Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/48c45320-7fad-362f-8eb5-766d766dabaf.roa
File:                     48c45320-7fad-362f-8eb5-766d766dabaf.roa (raw, json)
Hash identifier:          2H8tuAvt9iB2y68/Zd+UJQH74MWa01IBzCsqocDC3qI=
Subject key identifier:   AA:04:95:2C:FF:79:09:72:FD:C7:9B:E8:F9:F0:7E:64:88:63:75:6E
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584A9E9653FF3E490404BD63EB00
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/48c45320-7fad-362f-8eb5-766d766dabaf.roa
Signing time:             Thu 24 Jul 2025 01:00:50 +0000
ROA not before:           Thu 24 Jul 2025 01:00:50 +0000
ROA not after:            Wed 22 Oct 2025 01:00:50 +0000
asID:                     33363
IP address blocks:        2603:9003::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9e:96:53:ff:3e:49:04:04:bd:63:eb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Jul 24 01:00:50 2025 GMT
            Not After : Oct 22 01:00:50 2025 GMT
        Subject: CN=77f565d5-fa83-4cda-bad1-1025b608e8d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:ce:30:a4:3c:84:9f:a4:13:cc:13:43:28:82:
                    de:26:35:fd:0e:39:d1:3b:a6:cf:e7:bc:4c:8a:1e:
                    bb:d8:3d:90:74:70:2f:3a:b8:35:76:51:a8:7b:e1:
                    b4:68:d2:4a:73:77:4b:4d:fd:44:1e:b2:83:20:09:
                    a0:0d:b2:3e:4c:53:27:bd:95:cc:7e:b4:94:45:81:
                    22:1f:6b:38:f8:d3:1a:34:c5:93:af:d5:dd:c0:6d:
                    d3:13:f0:cd:b0:4f:4b:66:8e:76:b5:94:56:60:59:
                    15:be:96:06:43:a8:89:3f:90:06:31:16:53:ff:de:
                    08:9f:15:e4:9d:d8:36:53:92:ca:c6:32:5f:a7:6d:
                    85:55:50:b3:e0:83:b1:46:e5:f1:ac:27:22:6d:84:
                    dc:a7:4a:23:3d:4a:bb:ad:0a:b6:f1:66:91:f8:a9:
                    62:28:e0:9a:a6:29:61:2b:ff:5c:3c:da:fa:a2:ca:
                    55:5f:c9:60:81:09:61:80:09:e1:da:b2:08:93:e5:
                    01:df:f8:3d:4d:ad:a5:26:ee:91:18:11:e8:1c:bc:
                    41:86:56:22:80:43:81:59:d4:33:48:a6:36:ba:3a:
                    bd:95:94:0e:d2:7e:fd:34:57:ce:27:80:ac:30:7a:
                    c5:a0:83:5e:86:c1:9b:eb:b5:e7:ae:79:c9:7d:94:
                    86:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:04:95:2C:FF:79:09:72:FD:C7:9B:E8:F9:F0:7E:64:88:63:75:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/48c45320-7fad-362f-8eb5-766d766dabaf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:9003::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:8c:13:2d:23:79:2c:d6:db:99:3b:3f:b5:e3:98:05:e9:2c:
         bf:28:52:b2:72:4b:50:35:e6:b8:b5:b2:5b:8a:91:00:76:68:
         83:42:ac:fd:13:93:f9:3e:e2:76:c7:3b:4d:bd:3d:63:47:d5:
         1d:30:93:f2:30:b4:62:2f:26:60:b8:47:93:e0:a6:c3:30:33:
         e0:39:49:7f:33:38:a9:90:5f:89:58:f0:27:dc:1b:69:c2:00:
         c3:bd:cf:5a:ec:e2:f1:2d:6d:e3:84:d6:43:82:71:85:e7:f5:
         03:14:33:83:41:ed:3d:09:de:91:ef:0c:c1:0d:a4:ca:e2:ce:
         69:8b:f4:25:17:c8:74:f8:6e:4e:3a:44:bd:dd:84:0f:0d:7a:
         fc:43:91:77:9c:cc:21:e5:6d:7c:ff:52:20:d6:fc:23:fc:b3:
         f6:da:8b:4e:18:d7:b4:6c:38:b9:06:8d:e3:f3:88:f1:50:c9:
         e6:ff:98:ae:b0:1a:a7:0d:66:5c:9f:f4:05:ee:05:5b:84:c7:
         c2:ac:c6:21:34:67:31:8b:18:e7:bc:45:06:8e:0c:63:7e:92:
         d1:66:f2:be:8b:d6:19:1b:ee:fa:a6:0c:14:3e:93:81:1b:77:
         22:f7:0a:57:7d:0d:8b:cd:21:7a:28:1e:00:09:9d:04:e1:df:
         32:c8:2a:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:33:02 2025 by rpki-client