Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/375e09c2-1572-34c2-9f47-4b40072749f3.roa
File:                     375e09c2-1572-34c2-9f47-4b40072749f3.roa (raw, json)
Hash identifier:          mcWzVlCHInZHWIj8YRKksU1bTLpFmPEKI3CGMvvI5ac=
Subject key identifier:   90:6E:C0:87:29:41:F8:AB:73:ED:20:AA:20:FC:EB:A7:72:B0:FE:0B
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584A9E9656A79295B2EAD7DD4400
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/375e09c2-1572-34c2-9f47-4b40072749f3.roa
Signing time:             Thu 24 Jul 2025 01:00:50 +0000
ROA not before:           Thu 24 Jul 2025 01:00:50 +0000
ROA not after:            Wed 22 Oct 2025 01:00:50 +0000
asID:                     33363
IP address blocks:        2603:9031:90::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9e:96:56:a7:92:95:b2:ea:d7:dd:44:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Jul 24 01:00:50 2025 GMT
            Not After : Oct 22 01:00:50 2025 GMT
        Subject: CN=18d281c1-eb1f-4ee1-8d63-72aa40d60dd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:dd:a0:4f:10:b8:ae:c4:ac:94:21:e6:71:f0:
                    11:eb:8a:0d:db:45:d1:2c:b7:b1:92:28:c0:49:b1:
                    c1:f7:33:4b:cb:52:b0:7a:b5:cb:dd:7d:f6:a8:c8:
                    d5:aa:36:9f:97:1f:4f:b0:47:f9:19:83:ec:7b:0a:
                    62:7d:71:f8:ba:a4:c7:06:c1:9b:1c:3c:54:d4:1f:
                    a0:bd:ce:75:30:9d:bc:68:6e:ac:ad:5d:11:a0:1c:
                    cf:4e:a1:80:86:01:15:d9:d4:78:1c:45:16:a7:0d:
                    5d:e4:90:30:62:9e:3c:0a:35:52:b2:6d:43:46:b6:
                    31:fe:3a:0f:65:1b:25:32:a5:85:0f:22:3a:21:52:
                    a2:95:bb:e9:46:76:18:63:bf:f8:40:5f:0c:c9:8e:
                    1d:64:17:61:aa:6a:62:1f:08:2b:ac:6c:a5:1c:15:
                    06:73:d9:a4:ca:5e:d9:99:5d:7b:26:a2:17:87:ad:
                    75:c9:47:30:a9:de:a1:5a:96:11:be:e9:b8:94:e8:
                    02:01:81:cb:6b:96:5b:d0:b5:9b:c5:1d:17:72:70:
                    65:d8:b3:1a:ef:d5:0d:7b:a0:10:62:6c:1e:5e:97:
                    c3:b9:4d:c1:a3:a4:68:21:00:06:e5:c0:81:4e:dc:
                    92:e4:e2:8e:22:9f:9e:24:63:c0:77:98:65:7f:fd:
                    3e:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:6E:C0:87:29:41:F8:AB:73:ED:20:AA:20:FC:EB:A7:72:B0:FE:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/375e09c2-1572-34c2-9f47-4b40072749f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:9031:90::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:ff:69:c7:a8:d8:eb:bf:6d:ad:de:87:33:ed:d8:63:18:b6:
         88:bb:23:4e:a5:1b:6a:1c:91:cb:10:4a:68:d7:02:32:b4:87:
         df:3c:02:88:fc:3f:0c:85:0a:f5:7f:a3:ac:b8:65:5d:03:c6:
         c0:66:c5:30:9c:96:d8:fc:3c:44:4c:b5:59:ff:fb:7b:6f:7a:
         ab:d9:cb:17:55:1e:bc:67:a4:e3:ef:1c:4d:20:0d:59:f2:7c:
         4a:31:40:cb:7d:9c:1c:be:db:3c:ac:55:94:92:84:ac:64:c4:
         d6:5e:6f:ef:30:c1:c8:ca:6b:38:82:7d:e2:64:8a:09:55:da:
         d0:85:d0:8d:d9:d4:be:14:ac:d7:6f:9d:65:bf:08:6b:67:90:
         13:95:cc:e4:2d:36:61:1f:b1:c8:be:65:23:f7:9f:ef:74:9e:
         28:98:f7:71:82:8a:0f:29:5d:a5:f3:03:06:b2:79:b8:4d:c5:
         ae:05:47:2b:3e:0d:ab:98:cc:1c:47:46:0e:74:4a:91:6b:c3:
         9d:36:04:b1:8d:84:35:5d:eb:ec:ad:03:95:9c:92:8a:6c:39:
         05:72:1f:7a:2c:ca:fc:11:cb:ce:02:f9:24:2e:f2:13:ad:75:
         76:76:07:97:43:8a:6d:e7:62:ec:5a:69:a0:24:b2:07:66:3e:
         be:78:e7:96
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqellankpWy6tfdRAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli
NjAzMB4XDTI1MDcyNDAxMDA1MFoXDTI1MTAyMjAxMDA1MFowLzEtMCsGA1UEAxMk
MThkMjgxYzEtZWIxZi00ZWUxLThkNjMtNzJhYTQwZDYwZGQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6N2gTxC4rsSslCHmcfAR64oN20XRLLexkijA
SbHB9zNLy1KwerXL3X32qMjVqjaflx9PsEf5GYPsewpifXH4uqTHBsGbHDxU1B+g
vc51MJ28aG6srV0RoBzPTqGAhgEV2dR4HEUWpw1d5JAwYp48CjVSsm1DRrYx/joP
ZRslMqWFDyI6IVKilbvpRnYYY7/4QF8MyY4dZBdhqmpiHwgrrGylHBUGc9mkyl7Z
mV17JqIXh611yUcwqd6hWpYRvum4lOgCAYHLa5Zb0LWbxR0XcnBl2LMa79UNe6AQ
YmweXpfDuU3Bo6RoIQAG5cCBTtyS5OKOIp+eJGPAd5hlf/0+zwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFJBuwIcpQfirc+0gqiD866dysP4LMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1
ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvMzc1ZTA5YzItMTU3Mi0z
NGMyLTlmNDctNGI0MDA3Mjc0OWYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3
NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5
YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0
MWYxOWI2MDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgOQMQCQ
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACn/aceo2Ou/ba3ehzPt2GMYtoi7I06lG2ockcsQSmjXAjK0h988
Aoj8PwyFCvV/o6y4ZV0DxsBmxTCcltj8PERMtVn/+3tveqvZyxdVHrxnpOPvHE0g
DVnyfEoxQMt9nBy+2zysVZSShKxkxNZeb+8wwcjKaziCfeJkiglV2tCF0I3Z1L4U
rNdvnWW/CGtnkBOVzOQtNmEfsci+ZSP3n+90niiY93GCig8pXaXzAwayebhNxa4F
Rys+DauYzBxHRg50SpFrw502BLGNhDVd6+ytA5WckopsOQVyH3osyvwRy84C+SQu
8hOtdXZ2B5dDim3nYuxaaaAksgdmPr5455Y=
-----END CERTIFICATE-----
Generated at Mon Aug 4 16:03:24 2025 by rpki-client