Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/fa4c3e28-5183-3845-9c3b-63a1728ebd11.roa
File:                     fa4c3e28-5183-3845-9c3b-63a1728ebd11.roa (raw, json)
Hash identifier:          W8tAhNoclPqnKzf+c1daxSBJLunFMUi5yzj3/EAjGb0=
Subject key identifier:   F5:84:A8:D3:D9:B1:5C:9C:51:51:92:E0:7D:D0:A4:25:92:86:9E:3C
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584A9E9621DD03801403BDD01380
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/fa4c3e28-5183-3845-9c3b-63a1728ebd11.roa
Signing time:             Thu 24 Jul 2025 01:00:50 +0000
ROA not before:           Thu 24 Jul 2025 01:00:50 +0000
ROA not after:            Wed 22 Oct 2025 01:00:50 +0000
asID:                     11427
IP address blocks:        2603:90f5:5::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9e:96:21:dd:03:80:14:03:bd:d0:13:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Jul 24 01:00:50 2025 GMT
            Not After : Oct 22 01:00:50 2025 GMT
        Subject: CN=1f1b6c5e-d990-4e27-9539-88fd13167541
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:5d:df:97:14:92:cf:91:8d:73:92:a3:cc:69:
                    e9:94:b2:0f:ca:c3:41:ea:b7:d2:1d:cd:56:21:7e:
                    e8:c9:57:44:00:dc:66:48:c7:c9:26:b5:17:8a:5c:
                    c1:35:47:ec:b0:5b:6d:73:1b:ec:43:fc:ad:81:fa:
                    d9:1b:c4:02:61:61:2d:45:36:e7:17:e7:2d:5b:f1:
                    49:39:39:02:81:70:bc:6c:0f:60:f3:0d:7b:3e:c8:
                    05:31:6f:5b:9a:0d:15:27:97:81:18:33:a8:61:d0:
                    02:e8:f6:55:5f:c7:7e:68:33:bd:dc:5b:0c:6f:8a:
                    ae:1c:ee:33:a8:e4:4b:a6:87:ae:f3:86:b9:1b:c4:
                    e1:4e:3d:99:1a:35:59:6f:95:c0:f5:02:c6:db:b4:
                    1d:3c:68:bb:d8:61:cc:f2:1e:d3:e2:ec:28:63:21:
                    0b:3a:02:f6:ba:e5:1d:16:0d:e8:97:ce:b3:6d:60:
                    75:de:bb:92:03:53:4a:7f:99:f5:d4:75:88:67:88:
                    a4:df:40:ed:25:e9:52:99:70:77:eb:9d:c6:7d:3c:
                    57:60:2c:55:0f:ce:02:fd:67:d5:80:bf:5e:16:7f:
                    c3:93:8e:be:a1:51:db:87:db:95:d4:26:9e:77:5b:
                    3a:c2:d5:1d:d4:fa:d9:1c:04:32:b0:d1:a6:50:d2:
                    ab:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:84:A8:D3:D9:B1:5C:9C:51:51:92:E0:7D:D0:A4:25:92:86:9E:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/fa4c3e28-5183-3845-9c3b-63a1728ebd11.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:90f5:5::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:6d:9a:43:93:15:59:cf:d0:a6:29:94:b0:77:7d:30:75:9a:
         66:0f:03:90:3d:79:a3:70:06:3a:41:ea:de:b1:05:f6:6c:27:
         58:95:c8:ea:76:57:7f:b7:62:3b:e7:c8:3b:aa:28:bb:1b:06:
         a6:b5:ca:6d:3c:d7:c8:12:03:df:86:99:a2:66:07:04:db:54:
         8a:3d:35:55:18:e5:e9:81:d4:9f:cf:11:46:a1:70:28:cb:6a:
         da:44:e8:b3:ae:b1:09:d6:f3:7f:ef:79:59:78:70:3d:05:3c:
         00:08:da:6b:7a:af:4a:7d:fa:a2:54:9f:42:39:dd:b8:4a:fe:
         47:5c:61:c7:59:63:13:5b:08:83:4d:2f:af:20:a1:bc:ed:6b:
         b6:b0:2c:d3:c1:5b:68:2b:52:9f:ab:f2:8b:a8:ba:cd:34:b7:
         44:b2:59:1f:67:2b:5b:ad:1a:75:34:ec:ac:f7:00:6b:69:3d:
         2d:3c:01:9c:a0:e4:bf:79:d1:7b:df:3c:09:bd:e2:b2:54:63:
         f2:6b:9c:73:65:4d:73:1e:57:b8:e8:00:bc:90:92:07:61:b0:
         c3:90:85:d7:01:10:e4:fc:98:18:79:f6:a0:e5:b9:cc:14:a1:
         c7:06:2f:7c:4c:b6:04:2a:e2:cf:37:33:80:36:28:ef:75:dc:
         5a:50:65:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:06:54 2025 by rpki-client