Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/4bd09377-5053-34be-b848-cf6394bb96d9.roa
File:                     4bd09377-5053-34be-b848-cf6394bb96d9.roa (raw, json)
Hash identifier:          kJVUM9JAuUd7tMtuKOjy2/odSgewrqJUxyQjs5lRtik=
Subject key identifier:   3A:5D:F5:3C:F1:2D:DB:18:97:D6:0B:2A:28:E2:BC:AF:C8:D3:D6:B0
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584B7F521657BEB988631FFE20C0
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/4bd09377-5053-34be-b848-cf6394bb96d9.roa
Signing time:             Sun 12 Oct 2025 13:00:37 +0000
ROA not before:           Sun 12 Oct 2025 13:00:37 +0000
ROA not after:            Sat 10 Jan 2026 14:00:37 +0000
asID:                     10796
IP address blocks:        2603:90f5:6::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7f:52:16:57:be:b9:88:63:1f:fe:20:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Oct 12 13:00:37 2025 GMT
            Not After : Jan 10 14:00:37 2026 GMT
        Subject: CN=3f81cca9-5ee3-459a-a5a5-c7ef011cef67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:28:a3:cd:6a:cb:4c:c0:53:d0:84:14:ef:1b:
                    08:7a:f7:d4:6d:59:e6:69:0b:de:52:c8:45:c7:96:
                    be:aa:de:9f:d2:ce:f1:58:49:3c:3e:59:dd:a5:1b:
                    ae:db:c1:42:14:5d:2a:e1:a8:bc:b9:d5:98:c1:8f:
                    4f:8f:b7:ea:0c:3d:67:b3:1a:ed:b0:5c:7a:0b:be:
                    1c:6b:53:bc:d3:d5:6d:0c:a7:b8:88:eb:1c:22:cb:
                    5f:cb:cc:f8:90:a8:f4:51:97:45:d6:af:ed:a8:15:
                    95:b1:bc:9d:0b:b6:db:63:d3:d4:0d:e7:44:e7:8b:
                    fa:2f:fe:c5:e3:50:f3:13:ad:ff:11:f1:b0:81:61:
                    98:65:16:ae:ad:8d:75:6b:3d:3b:d7:59:70:2c:33:
                    28:5b:b1:35:17:4b:fb:d0:4b:3c:04:0e:0c:7e:56:
                    5c:ab:e2:dd:4d:9d:0d:ef:02:c1:56:a1:b2:9d:8f:
                    5d:35:a1:f5:33:c5:1a:32:f4:a4:16:cd:6b:e9:91:
                    87:6d:ed:09:a1:df:b3:b9:b6:dc:fb:cc:d2:3f:74:
                    c9:9b:d2:e3:b4:ed:3e:f1:6a:be:0f:48:de:d6:4e:
                    b0:b3:e2:50:d7:60:65:c3:b4:0a:e1:25:b1:34:a4:
                    ce:3c:75:22:61:0f:8d:3e:b3:f1:c0:bb:90:51:08:
                    73:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:5D:F5:3C:F1:2D:DB:18:97:D6:0B:2A:28:E2:BC:AF:C8:D3:D6:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/4bd09377-5053-34be-b848-cf6394bb96d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:90f5:6::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:8b:51:a9:fa:2c:7d:2a:60:1d:31:59:87:96:8c:b0:f5:f4:
         c3:bb:2b:e1:83:e9:87:30:6b:bf:2f:05:17:67:13:7d:ed:0a:
         af:19:4a:46:aa:df:b7:75:a8:a2:a5:03:e8:fb:03:25:42:02:
         e1:8e:27:12:c3:6a:e9:3c:9d:c4:5d:f3:29:72:b2:f3:2b:90:
         49:de:c6:f2:3d:ed:23:3f:43:ce:66:81:03:08:21:c2:d5:9d:
         f8:ab:18:62:73:a4:fa:86:73:a2:9e:87:bc:3f:f9:11:bc:e3:
         95:fa:e7:49:e7:cb:e5:71:52:f5:b6:01:23:20:b6:18:cd:64:
         5a:9a:aa:e0:2a:a1:c2:3a:32:7c:f3:b2:35:42:be:4a:87:90:
         ad:26:5b:62:24:9b:0b:2e:50:fe:96:f4:2d:e4:9d:3a:55:37:
         5c:31:11:a1:87:b0:6b:d1:2e:6f:06:8d:3f:16:fe:0e:c9:2e:
         cf:9d:28:9f:ea:eb:1d:f7:04:e2:7d:63:6d:4f:fa:a2:3f:7c:
         f0:c8:01:60:d9:a3:f1:72:93:81:06:9f:7f:41:0d:7e:72:93:
         cb:0f:0c:60:ca:2d:4a:92:2f:33:1e:c2:43:a1:cd:c3:51:23:
         01:93:f2:34:43:ef:cb:6a:dd:a0:39:90:23:a0:1e:32:45:68:
         95:32:7b:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:43:50 2025 by rpki-client