Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/dad1ca1f-06bc-3aa9-9ac5-87b7279b718d.roa
File:                     dad1ca1f-06bc-3aa9-9ac5-87b7279b718d.roa (raw, json)
Hash identifier:          znisxE9vnY9nuITpiS0JBtxd+yfahYBxcMwff/s9gw8=
Subject key identifier:   20:49:DC:A7:15:50:8E:5F:14:55:09:22:89:EF:12:E3:19:16:2E:54
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584B1814315FCBF84352FA4F2600
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/dad1ca1f-06bc-3aa9-9ac5-87b7279b718d.roa
Signing time:             Fri 05 Sep 2025 13:27:47 +0000
ROA not before:           Fri 05 Sep 2025 13:27:47 +0000
ROA not after:            Thu 04 Dec 2025 14:27:47 +0000
asID:                     22516
IP address blocks:        2605:a408:2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Sep 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:18:14:31:5f:cb:f8:43:52:fa:4f:26:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Sep  5 13:27:47 2025 GMT
            Not After : Dec  4 14:27:47 2025 GMT
        Subject: CN=320a4f56-9fb9-4338-ab96-8310c7321bfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:8b:c3:c3:9e:c5:2b:5e:d3:47:4c:f1:66:f3:
                    49:ff:44:3e:ed:6d:1c:35:65:28:02:c9:90:6e:1d:
                    19:6e:30:33:df:6d:3f:a5:0b:5b:f6:93:af:26:85:
                    85:1c:73:97:64:a2:53:d8:d1:0f:bf:b2:d5:38:d6:
                    a5:66:3f:7e:ff:70:de:23:44:e4:3b:45:17:a1:2a:
                    fc:f2:7b:21:ca:e8:b3:78:cb:13:a2:31:21:5f:fe:
                    17:2f:b4:f3:5d:5d:41:c8:6b:68:c0:e9:bc:3a:77:
                    e5:bd:60:8d:39:8b:b9:76:ed:9b:68:7f:18:72:33:
                    09:53:d0:1d:79:cb:bf:be:cf:72:d1:cf:69:78:a7:
                    48:5a:11:07:4d:5b:ef:fe:68:bc:43:6d:1e:34:44:
                    38:83:b7:c1:10:0a:fe:e4:98:c0:b4:92:ea:86:17:
                    46:a9:b4:b8:fc:fc:95:41:32:74:a1:62:25:b2:30:
                    2b:f6:04:28:e1:85:1b:24:80:f3:61:d1:3e:8a:56:
                    d7:29:ce:ab:00:4a:8c:af:f8:60:e2:c7:9c:5c:7d:
                    84:cf:d8:0c:b9:bc:fe:91:78:33:f3:8c:9e:59:17:
                    f6:83:4c:c5:1d:5a:26:31:72:36:f6:27:ee:e4:19:
                    60:0a:8b:4b:3c:d0:ca:d5:77:cd:64:eb:6e:9e:5e:
                    85:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:49:DC:A7:15:50:8E:5F:14:55:09:22:89:EF:12:E3:19:16:2E:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/dad1ca1f-06bc-3aa9-9ac5-87b7279b718d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a408:2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:25:cd:f6:1c:51:4b:92:08:07:74:38:6c:c4:b2:4f:fb:8d:
         a6:d8:c5:ab:67:db:64:8e:74:a6:2d:41:a5:29:71:2a:f7:d8:
         b1:28:c6:f0:b9:67:15:e5:57:7f:1d:6e:51:12:a3:a0:fe:91:
         11:9d:e9:49:6f:64:86:f9:2b:28:8e:29:f5:e5:12:c0:06:05:
         64:68:8a:99:c5:23:1f:5d:dc:87:d6:b4:72:d4:4b:1e:4e:0f:
         4f:46:b6:31:43:35:d8:3a:85:5e:0a:c7:dc:f5:25:c8:d3:75:
         f3:ef:8c:3f:62:92:1b:24:5f:ee:23:36:4d:4d:eb:ea:80:16:
         e7:56:f9:06:95:b2:62:6e:4d:a8:7e:9d:dd:dc:8f:9c:f9:60:
         22:cc:af:5b:93:1c:fa:73:e4:ae:c6:0b:01:4d:54:f5:49:50:
         66:f4:98:8a:59:2f:b7:30:a0:e5:57:b3:19:de:a5:03:73:68:
         c0:8e:a9:91:11:ca:22:bd:38:ea:65:d4:31:c3:78:81:35:3e:
         12:81:78:3f:ca:62:3a:5e:52:d2:c7:13:b5:b2:64:7a:80:5c:
         51:02:2e:11:91:46:9a:46:13:21:22:3e:ed:58:f7:f3:f8:f0:
         bb:14:57:36:ed:69:a6:bf:90:54:75:94:20:b5:2b:62:94:dd:
         ab:92:0e:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 02:12:27 2025 by rpki-client