Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/94248f4d-91e2-35e9-92b0-106f66799b74.roa
File:                     94248f4d-91e2-35e9-92b0-106f66799b74.roa (raw, json)
Hash identifier:          UJUSqFyhauT8kGLDLEl3RlUmU2Vl38bfucY7EhFo8ys=
Subject key identifier:   79:77:72:F3:D3:C7:A6:D8:40:0E:90:FC:46:9F:D6:E1:F6:4D:F0:28
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584B7F522510F97ED0FE968B3940
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/94248f4d-91e2-35e9-92b0-106f66799b74.roa
Signing time:             Sun 12 Oct 2025 13:00:37 +0000
ROA not before:           Sun 12 Oct 2025 13:00:37 +0000
ROA not after:            Sat 10 Jan 2026 14:00:37 +0000
asID:                     33363
IP address blocks:        2605:a401:81bc::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7f:52:25:10:f9:7e:d0:fe:96:8b:39:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Oct 12 13:00:37 2025 GMT
            Not After : Jan 10 14:00:37 2026 GMT
        Subject: CN=c2ca736d-2f2f-4c49-92ae-c9e37c797de3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:33:ea:c8:f7:2b:04:10:0d:3b:41:f5:3b:e3:
                    50:5a:d6:89:fb:70:4d:38:80:17:a4:b1:f3:d1:70:
                    fc:10:ad:1d:55:6c:41:a5:8a:73:5b:83:b0:1b:bd:
                    ef:97:0d:df:62:b6:17:79:d9:ae:14:9e:0e:a3:fd:
                    6b:c5:c7:f9:e3:92:c9:4b:02:ff:9d:2c:27:a1:86:
                    be:60:12:38:fd:b0:35:ef:2e:d6:0a:a7:a5:bb:00:
                    f2:f3:e8:37:2b:c9:af:42:46:78:70:dc:e1:b3:f1:
                    f9:1e:cd:c1:f6:48:16:f5:e1:4a:40:58:24:ab:ca:
                    58:da:25:33:2a:68:0b:d5:66:72:47:e7:1b:5c:0d:
                    9b:9b:7f:cb:12:75:f0:ca:6f:8a:1f:32:3e:cf:fb:
                    a0:29:76:e0:61:85:26:55:3a:28:b4:e0:2f:f4:2a:
                    b0:f6:89:d0:6e:2b:a2:14:ac:11:c3:a3:30:0e:61:
                    ce:10:8d:9a:36:9e:ec:65:6d:24:f7:2a:32:34:42:
                    5a:63:fb:5f:e7:44:bc:71:34:82:a0:66:fe:b4:62:
                    83:9c:a6:71:7a:56:77:4a:81:bb:3a:f4:07:2b:d4:
                    a6:1e:33:33:54:8b:66:98:3c:da:9b:e6:7f:f4:7b:
                    03:04:28:15:d2:d6:ef:ee:7d:c4:e1:ad:b1:fe:87:
                    34:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:77:72:F3:D3:C7:A6:D8:40:0E:90:FC:46:9F:D6:E1:F6:4D:F0:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/94248f4d-91e2-35e9-92b0-106f66799b74.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:81bc::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:11:2f:f5:53:ec:8f:a0:12:41:cb:48:0b:5c:4c:1a:16:04:
         f4:56:f5:9f:a2:2f:e8:da:95:cb:73:ff:78:44:f7:46:d9:c7:
         83:50:84:3e:d1:42:22:5a:7e:f4:52:92:e2:cd:d4:3a:bc:be:
         29:bb:68:2d:bd:a8:0d:56:2d:44:2a:f6:67:73:ca:e0:5d:cd:
         8e:14:40:ec:b1:66:25:ea:ed:aa:40:8d:7e:b1:9a:d9:77:db:
         45:4f:62:93:42:2e:18:d0:d2:22:8f:d5:cd:20:4c:7c:0d:59:
         9d:8c:7a:51:f6:5b:23:09:9a:41:34:6a:f9:d6:1a:76:5e:89:
         85:b7:15:2a:3b:49:70:fb:ae:2e:a6:5c:6f:29:73:24:8c:5a:
         15:3c:04:d1:f1:2e:a0:b9:ec:c0:d2:05:3a:a8:10:b3:91:21:
         8e:89:68:65:bf:38:7f:00:c2:12:c4:b6:f5:d9:0e:5c:e5:82:
         86:f5:1c:73:77:7b:18:32:4d:4e:80:52:8b:62:c1:58:f9:60:
         5f:1d:8f:26:5e:95:40:39:d5:b9:83:41:dc:1e:a5:5a:0b:e2:
         21:f8:56:51:a0:83:39:33:7b:cf:ba:6c:19:70:d9:3f:62:94:
         08:3f:61:94:e9:bb:9e:6e:0e:04:cb:44:61:74:62:73:90:2c:
         23:81:f5:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 17 05:06:46 2025 by rpki-client