Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/af131332-a266-38b9-afc0-5be2189eb08c.roa
File:                     af131332-a266-38b9-afc0-5be2189eb08c.roa (raw, json)
Hash identifier:          4kctWLieFhsAfk6YYfbKikYot4sbrORdmHy8qQaS+UE=
Subject key identifier:   24:28:D1:9D:04:7F:44:0D:D4:5D:04:02:3F:61:11:55:24:2E:DD:4E
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584B7F5229413B0441D566762980
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/af131332-a266-38b9-afc0-5be2189eb08c.roa
Signing time:             Sun 12 Oct 2025 13:00:37 +0000
ROA not before:           Sun 12 Oct 2025 13:00:37 +0000
ROA not after:            Sat 10 Jan 2026 14:00:37 +0000
asID:                     33363
IP address blocks:        2605:a401:809a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7f:52:29:41:3b:04:41:d5:66:76:29:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Oct 12 13:00:37 2025 GMT
            Not After : Jan 10 14:00:37 2026 GMT
        Subject: CN=803a7a19-06bb-4503-a929-69ce242135fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:d9:86:8b:19:f2:af:db:be:8c:e4:12:aa:bd:
                    80:3d:d9:e1:8c:66:6c:31:3c:03:1c:99:cd:00:f0:
                    7f:4b:d1:58:a2:57:bf:ed:50:67:7c:d9:50:20:e1:
                    3c:ae:8b:6b:02:d1:f1:60:57:5e:fb:c6:6e:4e:f0:
                    8a:7c:fc:fc:ac:50:b3:95:ce:a6:da:b7:07:68:74:
                    12:ec:82:ac:44:f7:8c:ca:6f:01:db:22:2f:ff:bd:
                    23:8f:b9:56:37:06:fe:19:9d:03:59:e6:d5:d5:eb:
                    cc:c2:57:ee:af:44:95:d3:fd:6a:36:d3:28:4a:ab:
                    49:8d:07:b3:5a:45:1c:b8:02:63:19:19:a5:2a:7b:
                    9f:9b:26:04:5c:3a:b2:c5:2c:c9:bf:6d:c9:87:6b:
                    69:23:56:9d:16:48:6b:2c:4b:1b:1a:9b:0f:e2:96:
                    68:80:2e:72:84:b3:7f:ff:4b:15:ae:23:fa:b0:65:
                    2f:2a:08:ca:0b:22:58:c0:44:4e:fa:2f:cc:48:e2:
                    69:56:0d:ca:ff:eb:7c:aa:1d:ac:b9:f5:11:3f:e2:
                    1d:93:fb:58:7a:d5:d8:b0:db:46:4d:1e:03:f4:0b:
                    a1:41:76:13:f4:66:48:eb:05:1d:d8:0f:5f:ae:2d:
                    84:ca:74:f7:b0:e9:96:25:e6:2e:4f:3c:f4:45:b1:
                    d0:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:28:D1:9D:04:7F:44:0D:D4:5D:04:02:3F:61:11:55:24:2E:DD:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/af131332-a266-38b9-afc0-5be2189eb08c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:809a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:98:3d:8b:b1:45:cd:43:ed:e6:66:80:96:66:d6:93:d8:6e:
         ec:98:b7:db:bb:bf:62:8d:e9:40:5b:ee:33:36:ba:75:0f:8e:
         d3:db:50:b3:98:bf:9a:38:9d:98:9d:45:65:24:2e:1d:1a:ea:
         20:0a:e6:a8:f9:66:15:14:d3:b5:4c:f6:6f:49:51:2a:62:a4:
         6e:25:20:f9:79:e9:c2:26:d9:ff:61:ef:d4:30:c1:6f:f9:d8:
         77:29:85:51:9d:51:05:c3:51:8d:cc:09:93:18:a3:b8:04:1e:
         63:52:4e:c3:4a:57:42:5f:29:59:1f:eb:98:34:9b:f0:bf:3b:
         3d:05:16:d9:6c:8e:d1:e5:e6:d1:ba:3c:d2:f4:4f:6f:67:b6:
         2a:1e:d2:c7:96:b6:c4:0d:5a:8a:43:dd:f4:f1:7a:7d:9c:0d:
         38:2c:90:31:ca:98:4b:9f:fd:c0:12:16:82:ca:9f:55:23:4b:
         35:5d:4c:58:3d:16:59:dd:c7:fe:0f:2d:67:3e:de:53:ca:95:
         ff:4b:00:68:a8:f9:af:3f:06:2f:36:76:21:77:0c:da:0a:21:
         40:8a:34:11:6e:fd:59:b3:b6:09:d1:09:b4:70:7c:62:11:59:
         c6:03:7f:5a:46:da:9d:4c:3d:82:8a:06:fa:cb:67:23:91:06:
         7e:ea:4b:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 17 05:06:46 2025 by rpki-client