Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/07e09fd9-cec1-3c30-8d10-49d050770f2c.roa
File:                     07e09fd9-cec1-3c30-8d10-49d050770f2c.roa (raw, json)
Hash identifier:          U1FJhWmeitTT8+5xTU8/j96URvbchkTITsNU8T7zT90=
Subject key identifier:   55:D0:28:CD:F2:90:0B:6D:21:BB:38:2C:C4:B3:EF:1C:7F:07:C4:4E
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584B7F5219B2F91CC53C0FEE4E00
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/07e09fd9-cec1-3c30-8d10-49d050770f2c.roa
Signing time:             Sun 12 Oct 2025 13:00:37 +0000
ROA not before:           Sun 12 Oct 2025 13:00:37 +0000
ROA not after:            Sat 10 Jan 2026 14:00:37 +0000
asID:                     20115
IP address blocks:        2603:90fb:10::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7f:52:19:b2:f9:1c:c5:3c:0f:ee:4e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Oct 12 13:00:37 2025 GMT
            Not After : Jan 10 14:00:37 2026 GMT
        Subject: CN=26fde682-7981-4adf-ba44-e0a7e0df2454
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:9a:ed:f8:dd:e9:55:12:9c:c0:28:04:db:ad:
                    64:fb:af:45:68:a0:ab:e2:56:37:b5:4c:05:5b:93:
                    ae:c5:3f:1c:3d:cd:08:45:76:a5:2b:96:af:d6:1d:
                    45:5f:6f:41:ce:fe:a8:94:b0:17:c3:8a:d7:f4:b4:
                    90:67:97:53:32:9b:8e:b3:98:3a:72:e1:90:46:d1:
                    ce:51:ea:17:02:67:5f:0a:0a:0a:e2:0a:6a:e9:9e:
                    b5:7e:ee:bf:63:c9:4c:78:66:e7:d8:90:18:45:5b:
                    0a:0c:e1:b8:54:73:94:f8:45:8c:e5:a8:6f:ee:28:
                    63:c1:ae:04:ef:3b:97:b7:5d:ab:05:4f:61:d7:ca:
                    1b:1a:a6:f2:a3:d5:e0:9d:24:e6:a5:fb:b6:80:85:
                    7c:a4:ae:0e:1d:72:19:d9:97:4f:f0:a9:1e:91:65:
                    0d:72:ca:22:2e:37:0e:79:93:1c:fa:8f:e7:10:f2:
                    d4:e1:e8:6a:47:3a:04:fd:a1:0e:63:0c:22:02:98:
                    0c:04:36:b7:3d:44:8b:70:2a:9c:2d:90:f7:c4:81:
                    b5:12:93:c1:ed:e2:b5:34:48:19:4c:98:52:d9:ed:
                    f8:09:58:47:0b:c2:f1:a3:63:ea:2e:44:02:6e:82:
                    3a:90:c0:b8:38:05:44:fc:a8:08:04:a8:fd:22:a0:
                    5a:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:D0:28:CD:F2:90:0B:6D:21:BB:38:2C:C4:B3:EF:1C:7F:07:C4:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/07e09fd9-cec1-3c30-8d10-49d050770f2c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:90fb:10::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:b9:10:87:e0:fc:df:46:7b:4e:3c:f9:bf:a0:04:09:ed:b2:
         76:ab:3d:59:f2:dd:8c:c9:ed:35:e4:a1:0b:6a:8a:02:c9:e8:
         a0:4f:b1:b9:34:00:be:e6:ab:80:18:ec:28:c1:e4:c3:b4:4b:
         a9:f9:36:ed:19:ac:26:6d:40:17:d7:af:28:72:70:93:d8:c1:
         71:fb:8c:7f:3e:d6:96:8e:40:fd:1c:b1:7c:b1:8c:77:99:4c:
         d9:fc:d4:a6:0a:ec:7a:48:3a:78:9b:78:88:45:0c:96:58:83:
         fe:64:7f:21:ab:86:cd:d9:45:3d:90:76:1c:8f:ee:e4:6b:96:
         c6:ee:a5:c7:af:f9:70:13:34:14:cc:8d:95:55:4d:2e:da:2c:
         fa:32:88:ee:af:0a:dc:15:5c:10:a6:aa:cb:21:9c:21:57:f1:
         49:d3:85:b7:86:8c:6d:f4:39:33:e3:1f:84:3f:a0:2b:4f:27:
         14:f6:3c:2b:e5:23:2e:1c:15:f1:1f:fb:b3:3b:bd:17:06:dc:
         c1:b5:96:cd:ae:4c:ad:fc:34:80:1b:97:5b:bb:1a:db:88:bf:
         b5:1d:da:93:6e:c5:23:2b:7a:fe:a1:22:81:f1:28:cd:62:be:
         70:48:f9:19:26:c2:15:9b:37:c0:7e:cc:d3:ba:84:33:d1:a0:
         56:bb:01:e5
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEt/Uhmy+RzFPA/uTgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli
NjAzMB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk
MjZmZGU2ODItNzk4MS00YWRmLWJhNDQtZTBhN2UwZGYyNDU0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgZrt+N3pVRKcwCgE261k+69FaKCr4lY3tUwF
W5OuxT8cPc0IRXalK5av1h1FX29Bzv6olLAXw4rX9LSQZ5dTMpuOs5g6cuGQRtHO
UeoXAmdfCgoK4gpq6Z61fu6/Y8lMeGbn2JAYRVsKDOG4VHOU+EWM5ahv7ihjwa4E
7zuXt12rBU9h18obGqbyo9XgnSTmpfu2gIV8pK4OHXIZ2ZdP8KkekWUNcsoiLjcO
eZMc+o/nEPLU4ehqRzoE/aEOYwwiApgMBDa3PUSLcCqcLZD3xIG1EpPB7eK1NEgZ
TJhS2e34CVhHC8Lxo2PqLkQCboI6kMC4OAVE/KgIBKj9IqBaaQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFFXQKM3ykAttIbs4LMSz7xx/B8ROMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1
ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvMDdlMDlmZDktY2VjMS0z
YzMwLThkMTAtNDlkMDUwNzcwZjJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3
NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5
YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0
MWYxOWI2MDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgOQ+wAQ
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAF25EIfg/N9Ge048+b+gBAntsnarPVny3YzJ7TXkoQtqigLJ6KBP
sbk0AL7mq4AY7CjB5MO0S6n5Nu0ZrCZtQBfXryhycJPYwXH7jH8+1paOQP0csXyx
jHeZTNn81KYK7HpIOnibeIhFDJZYg/5kfyGrhs3ZRT2QdhyP7uRrlsbupcev+XAT
NBTMjZVVTS7aLPoyiO6vCtwVXBCmqsshnCFX8UnThbeGjG30OTPjH4Q/oCtPJxT2
PCvlIy4cFfEf+7M7vRcG3MG1ls2uTK38NIAbl1u7GtuIv7Ud2pNuxSMrev6hIoHx
KM1ivnBI+RkmwhWbN8B+zNO6hDPRoFa7AeU=
-----END CERTIFICATE-----
Generated at Mon Oct 20 13:20:59 2025 by rpki-client