Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/f85e1c45-0290-3564-8c76-a2216b498c1b.roa
File:                     f85e1c45-0290-3564-8c76-a2216b498c1b.roa (raw, json)
Hash identifier:          tgAepatKIuPlwSgm0WmJu2/B5wy5LVXM9txbpAMt/lo=
Subject key identifier:   4B:07:32:AA:E3:04:31:D5:CB:6B:19:FC:F4:C3:59:24:2F:F2:6B:BC
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584A9E965EB5C284CD0D605D5600
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/f85e1c45-0290-3564-8c76-a2216b498c1b.roa
Signing time:             Thu 24 Jul 2025 01:00:50 +0000
ROA not before:           Thu 24 Jul 2025 01:00:50 +0000
ROA not after:            Wed 22 Oct 2025 01:00:50 +0000
asID:                     33363
IP address blocks:        2605:a401:803a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9e:96:5e:b5:c2:84:cd:0d:60:5d:56:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Jul 24 01:00:50 2025 GMT
            Not After : Oct 22 01:00:50 2025 GMT
        Subject: CN=a3df97a7-46d2-4558-aca5-3c8e11b807d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:0d:74:f8:67:e6:f8:51:81:b2:6e:ae:75:00:
                    a9:99:ba:18:e1:1b:66:2c:10:8d:b3:7f:d1:9f:57:
                    c4:1a:37:1c:ad:80:39:fa:16:83:b5:bb:cb:d4:1e:
                    92:6e:2c:6f:bb:4c:df:cd:74:60:e7:bf:3c:45:f1:
                    92:5a:28:3f:a7:9e:77:d7:3b:99:73:c4:fa:8d:ca:
                    9d:57:02:1f:9a:42:f1:ea:ec:db:6e:f1:94:20:bb:
                    a4:4f:71:84:3b:80:87:e1:e8:3e:e4:96:dd:ae:3b:
                    4e:31:50:55:06:45:9a:ba:ce:36:ee:ed:72:5f:d5:
                    83:de:e5:e8:57:7f:b0:c9:fa:44:83:03:b4:cc:c9:
                    61:be:40:9c:db:f2:15:e2:1c:dd:7d:31:1e:d7:83:
                    ad:ec:b4:31:91:03:ed:44:a1:91:e1:38:3b:43:65:
                    9a:d3:73:04:4b:69:a6:20:11:60:5f:da:88:8b:f4:
                    c3:7b:85:11:02:06:4e:58:c3:55:a3:48:b0:ee:05:
                    36:07:86:e9:af:92:33:8e:f5:90:ee:0c:35:51:ef:
                    42:b7:d1:db:fc:e6:08:d2:d5:9c:0d:02:d3:5f:d3:
                    1a:0a:56:3f:18:1f:a8:1f:a8:bd:2a:cc:06:dd:12:
                    64:f3:2a:9c:92:1c:e1:60:77:26:c1:e9:bb:94:10:
                    29:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:07:32:AA:E3:04:31:D5:CB:6B:19:FC:F4:C3:59:24:2F:F2:6B:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/f85e1c45-0290-3564-8c76-a2216b498c1b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:803a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:21:a5:a8:de:1a:9d:51:e3:bc:55:f6:85:1f:aa:55:19:7e:
         09:a3:c1:c8:34:09:41:e0:7c:cd:a2:99:74:52:23:0e:d1:3e:
         3d:11:ab:da:f5:ef:e1:c8:81:c0:82:49:f2:fe:1e:65:47:16:
         50:85:c6:74:41:45:b3:02:9d:98:10:01:54:b9:d7:ce:87:05:
         b6:0c:db:ea:27:1a:9d:e5:86:73:e0:0b:7e:11:37:cd:b0:ad:
         34:ba:f7:f5:d5:a0:f5:c6:a5:db:8d:78:6d:cd:0e:3c:cc:06:
         79:69:70:67:ec:f1:51:51:f4:2f:9c:4d:46:89:0c:40:36:2d:
         c6:2e:5f:9e:d4:eb:d2:84:4b:fb:7a:43:d3:a2:46:df:9c:69:
         00:11:37:4a:81:1b:15:c0:4b:e9:4d:af:6c:a7:26:84:35:ad:
         c6:c4:60:8b:df:8a:03:49:48:07:0e:5f:ca:93:bd:3c:79:34:
         d7:dd:d9:db:5c:4f:c7:94:50:82:9c:f8:05:c2:b8:33:ca:c6:
         27:aa:69:39:d9:0e:42:6b:3a:a2:d8:0e:a5:9c:81:46:0a:56:
         88:d2:ad:96:40:81:89:dd:8c:57:4e:b4:86:78:9e:cb:cb:63:
         60:c2:12:be:64:d4:ef:41:39:46:8f:7f:de:17:38:28:0e:c4:
         e6:dd:26:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:06:06 2025 by rpki-client