Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/3d912d81-d301-3e25-8490-59a9d093f572.roa
File:                     3d912d81-d301-3e25-8490-59a9d093f572.roa (raw, json)
Hash identifier:          eGZ9P+JwF7/515cz4MkCIo21F1REmopn8wygj3Ai+s4=
Subject key identifier:   A9:74:E3:24:71:A7:20:B9:09:0D:CF:62:83:6D:0E:78:1A:CA:52:86
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285849BF3F7E835B5F7340D1291340
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/3d912d81-d301-3e25-8490-59a9d093f572.roa
Signing time:             Mon 05 May 2025 01:00:49 +0000
ROA not before:           Mon 05 May 2025 01:00:49 +0000
ROA not after:            Sun 03 Aug 2025 01:00:49 +0000
asID:                     33363
IP address blocks:        2603:903e:3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bf:3f:7e:83:5b:5f:73:40:d1:29:13:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: May  5 01:00:49 2025 GMT
            Not After : Aug  3 01:00:49 2025 GMT
        Subject: CN=ece0549f-085d-44c6-af3c-0dbf1dee9783
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:27:a5:bd:9c:ba:a0:cb:10:af:39:0a:16:0c:
                    cc:98:2b:00:33:17:a7:ee:9e:de:73:4d:16:ad:28:
                    2d:64:9a:d1:1b:88:8e:07:c8:4a:41:fa:d1:00:8c:
                    bf:9d:cb:9f:d8:68:9c:53:8b:67:e3:15:ee:da:dd:
                    a8:9c:f1:7f:2f:e3:82:4b:56:72:dd:c7:cc:e6:5b:
                    5d:9e:ad:1e:b5:19:28:99:62:98:e2:72:30:44:81:
                    a0:68:3c:e9:f9:75:3e:19:34:43:cf:b3:18:84:20:
                    cd:d6:c9:ab:5c:16:01:56:65:f5:5c:c2:17:14:bb:
                    dc:e3:bc:a9:f3:8e:d6:24:46:d8:da:e7:a5:ad:14:
                    d2:df:a8:50:79:13:34:d7:a6:73:e2:2c:1e:a9:b7:
                    25:99:78:04:dd:78:d7:a7:38:73:83:8f:cc:d1:fb:
                    28:8a:73:42:3b:55:14:2b:2e:c6:86:6c:2c:ef:b6:
                    2a:e7:60:83:8f:c9:9a:7f:1e:53:e7:2c:d8:c3:9f:
                    7e:8a:70:2c:a6:02:e8:83:4b:dc:a5:75:b8:49:91:
                    5d:e1:a6:3a:4e:d7:c9:74:c5:80:e9:da:1b:2c:d4:
                    00:73:6a:5e:4d:6c:5d:e9:c2:68:11:09:0c:50:18:
                    03:25:71:02:0e:69:dc:76:34:5e:3b:24:28:a6:ee:
                    35:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:74:E3:24:71:A7:20:B9:09:0D:CF:62:83:6D:0E:78:1A:CA:52:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/3d912d81-d301-3e25-8490-59a9d093f572.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:903e:3::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:dd:c1:e6:e5:c7:24:f5:63:47:53:b7:f0:35:c2:2f:12:b7:
         9a:a5:12:9a:46:0c:8f:80:30:7d:d7:e3:53:64:64:de:a5:bc:
         35:fc:46:e9:22:28:04:82:24:34:5b:c1:35:d6:67:a7:61:5e:
         5b:87:b2:c7:5f:2b:b5:3f:56:45:ef:0c:6b:9f:e8:49:3e:e9:
         48:6b:63:ff:8d:17:87:89:2d:6d:0e:5e:06:14:95:53:5e:f3:
         43:74:a1:c8:1f:be:de:c7:c2:df:a8:b7:61:20:e0:d8:1e:ee:
         f7:c6:ba:ec:46:94:3f:4d:a4:9d:00:08:38:3d:e4:f4:47:cb:
         27:c1:5e:dc:0c:c2:8b:3d:4e:bb:73:0c:1f:74:ed:7d:57:ae:
         3a:04:1b:2a:46:f1:7d:fb:01:b9:81:93:13:7a:b6:9f:a0:87:
         5f:cb:3f:fa:99:f8:4d:85:63:16:7b:01:b3:d9:dd:cb:d2:ed:
         66:77:59:c7:d3:31:6a:b4:c1:87:87:cc:df:86:f9:54:82:cd:
         7d:e5:5e:3f:0e:15:fa:e2:09:55:0c:91:0c:d1:8d:b4:18:15:
         53:43:da:57:c1:54:06:82:ca:30:fa:b8:57:fa:59:30:92:fe:
         6f:72:d5:21:04:88:2e:48:b9:bb:28:b7:e0:9d:82:18:07:2f:
         43:38:ec:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 12:25:03 2025 by rpki-client