Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/f1fa49fe-dc6e-39bc-b271-8d058a88f1a5.roa
File:                     f1fa49fe-dc6e-39bc-b271-8d058a88f1a5.roa (raw, json)
Hash identifier:          RGW+C0wEuXX0XedNdFEfMN95Ar0N0SPgCYRjp2EQgNs=
Subject key identifier:   5B:62:0E:C0:7E:61:13:89:88:7D:26:0E:E6:B5:57:CD:6F:8E:88:42
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584B7F52511E51AD71845A9D6880
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/f1fa49fe-dc6e-39bc-b271-8d058a88f1a5.roa
Signing time:             Sun 12 Oct 2025 13:00:37 +0000
ROA not before:           Sun 12 Oct 2025 13:00:37 +0000
ROA not after:            Sat 10 Jan 2026 14:00:37 +0000
asID:                     33363
IP address blocks:        2605:a401:808a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7f:52:51:1e:51:ad:71:84:5a:9d:68:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Oct 12 13:00:37 2025 GMT
            Not After : Jan 10 14:00:37 2026 GMT
        Subject: CN=68b69de9-372f-40d2-924d-b0b473050e2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:8c:7e:e7:8a:07:b1:aa:bc:f5:71:9a:ef:a9:
                    84:c5:c1:c5:b9:8a:e4:40:76:25:f8:f3:b2:b6:57:
                    7d:37:55:36:65:da:6c:2a:14:82:97:dd:87:7c:49:
                    77:6b:2d:c4:e8:fe:12:7c:c6:0b:66:e3:68:e7:7a:
                    25:b1:f0:44:73:dc:bc:46:f6:93:07:c7:e7:a4:08:
                    f7:60:fe:c8:61:7e:a3:6a:86:c5:ed:25:94:19:01:
                    87:3b:b5:60:53:c4:01:b0:17:20:e7:d2:28:62:ce:
                    72:0b:c0:c5:40:5e:2e:1d:7b:a5:07:8a:c7:29:a2:
                    3e:eb:9b:56:43:92:27:fa:cf:20:a0:c8:3a:c0:eb:
                    29:c8:05:8b:ab:a8:e8:22:a5:1a:61:ae:e1:b8:a8:
                    67:da:e3:c6:a4:ae:59:31:81:79:c0:16:b5:30:94:
                    e0:5b:45:6d:47:e9:73:1d:8b:bd:5e:05:d7:45:b8:
                    7a:e2:5f:d0:5d:dd:76:54:07:04:67:83:d4:85:22:
                    36:e7:ee:30:ad:bf:08:7f:20:bb:26:8f:4b:f3:c1:
                    e9:f1:10:fa:cd:59:eb:4e:d4:6e:34:43:0a:d1:3f:
                    cc:03:fa:8e:b4:5b:69:bb:94:d7:ab:33:dc:6d:13:
                    7d:df:7a:6b:dd:67:52:8e:53:76:26:67:b0:7a:89:
                    87:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:62:0E:C0:7E:61:13:89:88:7D:26:0E:E6:B5:57:CD:6F:8E:88:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/f1fa49fe-dc6e-39bc-b271-8d058a88f1a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:808a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:77:59:73:da:51:64:09:1a:a0:9e:47:0e:ee:bd:b0:85:45:
         82:c3:a5:4f:21:68:26:c6:c1:79:30:58:c8:24:33:27:39:3d:
         26:a2:64:24:cc:a6:e8:a7:8b:e7:b3:74:ff:69:ab:55:52:4e:
         fd:6c:a7:46:2b:2d:8a:69:82:93:89:57:4a:18:ee:b7:93:9d:
         9f:cc:6b:04:4c:6c:c8:17:50:1e:5f:50:19:34:6c:d3:e3:14:
         1d:05:65:94:7c:42:d7:af:9a:80:4f:5c:3d:78:69:bf:77:7f:
         e3:bf:a8:00:1a:48:4c:e6:bb:41:60:7f:bc:5c:3f:a0:87:61:
         98:1c:b2:d7:72:97:3b:02:33:78:68:2d:30:c5:38:51:3e:a6:
         91:8f:65:0d:69:89:61:66:ec:1a:cc:b1:1e:f9:6f:60:cc:df:
         38:2a:1c:9f:38:98:7a:17:a1:40:47:e0:a7:05:ab:c8:50:26:
         04:70:d4:bd:b4:f2:50:b4:04:2f:a8:59:ca:67:03:99:b3:dd:
         8e:25:79:f0:04:54:be:cf:d9:27:b3:af:bc:6f:5c:14:7b:e6:
         bd:f1:a0:e9:4f:5b:d1:79:e3:3e:1a:4c:9c:9a:98:c6:be:b7:
         4b:43:0d:be:d7:fd:ad:47:16:03:c3:c9:54:24:4a:23:67:a7:
         a7:f3:47:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 17 05:03:17 2025 by rpki-client