Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/bd154fe3-59c2-349b-9639-a09c914cf780.roa
File:                     bd154fe3-59c2-349b-9639-a09c914cf780.roa (raw, json)
Hash identifier:          jdtP00KiVl8ym59SUNUkYrUv1eKU3I1yh5aic2KmkIU=
Subject key identifier:   41:C0:08:9A:6F:7D:C3:34:88:37:78:DC:46:13:76:61:28:2D:94:4E
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584B7F521645D92E5FE952BE7740
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/bd154fe3-59c2-349b-9639-a09c914cf780.roa
Signing time:             Sun 12 Oct 2025 13:00:37 +0000
ROA not before:           Sun 12 Oct 2025 13:00:37 +0000
ROA not after:            Sat 10 Jan 2026 14:00:37 +0000
asID:                     7843
IP address blocks:        2603:90f4::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7f:52:16:45:d9:2e:5f:e9:52:be:77:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Oct 12 13:00:37 2025 GMT
            Not After : Jan 10 14:00:37 2026 GMT
        Subject: CN=e510b726-5c61-408a-ace2-9d7e1f9c2c2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:02:ad:8a:c2:0d:f6:27:c8:9d:07:b9:35:0d:
                    df:c6:06:21:bd:f0:54:c6:c0:6b:ed:81:94:8e:e9:
                    de:d8:fe:20:19:1c:96:92:b0:f2:8b:a5:ce:20:6e:
                    e8:4d:a3:ca:de:90:1d:8f:28:ea:d6:17:38:c6:36:
                    15:87:02:be:67:ac:98:68:e2:1f:93:e5:00:c2:15:
                    d0:d4:5e:4c:f7:7c:89:6c:9b:f8:d3:1e:34:af:d5:
                    9e:37:17:98:d2:72:33:84:8d:58:66:72:53:d2:5b:
                    bb:33:5b:05:c2:cc:87:b7:65:64:9b:15:51:5a:d4:
                    6b:52:82:9a:fa:81:7b:af:ff:61:ef:bd:62:b3:2f:
                    67:94:70:a8:d0:85:86:fa:89:44:32:cf:23:d7:7e:
                    da:31:66:62:2b:9d:5e:29:26:2e:58:d9:01:fb:b0:
                    d0:9c:ff:af:64:8e:94:66:6e:12:0d:86:44:c6:e8:
                    91:ab:1c:ad:58:86:10:a5:0c:b1:2c:ed:33:83:a1:
                    5c:9b:46:2b:bc:1c:b9:f8:64:63:a5:7f:19:c7:e4:
                    6e:a2:25:2b:58:c3:51:f9:56:90:87:7f:ce:dd:70:
                    d2:c1:a4:2b:26:87:bd:d4:96:1a:a1:07:b3:4e:2a:
                    70:2d:c3:16:70:c1:0f:7b:7f:8b:a6:69:cc:d3:65:
                    6a:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:C0:08:9A:6F:7D:C3:34:88:37:78:DC:46:13:76:61:28:2D:94:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/bd154fe3-59c2-349b-9639-a09c914cf780.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:90f4::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:6a:da:46:a4:47:75:be:8f:c0:eb:42:bd:66:c3:d2:96:24:
         19:c5:81:ce:bc:47:22:f5:3a:26:39:71:93:32:83:4b:5b:b9:
         a9:82:08:76:5b:c0:0d:2e:e3:ee:c8:b7:70:9e:aa:d7:15:ae:
         4f:40:d1:44:6a:d6:08:18:31:5a:c5:a7:b7:83:e1:18:7d:d0:
         ad:f3:04:ff:6b:44:e4:b5:69:99:7f:9f:1d:b6:b9:fd:00:33:
         79:46:25:eb:9b:c1:07:4a:69:98:36:9c:3b:58:6f:1f:32:94:
         35:3d:c4:b3:b3:41:da:b9:00:7b:8c:8e:c9:7b:37:d8:81:a8:
         b8:1b:ef:8f:6e:ee:99:4e:7b:02:d3:cc:04:9f:b0:9b:68:86:
         dc:c4:82:db:e1:ab:66:d1:30:e0:1e:c1:aa:5c:bb:bb:cf:00:
         45:e1:25:7a:99:f7:99:47:b0:4c:6f:3a:d8:aa:28:58:59:28:
         24:84:b2:95:2a:d6:0d:82:45:57:d5:70:2e:38:11:21:aa:3a:
         2a:c9:02:43:c3:5c:4e:04:59:eb:04:99:5a:94:83:9b:af:42:
         85:6f:f5:27:84:a2:76:7d:5c:58:6e:59:5f:c2:f6:30:97:d2:
         c9:08:b1:75:27:74:9a:89:be:70:aa:3d:31:37:a7:6a:f6:d8:
         ff:69:94:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:55:33 2025 by rpki-client