Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/dc2bc0c0-d55e-3b43-a992-3c6b00e11d5a.roa
File:                     dc2bc0c0-d55e-3b43-a992-3c6b00e11d5a.roa (raw, json)
Hash identifier:          YoWoPThDorSDXPcJ+cf/aZBc3cCGIrEIwivW2i2p5Z8=
Subject key identifier:   85:3E:8D:06:5A:F3:33:F6:C4:3F:0D:47:7A:E6:C6:6B:33:BD:46:63
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584A9E9647B68992BC899C90D280
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/dc2bc0c0-d55e-3b43-a992-3c6b00e11d5a.roa
Signing time:             Thu 24 Jul 2025 01:00:50 +0000
ROA not before:           Thu 24 Jul 2025 01:00:50 +0000
ROA not after:            Wed 22 Oct 2025 01:00:50 +0000
asID:                     7843
IP address blocks:        2603:90f2::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9e:96:47:b6:89:92:bc:89:9c:90:d2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Jul 24 01:00:50 2025 GMT
            Not After : Oct 22 01:00:50 2025 GMT
        Subject: CN=5897c7fe-c30a-4827-aec4-414d93920145
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:65:36:95:d7:59:ce:94:3b:f0:71:b3:b6:e6:
                    7f:2e:5b:1a:80:30:16:c8:b2:70:fd:7b:3e:c7:02:
                    04:9d:06:47:60:d7:22:4e:70:14:2d:bc:15:07:b8:
                    bf:2a:15:02:68:f2:06:dc:26:99:d4:75:f2:91:62:
                    8f:84:7e:fc:99:06:24:76:fb:4f:8b:70:fb:b5:3d:
                    bb:1e:13:3f:7c:d4:c3:a1:bd:7d:f7:cd:32:2a:e0:
                    36:5c:1a:52:dc:a4:53:77:4e:34:50:0d:fb:98:d6:
                    bc:62:7c:15:60:c4:de:96:a3:62:6a:2c:cf:19:ac:
                    12:8c:25:de:7f:17:eb:55:79:4a:25:5d:0d:ed:c5:
                    9f:d3:6e:ba:12:ca:ca:3b:c1:bc:e8:72:15:e9:fb:
                    9f:c3:98:ab:c1:2f:b6:7b:81:41:10:8e:4c:e1:0e:
                    e1:41:37:c4:02:7e:26:15:5c:0f:0a:24:38:68:90:
                    21:3e:67:cf:11:47:44:78:e1:b8:b1:59:70:1f:e8:
                    da:d0:8e:b6:80:b9:ac:61:ec:03:0f:13:b9:f4:d2:
                    bb:7a:cb:b4:1a:dd:ab:5a:81:64:2f:1b:18:1a:8a:
                    c1:ff:27:a9:75:0f:a5:4e:ad:f1:95:54:51:d2:64:
                    3e:db:15:9a:71:2d:98:be:20:d5:26:e1:7f:c1:15:
                    60:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:3E:8D:06:5A:F3:33:F6:C4:3F:0D:47:7A:E6:C6:6B:33:BD:46:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/dc2bc0c0-d55e-3b43-a992-3c6b00e11d5a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:90f2::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:ab:f1:a3:5a:71:3c:d1:4a:af:a1:fc:00:69:60:fd:c7:8b:
         49:6f:f0:fb:71:9a:6a:0b:76:a9:cf:5c:ad:01:b9:93:6a:34:
         a5:6b:17:b6:ef:01:ea:46:b6:aa:4c:f3:64:75:13:14:27:02:
         f1:a1:40:7e:07:15:bb:a1:dd:c4:40:91:4d:c4:db:0c:b8:42:
         e6:d6:3d:ff:c6:44:96:30:d3:29:e4:6d:86:3d:0c:b8:85:52:
         f8:2c:1a:ea:c7:b4:58:1c:d8:96:46:47:8f:a3:5e:5b:b4:0e:
         e7:e3:cb:e7:b7:d4:2b:6c:5f:9e:1e:6e:80:7b:30:49:45:b2:
         2b:20:72:f4:f4:4b:4d:ee:c9:b7:a1:9a:53:24:10:b2:13:05:
         20:ba:06:7e:ae:ce:32:9c:aa:7e:89:37:a4:0c:3a:b3:55:bc:
         83:c5:91:d8:f7:f2:ae:7d:39:1b:1f:7f:0b:e9:92:6b:83:43:
         98:09:78:8f:67:36:83:79:a7:c5:a9:59:3a:db:1c:ec:59:f1:
         31:dc:90:08:0a:27:ed:2a:38:ef:1f:16:51:49:3a:df:53:04:
         d4:d6:25:ad:8b:b2:99:1d:22:64:3d:b1:46:87:58:08:e6:9c:
         7a:c3:9d:3a:e2:1f:c8:17:db:20:87:08:1e:94:1e:54:ab:ff:
         51:00:98:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:53:25 2025 by rpki-client