Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/320c1c41-caba-3cdd-b412-da4003053fde.roa
File:                     320c1c41-caba-3cdd-b412-da4003053fde.roa (raw, json)
Hash identifier:          eyAThhwPM97QPz/kzUCJHxxoLCldDDYCcQlNfUkLhS4=
Subject key identifier:   15:60:95:F3:89:79:48:6C:69:B1:00:06:0B:F0:37:56:17:C2:01:4D
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584B7F5219ED00FE50266569C680
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/320c1c41-caba-3cdd-b412-da4003053fde.roa
Signing time:             Sun 12 Oct 2025 13:00:37 +0000
ROA not before:           Sun 12 Oct 2025 13:00:37 +0000
ROA not after:            Sat 10 Jan 2026 14:00:37 +0000
asID:                     20115
IP address blocks:        2603:90f5:a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7f:52:19:ed:00:fe:50:26:65:69:c6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Oct 12 13:00:37 2025 GMT
            Not After : Jan 10 14:00:37 2026 GMT
        Subject: CN=63a6874e-66d9-4769-9b44-3d5096a31f54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:21:ea:35:d4:69:2f:17:76:ef:b4:c7:a8:c8:
                    99:7b:44:8e:45:0a:32:f3:9a:93:8e:7b:0c:70:e5:
                    fb:c8:06:a4:37:64:59:97:5e:02:c7:c1:72:1b:59:
                    e6:cc:a0:79:ee:7c:67:27:d1:54:7d:4a:84:27:6d:
                    be:3a:e0:f7:a7:e8:58:0f:9d:ed:bc:19:42:fc:67:
                    2d:3c:f0:17:ce:a2:fe:5e:c6:bc:ed:d1:cb:4d:70:
                    f5:12:73:d2:8a:99:c2:d6:98:a1:13:d1:70:ac:2f:
                    aa:ea:77:17:b8:d0:d9:83:78:d3:98:a2:fa:56:ac:
                    67:4e:f1:21:dc:7e:ae:87:43:f2:43:78:46:f4:45:
                    0b:6d:da:f5:f8:15:65:5a:fc:2f:59:32:d2:15:94:
                    8e:19:f9:78:91:76:13:50:b7:7d:25:d5:fd:bf:c4:
                    f1:d3:94:c0:92:66:4f:d1:a1:53:c9:d1:79:b4:a8:
                    0f:4f:86:3d:9a:1e:b7:47:b3:88:11:35:0d:34:c1:
                    df:8d:84:22:ee:c4:ca:ed:39:b9:29:52:4a:8a:97:
                    d0:6a:40:e2:8c:1d:75:a6:61:27:25:bd:c6:bb:61:
                    cb:57:fa:34:3b:5a:8d:cc:a5:bc:e9:50:9e:59:55:
                    f5:16:39:e2:ce:a7:96:aa:c7:ea:4f:65:7a:ad:b9:
                    8e:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:60:95:F3:89:79:48:6C:69:B1:00:06:0B:F0:37:56:17:C2:01:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/320c1c41-caba-3cdd-b412-da4003053fde.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:90f5:a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:ca:d2:63:3a:c1:df:d3:17:80:f0:32:77:20:21:27:88:55:
         d0:28:4d:d0:0d:62:3a:20:a5:ed:bf:c7:d6:d1:56:52:b6:94:
         9d:ed:78:6e:8b:8d:33:5c:3a:36:ba:73:e9:9a:f4:80:be:d8:
         5a:6f:cf:7d:b9:95:de:0c:31:bc:57:27:aa:25:65:ec:87:f4:
         07:50:d0:1d:08:81:24:7f:2d:a7:d7:74:07:2b:92:e5:04:ae:
         9f:1f:b9:5d:94:84:4a:66:28:de:10:46:48:41:40:d5:12:26:
         29:98:70:bf:36:d4:53:9b:64:8f:37:27:83:97:81:bb:b5:38:
         25:c2:0f:ce:41:10:b6:c2:5f:49:d4:b2:76:9a:b4:53:bc:b8:
         60:b7:0e:72:20:16:55:cd:69:33:57:ca:8f:d9:46:08:e6:7b:
         1a:0d:d5:a4:98:a8:8d:68:f2:51:a4:b5:93:42:90:21:11:9b:
         08:c2:8a:1b:69:6b:4d:48:b7:2a:a5:44:8c:f4:86:5e:f4:ba:
         ef:e6:cb:a9:eb:16:2b:ef:b0:c1:49:38:69:9e:a4:24:2e:5f:
         56:59:a5:da:6d:ed:86:07:6d:22:f3:3b:a3:34:96:03:34:0b:
         7e:31:a8:93:c2:14:25:53:d4:24:da:88:11:b9:64:ff:98:86:
         f2:27:c2:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:40:00 2025 by rpki-client