Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/a3e6a023-f8b3-32fa-818a-eabceac6471b.roa
File:                     a3e6a023-f8b3-32fa-818a-eabceac6471b.roa (raw, json)
Hash identifier:          svLkvhK70t7xz594PBEOAGmtkh7H9G7f2rL7p7JiuFw=
Subject key identifier:   58:1A:9F:88:08:FC:22:EF:A5:1B:93:6A:35:89:F8:AE:F9:79:CB:59
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584B4081AD2F7FC932D509D14090
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/a3e6a023-f8b3-32fa-818a-eabceac6471b.roa
Signing time:             Sat 20 Sep 2025 01:00:32 +0000
ROA not before:           Sat 20 Sep 2025 01:00:32 +0000
ROA not after:            Fri 19 Dec 2025 02:00:32 +0000
asID:                     33363
IP address blocks:        2603:9015::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:40:81:ad:2f:7f:c9:32:d5:09:d1:40:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Sep 20 01:00:32 2025 GMT
            Not After : Dec 19 02:00:32 2025 GMT
        Subject: CN=8791b2f9-da33-4257-80df-031fdaa12805
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:76:ae:e5:7a:3e:27:f7:54:36:3e:37:73:27:
                    5b:ce:80:e4:0c:da:76:61:e4:37:78:b5:74:99:b1:
                    21:0f:8f:aa:d5:31:58:27:86:bb:01:43:a8:0f:7a:
                    2b:ee:d6:e1:09:41:15:77:5b:a6:08:18:5f:b8:6f:
                    0c:8f:39:8b:b3:cc:b0:d1:63:d3:cc:cb:8b:c9:84:
                    a6:90:80:c4:8e:35:88:c7:ee:4c:42:0b:15:14:17:
                    a2:9f:89:79:e1:0b:d1:eb:15:d0:ea:16:b7:16:02:
                    3d:a3:5f:69:eb:a2:9a:37:a9:b5:42:5e:b1:b4:70:
                    ba:bd:9f:2d:81:c4:94:c5:dc:d2:53:19:7b:48:ba:
                    3c:b4:1c:11:bf:09:a7:a7:ef:71:72:53:ec:4b:eb:
                    8c:5f:93:63:1d:5d:aa:f0:1e:d7:9b:d3:31:c3:70:
                    e2:28:62:cb:d9:d7:d9:93:95:b4:cf:dc:8b:b7:5e:
                    19:69:9a:82:c0:0b:ef:ec:00:08:a5:06:9e:bc:db:
                    74:b5:3f:5a:9d:87:7b:8e:1b:3a:00:ad:09:c0:34:
                    7f:ae:06:4d:41:fe:13:a5:b1:22:50:ef:61:47:32:
                    02:12:b1:0b:86:ba:f6:a4:06:f0:64:e3:90:c7:75:
                    24:11:91:f6:a3:b9:57:b2:b8:bb:90:02:7e:03:01:
                    93:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:1A:9F:88:08:FC:22:EF:A5:1B:93:6A:35:89:F8:AE:F9:79:CB:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/a3e6a023-f8b3-32fa-818a-eabceac6471b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:9015::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:93:d5:f6:75:8d:ff:17:5c:4d:f5:22:4a:da:3f:ba:b7:19:
         1c:85:19:1f:ed:63:17:8e:45:8f:f9:e9:55:97:72:24:b6:2a:
         83:f9:d1:d5:e5:55:0c:02:df:44:ac:ff:59:ac:0c:4e:0d:66:
         41:a8:99:db:99:84:ec:ff:df:33:89:79:16:d3:93:72:fd:b0:
         9d:31:0c:fd:20:72:83:a3:98:a9:0d:1d:17:03:26:6d:51:70:
         2f:99:f3:2c:3b:3a:bc:d3:1b:45:bd:32:6c:1f:fe:ad:5b:0e:
         f5:fb:1a:a3:4e:ae:0b:33:5c:34:92:ba:f3:a4:a8:23:45:42:
         d0:7f:e5:14:6b:a1:a0:de:74:fe:7a:90:56:bf:02:fd:13:06:
         f8:8d:f5:11:0d:7d:ba:78:4d:0e:36:47:84:05:e9:20:77:17:
         ad:85:99:5b:93:0b:d6:f6:5a:58:e2:39:b6:bf:f7:81:90:b9:
         4c:cb:4e:b9:9a:8e:97:32:d8:ac:7f:33:33:c8:e2:c6:e0:4c:
         1b:9c:de:e7:99:cc:a3:e9:1c:e7:4e:12:79:bf:01:4f:5d:fa:
         54:27:32:cd:c6:8d:f1:fd:34:eb:52:6d:00:5c:8b:9b:34:ac:
         85:80:b7:3b:7b:55:62:ef:30:98:2a:b0:56:67:5a:6f:9f:05:
         50:67:95:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:15:03 2025 by rpki-client