Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/7b2e95f6-877e-333e-97b3-64d72fa01774.roa
File:                     7b2e95f6-877e-333e-97b3-64d72fa01774.roa (raw, json)
Hash identifier:          E7wX7U+XPe91qB0Z4pJOMeuZ/Vc9iTVKLkNXVvXOK8I=
Subject key identifier:   70:7A:30:ED:C5:2C:F9:E1:BB:84:C0:6F:C3:D6:08:E0:7B:EE:C4:D8
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584B7F5217933B5E35CA6F33A450
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/7b2e95f6-877e-333e-97b3-64d72fa01774.roa
Signing time:             Sun 12 Oct 2025 13:00:37 +0000
ROA not before:           Sun 12 Oct 2025 13:00:37 +0000
ROA not after:            Sat 10 Jan 2026 14:00:37 +0000
asID:                     19115
IP address blocks:        2603:90fb:40::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7f:52:17:93:3b:5e:35:ca:6f:33:a4:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Oct 12 13:00:37 2025 GMT
            Not After : Jan 10 14:00:37 2026 GMT
        Subject: CN=b41ad8dc-fefb-45d9-bd31-32fe4acafa79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:c2:14:4e:52:6e:96:63:c8:e7:ed:b5:c7:08:
                    74:6a:f5:60:2d:20:ce:4d:de:af:1e:db:67:26:67:
                    df:0b:47:33:a5:ec:9d:e9:88:fb:09:47:a3:93:cf:
                    fb:c2:01:4d:84:eb:b9:ab:74:13:7c:b1:41:bc:48:
                    cf:47:d8:e7:ef:bd:85:07:8a:24:ce:aa:0d:99:1b:
                    2a:f6:52:77:ee:21:0c:d6:29:89:f7:c2:9a:6e:1b:
                    46:b5:b7:f9:b5:91:3c:ef:46:c0:fa:ae:09:94:33:
                    e6:57:75:6c:84:22:47:41:ef:9b:8c:9f:94:52:a5:
                    a1:b3:b3:60:8e:ba:0d:00:25:ee:08:c7:ce:87:15:
                    b6:6b:44:21:52:ec:d1:d7:65:71:1f:75:de:44:d7:
                    0f:e9:a3:bb:b6:ed:5d:c0:57:e3:2a:b6:a1:c1:13:
                    3d:7b:08:12:18:80:26:41:4a:70:db:cb:64:f0:ee:
                    7b:2e:c4:d4:bd:e7:ff:15:21:f1:70:e6:90:38:e7:
                    e8:64:fb:77:da:06:5e:b5:9f:45:ba:e4:3d:bf:18:
                    b8:04:5c:c7:58:3c:d1:1c:3e:3e:6d:87:5f:ec:9f:
                    e6:8d:c2:18:4f:3e:86:3f:6b:c3:8a:36:b3:53:1a:
                    61:ae:8e:4e:3a:99:6c:8e:e1:cc:f2:2f:ca:65:68:
                    4e:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:7A:30:ED:C5:2C:F9:E1:BB:84:C0:6F:C3:D6:08:E0:7B:EE:C4:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/7b2e95f6-877e-333e-97b3-64d72fa01774.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:90fb:40::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:aa:47:a1:d3:e7:45:63:bd:24:2c:9a:a9:11:1b:77:dd:9d:
         1c:2e:01:2d:b9:e1:1c:6a:a4:b1:4f:d5:c7:fe:35:e6:f2:e9:
         d5:c6:92:db:49:24:d9:b1:00:cb:89:07:46:08:8e:c9:48:06:
         3f:82:45:f8:e5:95:a5:fc:9f:56:d9:5e:22:3a:d2:fc:96:fd:
         d8:fa:a5:bb:11:6d:74:cf:0a:be:e6:82:fa:42:a1:33:d4:79:
         61:8f:47:b0:ff:2e:dc:f5:85:5b:3e:d5:54:09:1f:7a:58:17:
         1b:34:fa:9b:78:07:24:ff:b7:9c:47:c6:a2:88:77:ca:4b:0a:
         fa:35:f9:02:fd:15:9e:b6:cd:e3:68:ff:2a:2b:b4:8d:b7:20:
         02:ab:49:db:7e:c4:61:ed:28:0e:68:10:72:f8:c0:13:ca:9d:
         69:f7:da:c3:ec:03:05:52:a1:e4:08:22:48:d8:19:0f:c1:9d:
         4e:0d:f6:f5:18:6a:ef:2c:ad:b7:0d:43:00:58:5a:dc:0b:95:
         7c:81:ea:fd:1f:1f:86:aa:7e:40:7c:bb:ec:a2:dd:cc:02:06:
         0f:f7:9a:52:7b:38:b6:7f:4c:89:ea:e7:e4:ad:8e:53:84:01:
         25:fc:65:28:64:c8:61:64:cf:f4:b2:aa:ea:ea:2f:7a:bd:03:
         20:0b:3e:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:13:55 2025 by rpki-client