Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/f7c42807-09cc-3aca-a6ff-11ca2dc03b9a.roa
File:                     f7c42807-09cc-3aca-a6ff-11ca2dc03b9a.roa (raw, json)
Hash identifier:          vhwToK6+HT1IX8qs69VifVJ2FVZk2TF+5ldyMGM/3Mw=
Subject key identifier:   5F:A7:D5:C8:71:22:ED:50:C2:D3:BC:11:6F:D7:11:C8:4D:F8:FD:E5
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584A5FC5E647E07433C21F3DB200
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/f7c42807-09cc-3aca-a6ff-11ca2dc03b9a.roa
Signing time:             Tue 01 Jul 2025 13:01:04 +0000
ROA not before:           Tue 01 Jul 2025 13:01:04 +0000
ROA not after:            Mon 29 Sep 2025 13:01:04 +0000
asID:                     20115
IP address blocks:        2603:9010::/30 maxlen: 30
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5f:c5:e6:47:e0:74:33:c2:1f:3d:b2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Jul  1 13:01:04 2025 GMT
            Not After : Sep 29 13:01:04 2025 GMT
        Subject: CN=b9993a1a-9d2b-424e-b1a2-031c5b65002d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:0f:c6:07:68:12:0b:63:5d:90:dc:e8:65:83:
                    d0:1b:a0:31:0b:aa:96:84:4b:04:12:49:e6:db:5d:
                    31:c0:7e:d4:bf:5d:fa:7e:b3:27:71:99:75:62:9c:
                    3d:f1:31:f4:3a:ad:fb:63:78:93:b2:ff:b1:27:17:
                    02:6e:0f:c8:74:67:cd:5c:3f:b7:9b:2e:1b:36:1f:
                    cd:46:1f:a0:2c:77:cd:35:55:bc:a4:b2:93:05:e0:
                    49:0a:cb:c6:88:71:c1:b6:9e:ae:28:48:b7:d3:15:
                    6c:ba:4a:33:8f:85:1c:b3:4f:94:e7:e2:8a:f7:86:
                    00:76:17:77:99:a0:81:e3:90:37:66:c9:8d:f6:6d:
                    15:24:5a:33:47:c6:ae:94:1f:e2:07:a2:b2:f6:27:
                    6c:9c:66:8b:da:d0:a0:05:82:fb:71:34:c1:4d:84:
                    9f:3c:fa:0c:32:7e:cf:c8:59:f0:18:c4:dd:09:55:
                    cf:ed:84:fe:3d:1d:21:09:50:78:d5:40:96:f2:44:
                    d6:56:95:01:ad:0e:f7:eb:d9:3f:5c:b3:ef:a3:56:
                    a6:d1:38:58:38:61:9f:0a:25:ba:4b:a4:22:94:8a:
                    c1:3f:91:56:29:3b:ef:f5:6f:43:ef:fe:db:e6:52:
                    3e:e6:42:1f:90:42:47:be:3c:f1:b1:ec:26:ce:6d:
                    12:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:A7:D5:C8:71:22:ED:50:C2:D3:BC:11:6F:D7:11:C8:4D:F8:FD:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/f7c42807-09cc-3aca-a6ff-11ca2dc03b9a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:9010::/30

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:5a:f1:a1:f9:ae:d6:c8:da:bb:8c:85:8a:2a:21:68:42:b9:
         54:a1:30:02:4b:5e:6a:95:32:ea:36:05:33:4f:28:6c:c2:bb:
         b1:8b:96:0f:c1:e3:3c:c5:00:01:11:8b:e7:91:72:30:58:44:
         72:04:7d:2b:17:bf:69:6c:e5:4c:bb:23:42:a4:9e:c6:7b:56:
         22:b0:bd:c7:a0:90:69:27:5f:6f:9a:ad:d5:15:0d:cd:3b:97:
         9a:9f:b0:c6:69:8b:9f:a1:33:75:ec:d2:42:1a:7a:39:28:33:
         e7:94:f4:bb:50:e0:0c:b9:36:4d:b5:7a:37:0a:43:e8:0e:59:
         51:f3:ef:b0:57:7b:ec:94:73:68:e4:7f:38:93:ee:fe:d6:6c:
         95:ab:0f:f8:56:65:93:e4:9e:57:de:34:f1:ed:e6:2a:5a:a7:
         33:ec:cc:7c:7f:da:f3:98:0d:0c:aa:3f:77:b2:20:ba:c5:f5:
         6b:3a:a7:4b:96:60:27:61:c2:d6:7e:ec:3f:3c:f2:24:33:21:
         f2:6d:50:e0:60:f8:bc:b3:20:92:e7:49:ca:3b:d7:f8:3c:bb:
         c0:92:f1:70:e1:33:bb:cf:40:9d:35:58:8d:9a:2f:a5:21:5a:
         e8:ea:e2:82:f5:4c:80:1d:66:90:fb:13:e7:bd:4c:98:8f:eb:
         9b:fd:09:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 19:23:52 2025 by rpki-client