:51:96:
         15:13:82:4f:5e:17:b9:8c:7e:99:59:b6:e8:f4:fb:c7:10:5e:
         64:ab:39:fe:f0:0c:66:ee:df:27:12:df:49:bd:72:7e:86:94:
         55:d2:c4:e8:01:b5:ee:8d:af:7c:a1:88:be:1f:9f:13:62:3a:
         23:c3:55:3c:99:48:ff:5a:b7:1a:7f:da:1f:5a:03:cc:2f:b8:
         bc:3c:d8:d6:4a:da:0c:af:29:bc:82:95:c6:47:76:bd:46:b4:
         03:13:8d:27:9e:04:3e:1b:19:9b:ad:1e:60:0f:84:d5:57:aa:
         1e:02:43:c9:fe:c3:56:c2:8e:7c:48:98:f6:d1:34:78:16:c3:
         d6:fd:e0:47:03:a3:ba:9c:5d:1d:8c:52:6c:78:97:fc:e1:89:
         dc:9b:50:cd:c9:74:16:95:a1:2e:0f:41:2a:1c:33:90:ac:2f:
         5e:09:d9:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:54:32 2025 by rpki-client