Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/61ae286b-601f-3356-a4cf-61993bab355a.roa
File:                     61ae286b-601f-3356-a4cf-61993bab355a.roa (raw, json)
Hash identifier:          w1Cbkjhk8L6KxQq0qb7iZR/8lCgKhY27LCUX6oRHfhM=
Subject key identifier:   A0:92:6E:B2:83:C2:2C:2A:FD:23:AF:53:FB:6B:91:E4:CA:49:04:26
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584B181433BCCCF31DBE160D5000
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/61ae286b-601f-3356-a4cf-61993bab355a.roa
Signing time:             Fri 05 Sep 2025 13:27:48 +0000
ROA not before:           Fri 05 Sep 2025 13:27:48 +0000
ROA not after:            Thu 04 Dec 2025 14:27:48 +0000
asID:                     22516
IP address blocks:        2605:a408:503::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Sep 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:18:14:33:bc:cc:f3:1d:be:16:0d:50:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Sep  5 13:27:48 2025 GMT
            Not After : Dec  4 14:27:48 2025 GMT
        Subject: CN=f70f863e-fda7-44f4-ab54-cb134b663af7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:be:4f:d6:3b:bd:fd:66:4c:66:94:29:d6:39:
                    c1:cc:4e:6b:48:42:94:36:7d:56:9c:e5:b2:7e:85:
                    34:99:7d:98:e3:69:9f:b3:0f:ad:d3:0f:48:23:d0:
                    6b:f0:75:8e:4d:27:90:79:67:11:a9:a7:c8:39:b3:
                    58:14:b6:1d:8f:e0:18:df:c9:f3:53:f1:9c:bd:33:
                    01:94:f4:00:ba:72:bf:33:3a:0b:ee:52:71:7d:28:
                    bc:5f:24:83:41:9e:7d:58:16:a7:6f:36:b4:d4:a2:
                    8e:c1:58:9d:2f:25:9f:69:bd:8c:e7:ea:39:3e:6d:
                    fa:66:01:82:8e:ee:42:da:d2:a4:57:8c:10:47:d3:
                    8c:0b:f0:5f:ad:24:ca:23:95:43:38:b5:a6:44:07:
                    f7:0f:a5:bf:4a:5d:85:af:00:ed:1a:76:13:ed:e8:
                    5d:3f:fa:69:6f:34:d2:e3:92:c5:0f:0b:9c:6c:56:
                    89:a4:98:52:fb:bb:12:d1:e3:76:cc:f3:56:88:34:
                    03:c1:76:3e:05:45:da:c8:a4:ef:74:a3:85:a4:d8:
                    3f:48:37:5b:9a:bc:ee:ec:ff:8d:de:20:61:e9:9a:
                    47:53:02:30:ec:92:ca:2f:01:ae:45:12:a2:f8:58:
                    7c:bc:05:29:40:47:fb:a2:a8:18:13:78:bf:d7:d8:
                    55:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:92:6E:B2:83:C2:2C:2A:FD:23:AF:53:FB:6B:91:E4:CA:49:04:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/61ae286b-601f-3356-a4cf-61993bab355a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a408:503::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:c0:0e:0a:c6:2d:ca:19:3b:af:5e:d8:d8:d6:5f:2d:08:fb:
         b0:ac:02:d2:3c:8b:aa:d5:e0:db:13:40:31:78:21:1d:49:21:
         e5:d3:48:00:97:a2:39:e4:c0:4d:fd:d6:7e:93:6d:d0:e9:b6:
         a5:0a:0b:6b:e8:fd:c4:9e:6c:5d:bd:9d:ad:b3:0f:d8:10:c0:
         bf:45:24:ba:3c:e3:ac:56:22:26:e8:3a:5b:c9:5e:bb:af:b5:
         ad:fb:fc:56:71:b6:86:e8:28:93:8f:a1:77:da:ff:5a:7a:7e:
         52:d7:cc:12:8b:4c:3e:19:02:1f:be:60:12:ba:7e:dd:59:f4:
         eb:48:7e:74:a7:a1:5c:70:2e:67:ef:ca:7b:74:54:a8:4f:d1:
         de:27:82:2f:c0:96:2c:3a:54:bb:e6:03:fa:a8:0a:4c:04:f5:
         84:ab:f1:a8:b8:d1:53:85:b3:d0:c5:32:11:41:f5:df:f3:0d:
         d5:1f:de:3c:9a:1c:68:39:2b:77:49:8b:b1:d6:0d:f7:cb:98:
         e4:3e:2b:40:95:1c:d3:c0:55:26:9a:6e:6d:54:74:af:50:32:
         e2:e0:1f:3b:2e:7f:95:7e:d4:12:2a:12:f4:e9:52:63:d6:19:
         57:8f:70:e1:f7:9d:64:c1:5a:03:3d:f3:18:4b:c6:66:65:65:
         8f:48:e4:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 02:15:24 2025 by rpki-client