Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/a203ece2-a38b-3aa1-87e1-57b6e6154b92.roa
File:                     a203ece2-a38b-3aa1-87e1-57b6e6154b92.roa (raw, json)
Hash identifier:          ISfFGBi5kvTK/NJLyzbAjE7hKKXgeGguZaC+220KMmE=
Subject key identifier:   1E:FE:49:32:A5:F2:53:DF:17:AC:60:99:9D:CA:13:88:7E:A4:92:DC
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584E1E447A0E4CEC41C14623CB00
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/a203ece2-a38b-3aa1-87e1-57b6e6154b92.roa
Signing time:             Tue 09 Jun 2026 21:00:12 +0000
ROA not before:           Tue 09 Jun 2026 21:00:12 +0000
ROA not after:            Mon 07 Sep 2026 21:00:12 +0000
asID:                     19115
IP address blocks:        2603:90fb:20::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1e:44:7a:0e:4c:ec:41:c1:46:23:cb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Jun  9 21:00:12 2026 GMT
            Not After : Sep  7 21:00:12 2026 GMT
        Subject: CN=a09e820b-fc0d-4a05-a0b9-95ddd4058137
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:6e:05:73:7c:01:79:e3:c4:52:ef:e3:56:eb:
                    32:eb:8a:47:31:91:a2:33:89:de:db:52:fb:e7:f7:
                    ef:b6:70:04:1e:d5:a8:8a:c2:a8:e8:1d:41:3b:a4:
                    5f:b3:49:fa:c7:69:b6:a6:59:45:f7:2a:16:00:d0:
                    3e:ed:fb:68:71:aa:8e:5f:16:5a:a2:36:9f:ac:e9:
                    41:14:20:ad:cf:2d:42:ad:a9:5e:24:58:6f:60:be:
                    0a:8b:f2:20:3c:27:28:63:5f:8c:a7:3f:fa:10:a6:
                    a7:47:de:b5:d3:db:2c:dc:0f:bf:13:bd:5f:8d:70:
                    23:61:9d:67:66:e0:64:e0:7f:16:60:ff:52:6a:03:
                    24:6e:90:ce:bd:20:4e:0e:dc:f3:51:0f:55:f9:8d:
                    e6:a5:5a:a3:35:b5:c5:03:ff:44:6d:4d:e7:48:9a:
                    a9:5a:1e:f3:d7:14:ad:18:c2:78:35:04:8f:2d:00:
                    d6:6f:72:cf:77:24:18:06:53:62:6a:ac:b0:21:a1:
                    2f:60:6d:62:d2:fa:ef:17:77:b5:78:6e:97:c3:6d:
                    08:9f:fc:3b:f6:fe:22:ce:c2:50:a1:2b:2f:97:0f:
                    45:77:d9:03:54:96:13:f3:26:f7:2d:04:52:fa:95:
                    8a:1c:08:88:f4:a7:14:78:70:43:84:81:74:e5:b3:
                    6d:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:FE:49:32:A5:F2:53:DF:17:AC:60:99:9D:CA:13:88:7E:A4:92:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/a203ece2-a38b-3aa1-87e1-57b6e6154b92.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:90fb:20::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:37:b0:d3:3f:42:a6:a1:60:49:29:30:f6:d7:bc:80:f9:8c:
         9b:a4:46:a1:89:d5:fe:f3:98:59:13:05:b6:dc:e8:0b:78:2c:
         d0:4f:b4:25:b0:c2:3f:0e:2d:96:7e:87:21:d6:0b:d8:a8:bb:
         b1:af:92:6a:9d:b5:ad:02:c6:30:af:0b:4d:ba:fe:61:50:c9:
         79:42:82:2b:73:05:9d:9b:37:b1:23:76:7c:8f:c0:38:05:d8:
         7e:53:97:5a:0a:57:13:69:ad:26:81:88:40:70:30:b2:c8:e5:
         da:da:0f:ef:9e:50:05:ca:43:af:59:5e:1f:60:f2:2f:36:65:
         a4:99:73:c0:07:d8:a8:67:c6:08:4e:22:f5:27:51:89:a0:a7:
         2b:c9:eb:32:91:cf:56:a5:79:62:4d:a0:b3:d4:93:4a:b8:ec:
         df:67:ab:6f:ed:e7:a5:9a:d4:83:3e:5e:9a:8e:20:11:7d:d4:
         f3:45:60:8d:10:6f:03:df:f9:89:5c:86:2c:fb:b7:8f:23:86:
         ff:3e:3b:0c:51:65:b1:63:04:15:e1:d9:f5:7d:87:3c:8d:ed:
         45:96:50:eb:38:92:56:5d:f9:c1:75:f1:2a:1a:97:56:ca:1a:
         69:5a:c9:9e:18:ca:ed:f8:89:4c:cf:64:55:d7:24:63:3e:ab:
         34:e8:34:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:56:38 2026 by rpki-client