Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/47fd59d1-b333-36ab-b6f1-fab66e26a22c.roa
File:                     47fd59d1-b333-36ab-b6f1-fab66e26a22c.roa (raw, json)
Hash identifier:          759FUXbq9Dct0vTI6geldz0QuHJ/fwQcDAT4Ae17x2g=
Subject key identifier:   78:18:65:35:CC:E1:EB:5D:5F:B2:A6:17:E5:91:65:5D:7D:78:9C:49
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584A9E96537EC73E93F3D9FFBA00
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/47fd59d1-b333-36ab-b6f1-fab66e26a22c.roa
Signing time:             Thu 24 Jul 2025 01:00:50 +0000
ROA not before:           Thu 24 Jul 2025 01:00:50 +0000
ROA not after:            Wed 22 Oct 2025 01:00:50 +0000
asID:                     33363
IP address blocks:        2603:9005::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9e:96:53:7e:c7:3e:93:f3:d9:ff:ba:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Jul 24 01:00:50 2025 GMT
            Not After : Oct 22 01:00:50 2025 GMT
        Subject: CN=51621f7e-ffc6-43e1-a5b5-754d4359e907
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:57:f9:04:37:3e:d8:bd:53:91:44:84:c3:94:
                    16:27:ba:f3:84:3b:f0:c5:5d:97:66:5b:27:d6:83:
                    58:8a:d5:b0:e9:21:e5:d3:37:5a:ce:6c:50:97:49:
                    1a:04:af:c9:14:51:cb:66:76:0a:59:5c:4b:19:6f:
                    a7:a3:a8:45:b9:e3:59:ec:6b:7f:ea:cf:dc:50:db:
                    d1:c1:2d:11:3f:66:dd:38:0e:17:43:84:6c:87:48:
                    b6:b0:23:d4:df:fc:d6:81:36:d1:01:8c:fc:9f:e6:
                    86:84:b2:4a:7d:f4:ce:84:25:c3:0c:ba:a7:f3:17:
                    73:fc:2d:b0:c8:1c:2c:54:67:33:42:95:49:37:14:
                    3f:35:80:f4:d3:7d:b8:84:e8:bf:97:68:ff:e2:21:
                    2d:f2:12:78:96:8a:71:54:a9:d5:c4:73:23:4d:dc:
                    0d:7c:b0:1b:1e:66:34:19:60:d3:cf:77:c2:3b:8b:
                    ff:79:29:7d:95:2e:0b:3d:7d:5a:f4:f0:59:da:39:
                    0c:79:34:d1:7c:82:dc:0d:76:a2:2b:b7:b5:5c:19:
                    63:a0:b3:10:d2:af:3a:e1:b2:59:b4:39:02:6b:b8:
                    9a:0c:de:ec:d1:bd:8a:c2:49:82:ef:a3:e5:72:69:
                    cb:5a:1b:91:d4:a5:94:85:23:d8:63:26:af:0c:9e:
                    3e:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:18:65:35:CC:E1:EB:5D:5F:B2:A6:17:E5:91:65:5D:7D:78:9C:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/47fd59d1-b333-36ab-b6f1-fab66e26a22c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:9005::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:16:aa:2d:c2:c4:f1:b3:82:33:cc:0e:46:0b:26:51:fe:65:
         b7:2e:2f:e8:db:d9:f2:3b:20:bc:7d:0c:a4:9d:98:3e:eb:09:
         51:a5:09:f5:a7:dd:df:73:0a:60:ea:87:f9:30:60:94:2d:14:
         b0:0b:98:7e:6a:6c:de:30:d0:64:f5:89:fa:13:e6:d9:b6:06:
         c7:88:dc:0c:3c:cd:c9:ad:38:9c:91:7e:86:4b:a9:7a:51:18:
         a3:d0:93:70:4e:c5:58:90:05:4b:8f:2a:c0:8f:af:86:55:04:
         5d:7b:75:ec:61:6e:30:55:3c:28:6d:47:4a:cc:02:d6:64:16:
         46:e4:8d:e8:f5:f0:34:c5:d8:17:7d:df:5a:5d:23:f2:d2:53:
         fa:3d:58:89:c0:f6:3b:91:13:71:97:d4:b7:5f:69:c8:cd:e7:
         c9:8a:6a:40:47:cb:a5:99:c1:33:86:26:3f:c1:97:d4:b2:e3:
         25:70:a6:2b:60:d6:3c:a0:d3:03:81:3c:96:e9:6f:d5:ed:b8:
         73:39:16:56:3c:21:0f:3b:f6:d6:da:04:2e:b2:d2:b2:5e:92:
         b9:94:76:00:77:e6:d8:92:ab:74:7f:4e:9c:59:8e:9b:38:94:
         40:a1:ed:d6:15:96:64:6d:32:a0:c5:24:96:93:1c:e0:03:b2:
         bc:fe:5e:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:23:03 2025 by rpki-client