Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/575f7868-ae09-35a1-a8f1-2c6c364df2e9.roa
File:                     575f7868-ae09-35a1-a8f1-2c6c364df2e9.roa (raw, json)
Hash identifier:          zRwNajEMtMTM4sRN6Mc5jF9u5ht73i+BarIuyTlfiyQ=
Subject key identifier:   90:34:4A:34:77:C4:E9:70:FC:72:7F:E5:82:4B:C5:EA:84:4A:CA:33
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584AC2E0FE1DC77D44DD1AEFCB80
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/575f7868-ae09-35a1-a8f1-2c6c364df2e9.roa
Signing time:             Wed 06 Aug 2025 01:00:33 +0000
ROA not before:           Wed 06 Aug 2025 01:00:33 +0000
ROA not after:            Tue 04 Nov 2025 02:00:33 +0000
asID:                     19116
IP address blocks:        2603:90fc:10::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c2:e0:fe:1d:c7:7d:44:dd:1a:ef:cb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Aug  6 01:00:33 2025 GMT
            Not After : Nov  4 02:00:33 2025 GMT
        Subject: CN=c36f5824-a60f-4988-8673-b5d121694bed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:db:29:29:20:15:cd:c8:f7:98:c0:85:01:72:
                    eb:eb:0f:08:e8:d6:cb:66:7c:0c:a1:f6:e6:37:63:
                    e6:86:32:22:a5:57:2a:b0:5c:d8:54:30:0f:3c:aa:
                    aa:97:cd:4f:88:f2:8d:ab:f5:cb:97:07:76:58:a2:
                    47:72:39:14:d0:dc:38:86:c4:38:46:f0:10:30:09:
                    ca:9f:16:db:4f:df:4e:cf:c8:7b:b8:82:39:c3:a6:
                    8a:c5:1c:84:ed:61:1e:59:15:fb:7f:05:c6:5f:3b:
                    b0:56:d2:eb:60:ca:1a:ce:28:71:6b:2d:ba:0e:2b:
                    92:22:7c:78:0c:0f:11:3a:c9:f7:89:14:5b:a6:01:
                    d9:dd:e1:06:47:de:9b:6f:f3:9c:3e:c0:9d:5a:ec:
                    da:b5:d5:b3:2f:3a:29:c0:d6:00:a0:25:fa:7f:12:
                    0a:7a:80:88:22:9d:be:fd:46:e3:21:a0:38:54:3a:
                    01:b2:3d:ac:b8:c5:67:d4:da:e6:83:af:75:ba:d2:
                    64:3b:58:34:6a:7a:90:12:04:d9:fe:37:e3:5e:64:
                    e9:fd:51:69:11:a5:a3:e3:12:d7:b0:03:73:b4:9e:
                    2b:55:12:e4:a7:e4:63:b4:91:96:47:85:b2:5f:a8:
                    a8:32:a9:1a:ce:1d:12:52:8e:a3:99:71:3c:1b:38:
                    a5:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:34:4A:34:77:C4:E9:70:FC:72:7F:E5:82:4B:C5:EA:84:4A:CA:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/575f7868-ae09-35a1-a8f1-2c6c364df2e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:90fc:10::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:51:f8:3d:08:63:ab:5a:4c:06:8c:05:05:c0:97:76:50:fd:
         e9:6b:3f:50:c3:4a:f3:96:2e:0b:bf:6d:49:ed:f6:c9:e5:ee:
         1d:79:4a:de:56:75:91:8a:00:78:12:b4:5c:98:fb:c0:f2:86:
         e0:12:ae:1e:e8:50:49:19:3e:ad:e0:77:51:98:6f:f4:03:29:
         ff:d4:0d:6f:a1:f0:e5:2c:58:b8:2f:a4:b4:2f:b7:c6:87:d9:
         4d:e5:95:be:34:04:fe:de:62:ea:69:b8:50:92:90:cf:0a:63:
         40:12:b8:e1:fe:b9:80:4c:d4:64:16:63:ab:24:23:59:0a:ce:
         3e:40:ca:7b:cc:f4:f4:ad:ec:7b:df:f8:54:d0:d0:e2:06:a5:
         9c:b1:f9:ac:b8:46:aa:fd:17:b4:19:12:49:b7:b6:00:aa:e4:
         37:68:00:b3:eb:87:d2:a2:2f:32:95:88:92:72:ba:9f:f3:2f:
         14:6a:35:b1:be:1d:74:d1:dc:af:02:a6:53:90:97:93:1e:58:
         60:1d:fe:86:93:09:33:66:09:ab:fc:c7:9e:5e:bd:98:e4:3a:
         5b:c4:94:43:d1:19:9f:2d:50:2a:2e:5b:ed:07:e0:6e:64:ad:
         89:79:2a:97:28:cf:a4:a8:06:43:f9:05:53:3f:2f:1f:da:2f:
         0b:27:ee:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 02:22:38 2025 by rpki-client