Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/27853cdd-02d7-3a7b-b933-be88c62eee29.roa
File:                     27853cdd-02d7-3a7b-b933-be88c62eee29.roa (raw, json)
Hash identifier:          nRui8HeBBBRgPwnIutDyy8xuFhb6BHfLTRPB/3cLYHc=
Subject key identifier:   60:28:05:A5:50:9E:37:D8:A0:47:58:10:19:4B:E3:5D:1A:53:1D:6B
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584A9E9661EE4B834F43F7022280
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/27853cdd-02d7-3a7b-b933-be88c62eee29.roa
Signing time:             Thu 24 Jul 2025 01:00:50 +0000
ROA not before:           Thu 24 Jul 2025 01:00:50 +0000
ROA not after:            Wed 22 Oct 2025 01:00:50 +0000
asID:                     33363
IP address blocks:        2603:903e:4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9e:96:61:ee:4b:83:4f:43:f7:02:22:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Jul 24 01:00:50 2025 GMT
            Not After : Oct 22 01:00:50 2025 GMT
        Subject: CN=9e7e1b51-f059-4b28-a31f-99b9d294a113
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:aa:bf:da:d0:26:39:eb:3b:cf:e2:2e:23:0c:
                    ea:c4:2b:77:65:f4:1f:be:a8:28:4a:26:44:05:b3:
                    35:d0:68:ae:e4:66:ac:12:63:0d:c4:be:55:0a:e7:
                    f8:91:01:68:41:73:fc:d7:8a:f9:3b:6c:59:e0:68:
                    b6:66:23:82:cb:99:e3:3a:ab:2b:92:0e:9e:86:0f:
                    41:da:4e:34:ad:c2:6d:9e:93:63:10:02:14:11:89:
                    d8:9a:b4:9e:1f:6f:68:ed:e4:db:ae:3c:49:7b:38:
                    e9:82:00:a4:99:6a:1f:2a:40:47:7b:f7:9f:20:44:
                    da:24:cc:ac:d5:8f:c7:53:e7:60:a3:2d:33:0d:e3:
                    36:a6:de:52:3e:b5:f6:95:7c:51:89:4d:b8:5a:8b:
                    0f:8e:7c:24:71:c3:4b:ba:2d:fe:dc:e2:2e:86:7c:
                    ef:7f:e5:2e:8a:19:39:d1:c5:6e:1c:6b:43:81:5c:
                    56:57:21:fe:0d:c7:96:53:d9:6b:b9:9e:47:2a:91:
                    a0:03:11:96:85:fb:de:c7:a2:07:7f:f0:c2:39:21:
                    f2:79:21:5e:dd:1f:06:6b:3e:6e:3b:b3:bd:f0:44:
                    94:6d:be:b8:7b:2d:e7:9c:cd:65:ac:d7:78:73:d7:
                    15:3b:cc:bd:a1:ef:54:0e:40:e2:6c:c9:f5:e3:3c:
                    47:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:28:05:A5:50:9E:37:D8:A0:47:58:10:19:4B:E3:5D:1A:53:1D:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/27853cdd-02d7-3a7b-b933-be88c62eee29.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:903e:4::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:1c:c9:6f:42:e4:73:6b:96:16:42:9b:04:8e:26:da:2b:55:
         a1:1e:2f:98:15:19:16:ff:bd:33:ce:88:a4:96:4f:b7:36:82:
         98:0f:cb:92:06:18:d6:1a:35:d3:03:3c:e4:65:f5:65:07:66:
         54:9e:2f:fa:f0:15:69:ba:26:e2:10:79:ff:f0:07:6c:9f:61:
         40:f2:8c:b1:4d:4b:53:6a:c5:dc:b3:72:f2:0a:2e:4f:11:53:
         bc:5d:b9:64:70:08:69:be:fe:0c:17:fb:c1:60:9d:f0:5d:fd:
         fb:c2:f1:23:18:6c:37:0f:c3:1e:1d:4c:de:58:78:eb:3a:f7:
         6b:07:9d:dc:26:9d:db:c1:f3:38:69:df:f6:98:af:23:c9:25:
         c9:79:16:4e:52:57:eb:4d:93:6f:d6:e2:c0:0d:64:be:ae:fb:
         f3:a7:9e:4c:31:6e:04:c7:0e:02:12:24:02:44:08:7d:d2:33:
         06:80:64:25:20:60:95:01:4d:35:04:dd:3e:40:9d:d2:96:69:
         b9:09:6f:22:61:d0:ad:01:27:e9:7e:18:27:99:1e:85:9e:c3:
         45:be:11:71:5d:6a:db:f3:d8:fb:8f:31:88:16:d3:9b:c1:45:
         20:53:a8:01:ca:24:d0:c1:51:8b:34:c9:cf:10:7c:b4:57:7c:
         b9:3c:05:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:04:06 2025 by rpki-client