Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/dcf36e12-1777-3d8c-a792-b3f2eea62ea6.roa
File:                     dcf36e12-1777-3d8c-a792-b3f2eea62ea6.roa (raw, json)
Hash identifier:          nMCecYo887gM+usSTzWjjIc3WvrKvYS1tjAqwbLymYM=
Subject key identifier:   5E:6C:5D:6C:E4:7E:7B:34:E2:B4:B0:16:BE:DD:C6:E6:48:F1:C8:93
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584A9E9661DE8A061D63799FC9C0
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/dcf36e12-1777-3d8c-a792-b3f2eea62ea6.roa
Signing time:             Thu 24 Jul 2025 01:00:50 +0000
ROA not before:           Thu 24 Jul 2025 01:00:50 +0000
ROA not after:            Wed 22 Oct 2025 01:00:50 +0000
asID:                     33363
IP address blocks:        2603:903e:a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9e:96:61:de:8a:06:1d:63:79:9f:c9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Jul 24 01:00:50 2025 GMT
            Not After : Oct 22 01:00:50 2025 GMT
        Subject: CN=4802d6ac-ab89-45cc-9155-10b3c4c2ce72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:7f:54:b8:cb:bf:a7:b0:92:e5:44:bb:ca:5e:
                    b0:70:7b:56:5a:81:59:f0:d8:94:86:6a:ec:e6:91:
                    aa:a2:e2:58:d5:28:04:31:90:ee:40:d6:2c:d9:66:
                    21:1c:1e:3e:96:03:f6:6b:a9:ba:6f:c5:25:18:38:
                    19:1a:4b:e4:de:f8:ac:d8:a9:5b:91:f2:38:bd:c6:
                    83:6c:bc:b1:89:a0:c7:b8:bc:0f:75:ef:68:82:66:
                    4f:38:3f:ee:a6:7c:41:5d:de:1b:d3:c2:dd:12:d4:
                    da:f6:21:99:00:04:93:a8:7d:d9:ce:19:dd:d3:c7:
                    a6:20:8d:c8:2f:b8:90:a6:6a:6d:2f:58:b0:bb:50:
                    89:ee:26:d3:42:74:67:14:34:eb:24:6a:2d:20:d7:
                    9b:8d:5d:f3:20:24:8e:b8:95:2e:ac:67:f1:80:9f:
                    42:82:1b:18:0d:03:49:23:51:c2:42:ec:dc:97:4d:
                    91:dd:07:06:c4:c9:2c:a9:86:eb:d7:76:46:a2:70:
                    e1:51:67:1b:c1:0b:5d:e9:d7:4c:a2:20:b0:44:3a:
                    42:e0:77:bf:7b:58:d0:1d:20:50:ce:40:de:92:35:
                    a6:c9:26:3c:df:75:55:97:8c:c9:0d:f7:26:5b:ae:
                    04:34:9c:5f:f0:7c:1a:01:10:d6:98:63:a7:e5:49:
                    8b:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:6C:5D:6C:E4:7E:7B:34:E2:B4:B0:16:BE:DD:C6:E6:48:F1:C8:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/dcf36e12-1777-3d8c-a792-b3f2eea62ea6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:903e:a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:ba:82:0a:83:a2:00:9a:4f:5a:fd:64:65:7c:d9:e7:da:0c:
         86:21:83:6c:10:96:d1:6c:f8:a9:b1:ed:0e:01:ba:c0:16:b3:
         8e:67:50:31:f6:fd:df:ed:50:1c:f3:d4:be:51:21:0a:33:f3:
         ec:47:15:bd:a5:35:7b:d1:b5:10:fb:b4:a1:26:ab:0e:ac:3d:
         6f:fc:1f:de:20:52:13:1e:44:67:79:dd:eb:17:0d:c3:6f:d0:
         84:fc:e1:f1:4c:64:11:8a:9c:d7:b3:d9:41:02:ad:59:db:2c:
         1b:16:a9:5e:b9:49:6a:26:dc:14:35:71:93:26:1f:c7:44:02:
         81:9c:28:6a:07:ea:61:46:b5:03:05:0f:69:4a:11:69:13:10:
         5f:e5:75:e2:54:9a:bb:86:81:4b:18:90:2d:12:e1:71:9e:16:
         91:7c:62:f5:bc:a9:4d:d3:d7:34:74:dd:4f:f7:54:e8:55:6f:
         84:05:75:5d:ba:a7:76:73:8f:4b:a7:75:8e:ce:6b:22:a6:75:
         9b:90:0f:13:03:9a:cf:0a:32:bc:6a:4e:1c:c3:95:5c:71:ba:
         2d:ad:8b:3e:71:16:51:84:aa:4f:60:85:2c:d0:34:53:70:3d:
         03:91:64:77:1b:a8:fa:59:15:df:c4:87:21:d1:e0:b4:9c:93:
         dc:b6:57:26
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqelmHeigYdY3mfycAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli
NjAzMB4XDTI1MDcyNDAxMDA1MFoXDTI1MTAyMjAxMDA1MFowLzEtMCsGA1UEAxMk
NDgwMmQ2YWMtYWI4OS00NWNjLTkxNTUtMTBiM2M0YzJjZTcyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6H9UuMu/p7CS5US7yl6wcHtWWoFZ8NiUhmrs
5pGqouJY1SgEMZDuQNYs2WYhHB4+lgP2a6m6b8UlGDgZGkvk3vis2KlbkfI4vcaD
bLyxiaDHuLwPde9ogmZPOD/upnxBXd4b08LdEtTa9iGZAASTqH3Zzhnd08emII3I
L7iQpmptL1iwu1CJ7ibTQnRnFDTrJGotINebjV3zICSOuJUurGfxgJ9CghsYDQNJ
I1HCQuzcl02R3QcGxMksqYbr13ZGonDhUWcbwQtd6ddMoiCwRDpC4He/e1jQHSBQ
zkDekjWmySY833VVl4zJDfcmW64ENJxf8HwaARDWmGOn5UmL1QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFF5sXWzkfns04rSwFr7dxuZI8ciTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1
ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvZGNmMzZlMTItMTc3Ny0z
ZDhjLWE3OTItYjNmMmVlYTYyZWE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3
NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5
YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0
MWYxOWI2MDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgOQPgAK
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHC6ggqDogCaT1r9ZGV82efaDIYhg2wQltFs+Kmx7Q4BusAWs45n
UDH2/d/tUBzz1L5RIQoz8+xHFb2lNXvRtRD7tKEmqw6sPW/8H94gUhMeRGd53esX
DcNv0IT84fFMZBGKnNez2UECrVnbLBsWqV65SWom3BQ1cZMmH8dEAoGcKGoH6mFG
tQMFD2lKEWkTEF/ldeJUmruGgUsYkC0S4XGeFpF8YvW8qU3T1zR03U/3VOhVb4QF
dV26p3Zzj0undY7OayKmdZuQDxMDms8KMrxqThzDlVxxui2tiz5xFlGEqk9ghSzQ
NFNwPQORZHcbqPpZFd/EhyHR4LSck9y2VyY=
-----END CERTIFICATE-----
Generated at Thu Jul 24 04:52:12 2025 by rpki-client