Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/6c5036ee-7707-37d2-b958-ab87f80bc47f.roa
File:                     6c5036ee-7707-37d2-b958-ab87f80bc47f.roa (raw, json)
Hash identifier:          bovI6yuOf4piUAD9EMr7r878C+H8FTEp+2Xvghy5xnE=
Subject key identifier:   25:99:CA:48:29:DC:4E:EE:1B:77:41:30:CE:A4:66:46:35:5E:54:61
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584B18143410432B9DDB6D126B80
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/6c5036ee-7707-37d2-b958-ab87f80bc47f.roa
Signing time:             Fri 05 Sep 2025 13:27:48 +0000
ROA not before:           Fri 05 Sep 2025 13:27:48 +0000
ROA not after:            Thu 04 Dec 2025 14:27:48 +0000
asID:                     22516
IP address blocks:        2605:a408:512::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Sep 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:18:14:34:10:43:2b:9d:db:6d:12:6b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Sep  5 13:27:48 2025 GMT
            Not After : Dec  4 14:27:48 2025 GMT
        Subject: CN=a34bf707-017c-49fd-b3ca-dda136a580e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:4d:03:18:fb:51:5d:f7:a0:72:01:4b:88:1c:
                    6e:d4:fb:24:92:44:aa:b1:3a:fb:c6:33:b7:ba:aa:
                    6c:80:dc:be:e6:74:e2:ea:21:8c:99:ad:10:2f:5c:
                    a1:ea:4a:0a:11:bc:4d:31:d7:0c:7f:96:76:e4:d0:
                    38:c7:fc:fe:1b:21:6e:ab:aa:15:08:e8:e7:8f:a2:
                    21:1a:02:97:66:c3:1e:51:39:ea:aa:47:31:8b:37:
                    74:dc:fd:9e:5a:46:97:51:1f:71:88:2a:b0:f4:de:
                    09:8c:3d:5d:5d:fe:38:ba:fe:61:2c:bf:19:f6:e8:
                    d9:92:ef:81:ae:74:df:7a:e0:f9:dd:1c:43:0e:9e:
                    cb:da:c0:20:3b:9b:a9:d9:92:02:ff:de:2c:9d:89:
                    06:8b:41:25:aa:a9:38:29:43:3d:d2:b8:80:23:76:
                    79:c3:52:a2:a2:e4:c2:14:8c:ff:9b:42:6d:b7:44:
                    58:04:c7:fb:d1:1c:9c:40:55:ed:c1:13:c7:f5:e1:
                    81:2b:4c:0d:e7:26:d3:55:21:a7:f3:a2:ec:4d:f0:
                    62:0d:f9:1f:cb:10:f1:44:9c:b1:4e:a2:59:a8:4c:
                    72:f8:cf:5a:d5:b1:43:d2:51:34:3f:ad:0f:f5:9a:
                    4b:1e:bd:ec:ab:2b:68:6c:b1:86:f3:15:8d:aa:ca:
                    96:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:99:CA:48:29:DC:4E:EE:1B:77:41:30:CE:A4:66:46:35:5E:54:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/6c5036ee-7707-37d2-b958-ab87f80bc47f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a408:512::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:b7:df:78:f4:24:2d:ef:83:80:52:2b:d5:10:52:a5:82:49:
         52:8c:2d:bf:c4:49:a9:04:8b:6f:80:1a:39:ab:2f:53:35:ff:
         54:38:ce:17:5c:40:61:06:e4:b7:e1:2f:7b:22:70:ca:9f:b4:
         bb:17:85:d0:3b:c9:97:53:b3:5b:96:02:43:cc:7b:02:a1:a5:
         56:40:b0:05:1b:ec:86:64:8f:a8:fd:ab:3b:da:04:7f:5a:f9:
         bf:86:64:db:59:3b:a2:d5:ff:a5:3e:01:6c:20:91:8d:e3:c7:
         15:82:2d:b2:d9:38:ac:d6:9e:71:05:fd:db:d2:59:aa:16:50:
         6a:db:01:f3:6c:ac:6f:44:ac:31:80:c8:bd:58:aa:91:05:28:
         78:ad:a1:ae:f1:d5:37:3d:96:96:19:f0:5c:22:06:ff:55:19:
         59:ab:80:89:26:8a:bf:cb:f8:9d:f2:a2:e8:d0:96:16:5f:68:
         d0:63:09:0e:e2:b4:01:94:36:e5:af:bb:f4:47:22:de:35:29:
         87:d6:7a:2c:e6:3a:72:c5:d5:78:d7:78:a0:24:b3:86:b9:71:
         97:5e:cf:9a:5b:0d:fb:bb:95:7e:1e:98:3f:bb:11:66:2e:80:
         e5:23:77:a0:70:a0:2b:c4:5d:55:e3:df:4a:41:43:e2:12:15:
         ea:3c:24:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 02:18:47 2025 by rpki-client