Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/fb4efa7a-07c0-3129-927b-0328fd80671c.roa
File:                     fb4efa7a-07c0-3129-927b-0328fd80671c.roa (raw, json)
Hash identifier:          HV6jz84oSh+DP/4wRLUefrIsTIGqNdd3RKBIn8lrmk8=
Subject key identifier:   E1:E0:CC:8B:8C:DA:32:F4:FB:6B:33:15:63:46:7F:DE:84:9E:95:2B
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584A9E9632D19983E881EA4F7800
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/fb4efa7a-07c0-3129-927b-0328fd80671c.roa
Signing time:             Thu 24 Jul 2025 01:00:50 +0000
ROA not before:           Thu 24 Jul 2025 01:00:50 +0000
ROA not after:            Wed 22 Oct 2025 01:00:50 +0000
asID:                     33363
IP address blocks:        2605:a401:8095::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9e:96:32:d1:99:83:e8:81:ea:4f:78:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Jul 24 01:00:50 2025 GMT
            Not After : Oct 22 01:00:50 2025 GMT
        Subject: CN=88dd2ed2-1107-4f8a-b774-b1d6aeb2d31f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:ba:76:cd:bb:5a:32:5e:7f:25:ab:20:8f:05:
                    eb:64:16:e9:a6:37:c4:8c:08:9c:83:ae:d8:8c:1d:
                    33:d7:57:67:ae:69:25:31:8c:29:0b:44:72:2f:4d:
                    93:66:b3:b7:fd:76:0d:22:cb:e2:25:e4:2d:ee:c4:
                    4e:b8:02:ef:f1:f1:48:7e:10:fc:2b:79:8c:5b:66:
                    3e:b5:08:99:d9:c9:87:fb:d2:a0:2a:0e:92:d1:7c:
                    59:b0:0c:17:96:0e:3d:3f:37:55:b2:d5:72:5c:ed:
                    48:db:49:c4:b7:20:ce:fb:94:d4:78:88:4e:6f:28:
                    d0:39:47:00:e2:e1:3d:ac:f3:28:17:de:a2:d6:70:
                    c3:cc:16:56:b2:53:4a:4c:02:8c:06:44:78:d7:be:
                    29:23:93:70:1e:29:58:47:25:10:cd:40:95:f8:ff:
                    a0:44:f0:ce:21:af:fa:97:d6:de:9b:68:6a:48:be:
                    42:ef:49:45:de:c4:59:f6:07:1d:e8:e7:67:d2:fd:
                    e0:d6:6f:d8:96:06:8f:36:9b:02:4e:e7:f1:8b:b8:
                    07:c5:94:e8:1a:2b:f6:0a:5c:3d:ad:92:bf:7f:78:
                    b8:a4:2a:98:c2:a5:50:79:c4:ea:03:7c:62:98:ea:
                    8f:a9:91:31:63:5c:3a:a5:07:4d:3e:91:fc:c5:56:
                    cd:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:E0:CC:8B:8C:DA:32:F4:FB:6B:33:15:63:46:7F:DE:84:9E:95:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/fb4efa7a-07c0-3129-927b-0328fd80671c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:8095::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:f0:6c:be:33:be:c4:80:f9:74:27:61:04:c1:38:0e:fe:8b:
         fe:e9:46:3f:8a:ae:a8:4a:38:69:0d:97:14:ab:2d:fd:b8:02:
         1e:2e:35:4d:25:37:c7:59:af:23:e4:54:48:f5:62:48:a0:3f:
         72:11:c0:8e:09:55:75:0a:2e:65:fd:32:11:d5:aa:64:0f:f6:
         48:cb:c1:d9:93:83:d6:07:e2:70:1f:3f:fd:88:fd:11:36:11:
         fe:90:03:a5:41:f8:be:22:dc:b0:99:9d:55:d3:70:01:ce:4a:
         51:f7:4b:94:ff:43:01:66:ce:27:98:07:ab:2e:4c:c8:8d:90:
         6b:99:6f:3c:8d:28:ea:9c:5f:97:68:27:cf:3f:a6:a9:c5:8e:
         4a:af:d1:35:c4:6c:69:f8:44:a5:7a:37:e5:e3:6d:6c:a4:1a:
         e1:6c:6d:5f:1c:da:26:ab:fe:74:0b:95:14:19:82:67:01:d1:
         2b:bf:8d:f0:8e:74:46:16:c4:24:98:3f:66:5d:d5:00:49:c1:
         6a:5b:07:b0:0e:55:cc:76:a3:5b:8d:8f:9b:ea:f4:eb:f1:41:
         77:24:cf:13:1c:6b:9c:21:a9:62:68:6f:04:e2:78:f4:2f:76:
         bb:8b:30:1d:2f:c3:61:62:44:97:20:67:58:f0:16:03:ca:c5:
         b5:67:48:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:39:35 2025 by rpki-client