Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/5aa628fb-c695-354c-b9b2-d19dd3190da8.roa
File:                     5aa628fb-c695-354c-b9b2-d19dd3190da8.roa (raw, json)
Hash identifier:          yG0aaY04QNkYVhclZwF18dWVhgcsNWh3DyUcoMwjQQE=
Subject key identifier:   34:8E:35:B2:2C:07:A1:8A:A0:EC:81:2B:B4:28:1E:71:91:58:AD:AC
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285849BF3F68FDFE1BEF8669EC0100
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/5aa628fb-c695-354c-b9b2-d19dd3190da8.roa
Signing time:             Mon 05 May 2025 01:00:49 +0000
ROA not before:           Mon 05 May 2025 01:00:49 +0000
ROA not after:            Sun 03 Aug 2025 01:00:49 +0000
asID:                     19115
IP address blocks:        2603:90fb::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bf:3f:68:fd:fe:1b:ef:86:69:ec:01:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: May  5 01:00:49 2025 GMT
            Not After : Aug  3 01:00:49 2025 GMT
        Subject: CN=34f47c1e-dae4-484d-a53a-9d433fabd4e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:ed:97:53:dc:c9:ca:ae:d2:5b:4f:b6:8d:ea:
                    77:2c:0f:fa:00:fc:b4:3f:e9:27:a3:c1:0d:2f:e3:
                    9f:4e:0a:2f:c3:f1:2d:57:e7:1e:30:70:d5:44:09:
                    81:cf:98:59:43:9c:8a:ca:41:a7:90:18:cb:eb:20:
                    bf:1b:d1:b4:c9:51:78:e5:84:e1:66:23:d5:c7:90:
                    fd:58:94:f0:82:3b:2f:aa:58:b3:b5:c7:df:7c:a1:
                    15:2b:fd:76:0d:01:01:98:7c:2e:fe:b3:cb:d7:e3:
                    a4:46:fc:a0:bd:58:28:3d:19:1f:b5:26:2a:95:53:
                    5e:47:17:c0:78:bf:0f:ec:6f:8f:83:65:20:d0:cb:
                    13:6d:9f:6f:42:d9:c2:fd:c5:13:c1:78:99:aa:b4:
                    72:b8:ed:a9:e9:a3:e5:3b:e7:02:84:c0:f8:08:65:
                    98:0d:d9:83:82:7c:69:2b:76:94:71:75:44:d3:83:
                    18:88:19:b8:8f:04:33:ae:54:bf:11:03:1e:00:2a:
                    69:f7:15:20:87:2a:11:6e:ac:1d:12:bb:dc:72:1f:
                    f2:3b:ef:ed:49:18:16:00:cd:84:38:5a:a3:69:48:
                    43:d5:07:ac:08:9d:88:2d:f6:da:f1:ae:b0:58:fe:
                    79:9d:d5:ef:3f:81:a0:1f:7a:5b:e1:a4:38:b1:8c:
                    5e:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:8E:35:B2:2C:07:A1:8A:A0:EC:81:2B:B4:28:1E:71:91:58:AD:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/5aa628fb-c695-354c-b9b2-d19dd3190da8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:90fb::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:68:d6:34:64:15:b6:4a:5d:fa:98:88:ee:cf:52:62:aa:cc:
         da:56:de:95:4c:dd:ae:4d:fa:e7:8c:fe:2e:d4:de:74:62:28:
         c6:84:56:98:a6:5e:57:3f:a7:4e:89:42:47:35:2c:7c:93:39:
         80:3f:d8:f4:80:b2:ce:22:00:9a:10:3e:0d:d5:04:2f:49:32:
         fa:d3:64:cf:ec:4f:6e:f6:d4:89:c5:d9:03:9d:ef:60:b4:6b:
         85:f3:64:a7:62:92:4d:af:2d:ac:f2:d3:6f:e7:44:c2:50:d8:
         db:d9:bf:2c:19:06:49:ee:c2:61:e4:21:24:43:6b:8d:2e:ee:
         c7:7b:a1:87:0b:75:bf:92:10:de:cc:cd:04:40:1b:77:26:09:
         27:b7:3e:70:76:92:40:a0:eb:ea:ba:3d:89:7a:90:ee:6b:47:
         8e:08:45:70:8b:1f:34:21:7b:3c:00:7c:34:d6:e9:6c:13:2c:
         45:85:14:71:d5:02:70:da:3a:8c:cb:92:2a:59:6d:54:56:c9:
         e0:8b:49:55:ea:cb:ae:22:39:41:18:87:da:ac:5c:e0:d6:58:
         b7:d0:a0:41:42:6e:ea:1d:64:24:7c:81:18:51:1f:c8:4a:a3:
         ee:09:8a:77:8f:c8:45:aa:e7:16:c2:59:c7:91:3b:68:d4:14:
         69:fb:53:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 17:43:28 2025 by rpki-client