Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/10a0567d-425e-3b71-ac8a-90e1b36e0b0d.roa
File:                     10a0567d-425e-3b71-ac8a-90e1b36e0b0d.roa (raw, json)
Hash identifier:          BnqQlbNWdNvlygDxo29DKwq3O7kjdtJSqseannaMOi4=
Subject key identifier:   35:D7:3C:BF:D7:27:92:B9:CF:66:05:4B:EF:49:7B:BC:B3:EC:7F:0D
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584B7F52280879F6F070DD656980
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/10a0567d-425e-3b71-ac8a-90e1b36e0b0d.roa
Signing time:             Sun 12 Oct 2025 13:00:37 +0000
ROA not before:           Sun 12 Oct 2025 13:00:37 +0000
ROA not after:            Sat 10 Jan 2026 14:00:37 +0000
asID:                     33363
IP address blocks:        2605:a401:804b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7f:52:28:08:79:f6:f0:70:dd:65:69:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Oct 12 13:00:37 2025 GMT
            Not After : Jan 10 14:00:37 2026 GMT
        Subject: CN=ef021e95-e12f-432c-b2e3-c71323c878bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:21:02:cd:31:28:16:26:66:40:03:eb:30:a5:
                    96:4e:14:3e:e3:40:f3:cc:d4:06:71:ef:2d:75:26:
                    8c:9d:00:6b:b2:37:f2:00:57:c5:71:c5:48:98:de:
                    b4:9e:ac:df:d7:b2:b5:6f:e4:dc:a1:7b:1a:61:ea:
                    0d:5f:37:78:6a:19:15:88:ad:19:86:71:c4:05:9f:
                    97:4e:27:5b:e7:bb:74:60:ad:73:42:f8:2b:67:c6:
                    d7:d7:ee:a9:d4:e4:19:0e:fd:48:3c:f3:98:03:cc:
                    e7:71:5c:67:7d:f8:b1:da:6d:a6:6a:b4:f1:f2:4c:
                    c3:83:72:18:00:8f:f6:1e:0f:44:63:a9:e7:3f:7f:
                    6d:0b:1c:66:b8:55:7e:b6:88:bd:bc:89:39:f1:11:
                    b5:ad:0a:d9:d9:1f:ee:aa:79:4b:81:1d:30:55:b2:
                    42:d5:a3:90:eb:19:78:ab:64:82:ee:31:6a:77:96:
                    f6:a0:ce:5f:69:c1:44:fd:41:20:d3:37:f6:80:10:
                    35:17:55:d6:82:e3:e2:0e:5c:51:6c:12:5a:ba:3b:
                    67:30:ea:aa:f7:e5:d0:23:02:be:90:3b:1c:a4:57:
                    4d:37:4e:db:64:fd:d9:4d:fc:f1:3d:08:04:bc:c7:
                    b1:3f:a6:cb:10:d8:5c:18:11:64:98:56:55:75:22:
                    ca:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:D7:3C:BF:D7:27:92:B9:CF:66:05:4B:EF:49:7B:BC:B3:EC:7F:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/10a0567d-425e-3b71-ac8a-90e1b36e0b0d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:804b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:19:ae:c4:da:eb:c9:c9:c7:32:ae:88:a8:f4:27:42:79:43:
         2b:7c:3e:4e:96:12:f3:b3:67:5a:15:1d:36:a0:d3:2a:eb:99:
         1a:70:ed:f7:4a:1b:43:02:ba:7d:25:95:f1:d3:e1:20:da:64:
         c6:ad:52:96:5a:72:4b:e8:75:10:39:a7:1a:60:98:59:fe:38:
         30:7b:33:70:13:b8:7a:0e:7d:f9:33:35:fc:02:99:8d:10:80:
         36:3b:8a:78:05:e9:a1:eb:2b:0a:c1:f0:24:02:f6:1b:cd:b4:
         f4:70:4b:ba:95:13:0c:88:2a:a3:be:51:c4:e9:dc:1b:97:92:
         9d:13:a8:9c:90:c4:1d:ad:c9:1f:de:d2:8b:5a:bb:03:ef:14:
         7a:87:81:37:ae:6c:8f:e1:e1:38:59:9a:2d:cc:19:71:a7:b4:
         ee:55:27:b1:b8:9f:d9:c3:4b:4e:7c:49:ea:f9:54:16:bd:b7:
         fd:f6:20:91:75:55:5e:6e:13:d0:21:42:be:57:6a:f2:e0:3c:
         4b:c8:29:50:f8:ae:0b:9e:78:5c:64:b8:f0:bd:c2:d5:68:a4:
         82:10:46:9b:13:72:7f:b3:4d:af:51:9e:a9:0a:5b:e7:1c:b1:
         dc:80:a7:fb:a4:94:de:a7:88:db:bc:46:61:a7:1b:74:01:2d:
         55:7f:7b:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 17 05:03:17 2025 by rpki-client