Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d9f5bc99-bdca-3ef8-b680-45017ffe62a4.roa
File:                     d9f5bc99-bdca-3ef8-b680-45017ffe62a4.roa (raw, json)
Hash identifier:          p7MQOfRiZ5ukHURsL/1aT6+OHccf5IgfAoaOHmSuZpM=
Subject key identifier:   B3:5E:79:35:E6:F8:6E:D0:13:7B:24:27:25:26:03:6C:FB:EA:DB:99
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584B7F5240FFD5A94CB977A6BF40
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d9f5bc99-bdca-3ef8-b680-45017ffe62a4.roa
Signing time:             Sun 12 Oct 2025 13:00:37 +0000
ROA not before:           Sun 12 Oct 2025 13:00:37 +0000
ROA not after:            Sat 10 Jan 2026 14:00:37 +0000
asID:                     11955
IP address blocks:        2603:90bd::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7f:52:40:ff:d5:a9:4c:b9:77:a6:bf:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Oct 12 13:00:37 2025 GMT
            Not After : Jan 10 14:00:37 2026 GMT
        Subject: CN=2c5fffd7-9235-4670-a9fb-230a56296672
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:7b:40:a5:52:b2:3c:08:c2:30:9b:5f:46:69:
                    87:33:74:28:ee:45:8f:e3:cf:91:67:b3:52:0d:aa:
                    97:c9:ab:ce:b6:f9:29:96:57:18:88:ee:9f:7a:aa:
                    a6:b7:4d:7f:a8:c1:51:f3:09:a8:b6:27:04:66:65:
                    81:11:3d:b9:99:64:1c:a3:18:8f:49:ed:80:d5:7c:
                    74:de:23:43:2a:dd:d2:b0:ca:0d:a8:9a:8c:c4:a4:
                    7e:2d:d2:db:fb:cf:9b:66:04:3a:b1:5a:8f:5b:24:
                    cb:62:44:f7:2b:bd:66:de:98:dd:ed:49:2e:18:5f:
                    15:05:97:b7:cb:a5:6a:fc:11:d4:17:97:7a:a2:60:
                    5c:bd:e6:49:a7:9f:9c:6c:6f:31:54:90:22:2d:30:
                    4d:53:5b:31:44:9c:dc:ea:80:4a:ba:dd:82:fc:c3:
                    3e:1f:83:a8:cd:c4:c8:a5:4e:af:38:29:37:5b:6e:
                    c2:15:d1:90:19:32:ad:1b:41:06:df:d3:f4:68:29:
                    2f:7f:2c:00:46:45:43:87:0d:dc:86:88:95:9a:4e:
                    d0:38:4c:e3:ab:29:2e:bd:3d:5e:0e:3f:85:73:b0:
                    9d:19:70:7b:96:20:75:60:82:0c:4a:8d:f3:3f:af:
                    ba:94:0b:ba:d0:10:ad:9c:78:4d:d3:e8:2f:2c:cf:
                    5f:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:5E:79:35:E6:F8:6E:D0:13:7B:24:27:25:26:03:6C:FB:EA:DB:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d9f5bc99-bdca-3ef8-b680-45017ffe62a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:90bd::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:23:15:0f:85:27:c9:07:f6:68:1c:6b:f7:e1:79:c9:82:46:
         f9:0c:59:a0:81:53:b5:5b:42:06:8b:b8:27:0f:b0:4f:d9:bf:
         9b:2f:6b:ce:11:0d:c7:c0:10:7c:75:74:1f:76:04:01:92:00:
         4e:71:79:b1:86:e1:49:4b:4f:ab:f3:27:80:9b:38:1a:1b:6f:
         1a:1a:db:86:9c:9b:c6:57:56:8a:ad:a1:38:c5:37:80:50:cb:
         1e:19:0a:a7:2a:64:9f:ec:7f:10:63:8c:dc:ce:ba:e1:9c:f2:
         dd:5f:f9:9c:e0:6f:a0:a6:0c:a8:67:81:84:51:16:e2:ec:b1:
         71:7a:19:45:16:d6:92:ea:4c:64:99:a4:2f:d9:08:88:61:37:
         fb:3d:0d:0b:42:4a:d8:32:8c:0e:2d:92:7d:b6:93:d0:b3:08:
         7b:ac:2d:76:26:49:d4:23:cb:31:dd:14:16:66:c0:f0:51:15:
         42:fb:7f:85:84:37:b3:63:08:40:dc:b2:a0:cf:89:fb:52:c4:
         92:46:64:a6:bd:01:6a:4e:50:a8:d0:fa:d3:c1:3a:cc:32:18:
         d3:da:56:64:cd:98:f4:a1:c7:83:99:fc:54:3e:3c:75:7b:de:
         01:82:3e:25:50:3c:25:07:e7:9c:08:a6:c3:e9:af:74:d7:7c:
         04:9e:2f:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 20:40:21 2025 by rpki-client