Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/6d0cef60-2cc2-3ac5-abee-337575e04b4f.roa
File:                     6d0cef60-2cc2-3ac5-abee-337575e04b4f.roa (raw, json)
Hash identifier:          hqyCRLiSFxe2YTNLlKu908ZQKlPgJUKtCklh14QPKUc=
Subject key identifier:   71:0E:AC:07:57:E4:42:CA:A9:8E:33:6D:BA:A9:35:8C:62:C8:01:4D
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584A9E96544CC42E6200481052C0
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/6d0cef60-2cc2-3ac5-abee-337575e04b4f.roa
Signing time:             Thu 24 Jul 2025 01:00:50 +0000
ROA not before:           Thu 24 Jul 2025 01:00:50 +0000
ROA not after:            Wed 22 Oct 2025 01:00:50 +0000
asID:                     33363
IP address blocks:        2603:903e::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9e:96:54:4c:c4:2e:62:00:48:10:52:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Jul 24 01:00:50 2025 GMT
            Not After : Oct 22 01:00:50 2025 GMT
        Subject: CN=694cfa38-d610-40eb-a6d8-6cbba6c5f315
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:13:d3:04:61:52:f0:03:39:e7:8e:74:26:35:
                    47:63:5c:61:4e:13:af:ee:0b:15:1c:02:79:82:db:
                    8c:92:16:98:8c:05:75:66:ae:5d:91:22:0c:ce:14:
                    f1:d1:2c:f2:6c:07:9d:12:ee:8d:9d:19:66:a3:de:
                    b9:8d:ee:01:a8:14:36:09:92:0f:3a:77:7c:78:03:
                    78:ca:0f:68:76:52:0c:54:0b:2e:32:39:67:3a:4a:
                    f7:2a:5d:5c:3b:27:ab:aa:44:fc:d5:a6:b3:19:be:
                    77:fe:3d:4d:56:ff:8d:d8:87:ba:9d:58:84:79:65:
                    47:eb:a7:53:44:bb:79:db:51:52:18:46:e1:10:d6:
                    4a:47:af:eb:38:96:2c:83:5e:4a:47:ee:09:9c:81:
                    ec:79:ea:57:24:89:85:6c:27:48:3a:47:ca:49:53:
                    25:79:8e:40:7b:d7:a5:2d:04:c8:ba:2a:ab:cc:05:
                    d7:fb:19:59:f3:95:a5:86:af:1d:9c:41:20:67:9f:
                    93:be:c6:3f:50:18:32:27:1c:23:5f:06:a8:6e:68:
                    53:54:5c:60:54:cd:0a:ec:63:4c:4d:d3:e7:41:db:
                    f0:f6:4c:9d:2a:91:e3:ee:ec:f2:fb:95:67:c9:3b:
                    5c:82:7d:e6:26:50:fc:cd:a4:b3:34:f2:38:e0:c3:
                    08:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:0E:AC:07:57:E4:42:CA:A9:8E:33:6D:BA:A9:35:8C:62:C8:01:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/6d0cef60-2cc2-3ac5-abee-337575e04b4f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:903e::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:ab:7a:34:b6:b2:b4:a7:b1:c4:f8:14:22:60:e6:4d:ce:5d:
         ed:0f:d6:eb:ed:75:94:24:b4:18:93:f2:31:05:71:31:b2:5d:
         94:82:96:0f:ab:16:78:ae:1a:2c:cc:32:4f:60:c2:e4:66:54:
         c0:61:a5:64:03:d1:73:9f:cc:1c:5f:2d:5e:d8:43:28:5e:84:
         27:83:26:89:57:da:cf:08:95:fb:72:38:92:dc:cc:8e:e2:f9:
         27:86:1c:3f:b5:8c:72:04:32:9e:e9:a4:c3:25:d2:51:0a:7d:
         b2:1c:05:19:f9:84:43:ac:ad:fa:54:1f:e3:5e:98:b9:18:4b:
         17:7e:3f:91:ba:17:51:bb:06:7a:22:1a:78:6c:df:6f:d7:0f:
         30:5d:5f:b9:fc:1c:2a:6a:cf:70:06:c5:42:0b:d5:76:41:af:
         44:89:b4:04:d2:60:23:04:11:7d:39:a0:2b:07:d2:ea:fe:9c:
         00:93:66:ca:f8:7f:bd:e3:6f:5a:e6:81:58:34:be:58:d7:f8:
         64:2b:d4:86:e0:b4:8e:a6:45:de:d2:1c:28:bf:f8:a4:32:e5:
         81:28:fc:87:49:2f:e8:9b:dd:5f:ca:23:54:63:21:e5:5e:d9:
         3a:bc:46:8a:34:ec:24:f3:11:42:0f:d4:1b:fe:48:f6:dc:69:
         01:58:d5:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:29:45 2025 by rpki-client