Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d27039e2-4831-3bd1-aaf6-70a55c5d941f.roa
File:                     d27039e2-4831-3bd1-aaf6-70a55c5d941f.roa (raw, json)
Hash identifier:          QIlVj5KDmfxCy67OWCvjtPIxpHl77Cm3gEuKIEXW+NQ=
Subject key identifier:   BD:AA:B6:09:54:99:A6:95:7C:AB:A7:C0:3F:C9:C0:36:C2:47:D0:41
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584B7F52181FA9340F7A3D096D00
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d27039e2-4831-3bd1-aaf6-70a55c5d941f.roa
Signing time:             Sun 12 Oct 2025 13:00:37 +0000
ROA not before:           Sun 12 Oct 2025 13:00:37 +0000
ROA not after:            Sat 10 Jan 2026 14:00:37 +0000
asID:                     20001
IP address blocks:        2603:90f5:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7f:52:18:1f:a9:34:0f:7a:3d:09:6d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Oct 12 13:00:37 2025 GMT
            Not After : Jan 10 14:00:37 2026 GMT
        Subject: CN=d4fba32d-2b1a-488e-9845-bb7be8c4c138
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:f6:44:16:27:c6:9d:8c:7b:38:11:b2:b9:8c:
                    2c:05:7a:d9:cc:5f:ce:f1:95:15:c9:70:e6:bb:f9:
                    e8:58:25:57:d2:a3:fc:45:03:d6:0c:62:97:5f:e1:
                    26:2f:c2:0e:fd:29:3b:3e:b6:85:e4:54:52:3c:87:
                    b5:6d:b9:fc:0b:15:71:68:c8:dd:cb:8d:11:d5:c6:
                    25:83:b1:1a:e9:48:f8:ff:ba:38:bc:da:43:ee:60:
                    19:89:bf:f6:76:bd:75:82:4f:ed:52:fb:93:6b:f3:
                    1e:e0:41:7e:be:db:2b:f5:30:46:46:fa:2a:ab:37:
                    90:11:59:0c:d2:2d:00:22:24:b4:ff:fb:6a:ca:fd:
                    5c:96:c4:d2:32:4d:da:88:38:1d:9e:d5:2a:c5:8d:
                    fc:39:61:ea:ad:ac:46:af:ff:fe:1c:18:62:db:a4:
                    a0:72:f3:1b:f4:fa:67:38:56:d8:77:c2:a2:f8:40:
                    52:cc:2f:64:b6:ac:50:37:11:ff:1f:4b:9d:43:e6:
                    1c:74:ec:e7:eb:1c:ac:2f:89:a2:65:c3:99:2a:f2:
                    72:53:c5:36:f9:27:25:aa:24:6b:8f:b1:33:0c:25:
                    85:51:9a:d6:35:4f:ba:aa:48:8d:58:9d:d1:36:22:
                    21:85:2f:e3:35:11:2d:f9:37:5c:90:06:c5:81:46:
                    bb:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:AA:B6:09:54:99:A6:95:7C:AB:A7:C0:3F:C9:C0:36:C2:47:D0:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d27039e2-4831-3bd1-aaf6-70a55c5d941f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:90f5:1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:5c:5b:78:a3:1d:8c:9b:db:1c:df:80:c7:63:17:43:2a:6b:
         37:37:19:f7:24:cb:48:af:f8:48:16:ec:fe:75:4c:de:0d:85:
         bb:b3:c1:fb:c7:76:d0:56:10:7b:72:e2:f2:da:90:a3:dc:43:
         4f:4c:37:80:0a:a1:ed:75:4e:7f:61:80:a3:e9:5b:e2:78:ea:
         f3:94:04:8c:7d:68:7a:b9:fc:41:a1:64:2d:16:d4:64:14:46:
         44:11:af:d2:02:75:59:76:1b:07:9e:04:fe:6d:4c:77:8b:18:
         ff:22:82:38:ba:c3:b9:2c:b6:23:bc:c5:c5:0e:69:81:b5:de:
         cf:63:84:e0:23:b4:7e:08:98:1e:04:6c:1e:cc:f7:95:99:05:
         29:5e:cc:68:b5:b6:90:8a:37:37:94:c2:5a:11:f4:c6:a3:ee:
         cf:9d:01:63:45:d1:d5:d4:e0:a0:2d:c7:0c:80:1a:15:15:83:
         1c:e5:ed:8c:1e:5c:8e:1d:72:09:7c:42:e2:04:d6:3e:c2:e5:
         31:95:d0:70:3b:66:6f:b7:ea:97:8d:65:34:9d:ca:f1:34:31:
         55:7a:f7:37:1f:25:76:89:90:b9:d5:bf:ab:b6:2c:d5:3c:dc:
         7a:25:4d:44:e4:24:44:00:a9:b7:72:a5:92:ce:71:69:f8:d6:
         d8:70:9f:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:31:24 2025 by rpki-client