Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d9f5bc99-bdca-3ef8-b680-45017ffe62a4.roa
File:                     d9f5bc99-bdca-3ef8-b680-45017ffe62a4.roa (raw, json)
Hash identifier:          RYCDgLOSSho8tAEXsKYGbDSU2Drw9lh5660bqgJsfd0=
Subject key identifier:   BF:32:2F:92:8F:CF:25:A7:98:53:C8:E5:6E:54:23:8C:A7:86:BF:AB
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584A9E964801508FB57A7F0AA300
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d9f5bc99-bdca-3ef8-b680-45017ffe62a4.roa
Signing time:             Thu 24 Jul 2025 01:00:50 +0000
ROA not before:           Thu 24 Jul 2025 01:00:50 +0000
ROA not after:            Wed 22 Oct 2025 01:00:50 +0000
asID:                     11955
IP address blocks:        2603:90bd::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9e:96:48:01:50:8f:b5:7a:7f:0a:a3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Jul 24 01:00:50 2025 GMT
            Not After : Oct 22 01:00:50 2025 GMT
        Subject: CN=884e0edd-7f99-4269-886d-3ed4875a870f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:42:cc:43:89:b9:3e:b7:c6:00:63:1c:e1:ca:
                    ee:14:fb:a3:92:e0:dc:5c:0c:7b:2c:cb:b0:93:31:
                    09:c2:32:6b:38:42:41:15:16:bc:e7:2a:c2:a4:f0:
                    1e:c4:bb:13:52:4d:4c:0f:98:65:f3:be:2c:30:0e:
                    0b:87:09:c2:a7:72:07:e2:82:8d:cc:fc:c8:03:b1:
                    4d:68:16:a1:3d:30:72:08:dc:01:1d:38:b3:5a:16:
                    ed:5e:e2:ff:54:b9:47:9d:ce:65:c4:98:7c:5f:46:
                    2e:b1:ff:1d:16:0e:4e:f5:a0:df:8f:f0:8e:38:28:
                    cb:de:45:de:82:31:5f:a4:80:64:d8:6c:09:01:19:
                    a9:9f:75:00:d4:d2:80:65:3c:da:de:22:e0:8c:80:
                    37:c6:2b:e5:ad:e1:7c:6c:63:17:86:31:df:7d:0c:
                    d3:ed:8d:59:15:d4:5a:a4:3e:c9:8f:02:e5:a6:42:
                    10:5e:fd:ac:da:32:78:c6:11:7f:01:59:24:fe:82:
                    d8:1d:9f:f1:7a:d1:63:2a:a4:86:59:04:a4:e2:5b:
                    0b:bc:4f:48:74:e0:75:5b:96:9f:31:22:90:a3:3f:
                    ac:9f:d5:ab:aa:ae:01:89:33:8c:86:e1:c0:9e:1b:
                    a6:cb:55:b7:d1:ab:07:b0:ee:78:d3:fb:b1:29:98:
                    59:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:32:2F:92:8F:CF:25:A7:98:53:C8:E5:6E:54:23:8C:A7:86:BF:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d9f5bc99-bdca-3ef8-b680-45017ffe62a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:90bd::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:8e:0f:95:79:60:ba:d0:62:26:4a:16:a9:41:50:78:e1:2a:
         35:12:fe:50:16:83:80:11:fb:11:b4:81:8f:c6:e9:2a:fc:80:
         16:68:ac:f6:57:96:bf:23:99:cf:4f:ec:48:2f:e7:55:1d:ff:
         88:94:13:2e:38:33:7a:d9:77:0e:eb:f4:f1:fd:d6:8c:e7:57:
         cb:26:8e:c6:19:f2:39:04:64:ee:ee:97:a8:43:dd:fc:0a:b8:
         88:9d:c6:eb:aa:da:b3:b3:9f:90:07:56:a7:1d:e9:c9:01:26:
         25:2a:6e:7d:61:84:71:c2:ed:60:88:03:88:f9:04:50:7f:2f:
         b6:c1:39:0d:a8:43:40:46:8b:c7:d2:9e:86:7c:27:ef:86:c1:
         0e:48:52:25:cb:f2:74:13:fd:a4:31:4c:f5:fe:2d:84:93:15:
         96:6f:e4:95:e4:b0:e9:d2:be:33:f5:db:36:f6:5e:8c:bd:f4:
         56:36:42:b1:99:2e:3e:19:3d:33:13:47:b3:2b:af:e6:fe:e1:
         d5:b8:1b:fd:61:f7:19:02:6f:1e:e3:9d:b1:ef:39:d2:36:0b:
         9f:34:1e:bf:2d:c0:f4:2d:04:bd:4f:66:0e:12:b2:38:c0:6f:
         f5:b5:4c:76:d6:a0:a7:0e:e5:49:6a:41:1b:34:22:83:0a:4c:
         89:90:27:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:31:39 2025 by rpki-client