Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/8f4129be-42f4-3968-aff2-2e4ca695144b.roa
File:                     8f4129be-42f4-3968-aff2-2e4ca695144b.roa (raw, json)
Hash identifier:          bBk5FbP1VeC5PjqOiYQcE/AqLOfpLw7z1w1/cZ/8YIw=
Subject key identifier:   C4:58:E9:84:10:25:3B:3F:D7:31:A8:AB:0B:D0:2C:70:01:9F:23:0C
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584B7F5251AB4768DACAA24E2C00
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/8f4129be-42f4-3968-aff2-2e4ca695144b.roa
Signing time:             Sun 12 Oct 2025 13:00:37 +0000
ROA not before:           Sun 12 Oct 2025 13:00:37 +0000
ROA not after:            Sat 10 Jan 2026 14:00:37 +0000
asID:                     33363
IP address blocks:        2605:a401:80b6::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7f:52:51:ab:47:68:da:ca:a2:4e:2c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Oct 12 13:00:37 2025 GMT
            Not After : Jan 10 14:00:37 2026 GMT
        Subject: CN=05fad5fd-7547-4471-a1c3-b9f2a1808c1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:4e:58:63:41:b3:4d:e2:f5:f9:d9:76:7a:df:
                    c1:8a:fd:47:1f:d2:37:fc:4c:15:ea:8e:3d:7a:1b:
                    39:2f:5e:59:b4:bd:5d:a7:58:60:02:7d:e5:3b:02:
                    9b:b0:3e:35:1f:58:5a:de:c4:1c:01:23:b2:e0:0e:
                    87:27:88:1a:f2:0a:d0:eb:47:a0:6d:2e:48:d6:39:
                    9e:25:05:39:bd:39:2f:1b:3a:2a:91:ea:d6:8f:75:
                    19:06:dc:f1:e4:1d:aa:6b:3c:33:85:d2:98:ea:ea:
                    43:ad:16:b5:11:c4:57:3e:a6:07:74:88:d1:4c:18:
                    f0:ad:6c:68:d4:80:98:a5:08:40:64:6c:bc:5d:33:
                    e4:8d:e3:86:69:05:2f:1c:f6:dc:90:5d:7c:35:dd:
                    e6:2a:06:be:6c:82:72:f8:2e:1f:60:af:1d:bd:7b:
                    77:70:e9:0a:a9:5b:f4:05:f4:3f:ea:ce:ed:91:8b:
                    b0:31:03:f9:42:b5:a7:f6:0c:47:71:ad:67:af:88:
                    f1:c6:ff:15:e5:e1:ea:4c:9b:ec:7e:87:f1:0f:6f:
                    9c:2b:78:26:ce:da:42:f3:94:2a:d7:ab:f1:21:eb:
                    42:11:22:c5:52:e6:e5:d4:bb:b7:cc:e9:6a:00:28:
                    10:99:9f:a9:48:3b:32:28:a9:5a:d0:be:b5:be:ef:
                    bb:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:58:E9:84:10:25:3B:3F:D7:31:A8:AB:0B:D0:2C:70:01:9F:23:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/8f4129be-42f4-3968-aff2-2e4ca695144b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:80b6::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:fe:ff:07:8a:9f:d1:dc:51:30:99:f5:e2:79:b2:0d:2a:68:
         7f:e8:b5:36:7a:d9:50:8c:98:8b:3d:16:0c:b0:a4:50:86:be:
         7a:b7:8d:71:dc:c5:37:9f:ba:a1:d9:05:a3:35:e7:1f:7d:3c:
         52:b1:c0:e5:0a:73:30:30:56:f4:ce:42:9d:e6:3e:4a:0c:7f:
         5c:02:c8:3a:e3:b8:51:d8:8a:10:f7:16:30:cb:2f:1c:5d:db:
         f3:5d:16:e4:50:7e:b9:b1:48:9a:69:a2:83:db:fd:71:69:a3:
         41:a8:84:f6:0b:1a:6f:39:e0:f8:02:d5:92:c6:30:55:99:1c:
         f2:96:1c:d2:a4:e9:1d:be:94:44:3a:32:b4:45:6d:c1:ba:ed:
         44:d0:25:29:f6:33:0f:0e:1b:de:a2:47:6a:5d:2e:f8:fc:99:
         5e:ea:4c:b6:5c:4b:60:d5:13:29:04:a4:62:ad:52:c8:ea:37:
         74:e5:17:5a:e2:f4:e3:51:4b:bb:e9:1b:69:bf:d6:d5:b9:f4:
         79:1c:82:7b:bd:38:f6:52:82:59:88:af:9d:99:48:a0:f0:6f:
         7b:e1:0e:55:6c:d8:e1:3b:bc:df:93:53:ea:f6:ef:45:bc:21:
         17:78:4f:16:3f:f2:67:fe:af:07:72:59:43:2b:72:bc:b1:af:
         7b:da:ce:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 17 05:07:51 2025 by rpki-client