Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/65f1fbc5-3d39-33e3-9dc6-f85c5fc68864.roa
File:                     65f1fbc5-3d39-33e3-9dc6-f85c5fc68864.roa (raw, json)
Hash identifier:          3YH4Ww+DZxlEiopyOUfRqPFG7gQCRhrenDbUtSMcm68=
Subject key identifier:   D1:B1:CE:12:34:46:F3:43:AB:D6:1E:C7:9F:E4:18:45:96:F9:56:98
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285849C4D4BFB536496D70267A6960
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/65f1fbc5-3d39-33e3-9dc6-f85c5fc68864.roa
Signing time:             Wed 07 May 2025 01:00:46 +0000
ROA not before:           Wed 07 May 2025 01:00:46 +0000
ROA not after:            Tue 05 Aug 2025 01:00:46 +0000
asID:                     10796
IP address blocks:        2603:90b8::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c4:d4:bf:b5:36:49:6d:70:26:7a:69:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: May  7 01:00:46 2025 GMT
            Not After : Aug  5 01:00:46 2025 GMT
        Subject: CN=90b377f5-163b-4d21-be9d-ce1b2937413f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:59:09:66:ee:be:d7:cc:fe:ed:f5:fe:85:b0:
                    6b:af:5c:9d:46:00:cc:96:de:db:99:7e:96:6e:d6:
                    10:91:32:c7:e6:df:f8:6e:9e:27:7c:c3:b0:6a:d3:
                    b2:9f:c6:ed:66:fc:b3:0f:5c:72:bf:a8:98:e4:46:
                    fd:ef:04:37:46:88:d3:b2:13:63:8d:57:ac:d1:3b:
                    a1:16:5c:8d:08:3b:ae:a9:f5:5d:eb:00:a0:65:c0:
                    91:d6:8e:20:eb:4c:08:39:26:b5:15:c0:27:92:42:
                    68:b4:b1:55:6b:6d:77:9f:35:5c:99:b3:66:7b:62:
                    45:6f:a5:95:73:27:8d:1b:3a:ad:36:dc:b9:69:a5:
                    c7:70:9a:7b:dc:ab:f1:08:98:7a:9d:a6:68:fb:f2:
                    3a:22:c8:a0:05:4b:b4:77:cb:45:be:61:51:1b:09:
                    58:8e:d0:f9:78:49:1f:b6:eb:f6:39:84:e3:72:c5:
                    35:fc:02:6d:6e:fb:a4:ee:5f:2b:c5:d7:fe:42:a3:
                    3c:50:3b:cb:fd:68:c7:bf:9a:b4:ed:bf:bf:d5:08:
                    15:de:1f:c9:a7:ce:ae:6c:af:bb:1c:89:ce:75:d6:
                    09:c9:bb:02:7e:01:76:f2:87:cf:59:f1:b2:4c:fe:
                    41:63:79:bc:d5:e9:05:87:4e:0c:e5:82:38:d3:8b:
                    4b:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:B1:CE:12:34:46:F3:43:AB:D6:1E:C7:9F:E4:18:45:96:F9:56:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/65f1fbc5-3d39-33e3-9dc6-f85c5fc68864.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:90b8::/33

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:33:d6:26:19:35:cd:98:7f:33:bb:ae:f5:61:67:28:ba:93:
         c0:b6:f4:c5:e9:6e:12:d8:7b:18:4c:88:ab:00:25:4a:79:3c:
         36:b6:ba:4b:9b:9a:48:26:a1:51:ec:b0:6d:cb:65:6c:0b:db:
         b5:0b:7d:5e:40:6f:dc:3f:84:6d:d9:e0:07:be:55:da:96:05:
         7f:37:e2:be:40:9a:59:53:27:ce:2c:d0:f2:0f:a4:df:aa:8c:
         40:e0:58:29:ba:4a:1c:f3:12:0a:bd:66:d4:11:1b:f1:cf:65:
         d5:7e:a8:38:d5:f3:30:75:d8:50:52:40:16:5b:de:e3:54:05:
         09:4a:3e:2c:ed:57:2c:f1:f5:64:69:ca:02:6b:9e:ac:b4:a0:
         c2:65:88:5d:23:96:ba:f0:4d:04:d2:21:da:f7:31:72:48:9b:
         39:e2:7b:ad:66:f8:57:b4:e9:15:9c:1a:9f:00:8c:37:ac:5c:
         ee:ef:8d:8c:31:96:52:19:37:8f:df:da:cc:72:ea:90:9a:0c:
         9e:f8:f6:fa:95:05:a5:0c:f1:d9:2f:3b:cb:c4:c0:3d:49:fc:
         23:9c:75:b1:fd:2c:4c:db:a5:62:7c:94:f8:16:a4:05:a2:00:
         ce:95:dd:e4:c5:67:8c:84:c9:00:8f:e7:80:23:32:17:33:0b:
         a1:ed:e7:25
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEnE1L+1NkltcCZ6aWAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli
NjAzMB4XDTI1MDUwNzAxMDA0NloXDTI1MDgwNTAxMDA0NlowLzEtMCsGA1UEAxMk
OTBiMzc3ZjUtMTYzYi00ZDIxLWJlOWQtY2UxYjI5Mzc0MTNmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhVkJZu6+18z+7fX+hbBrr1ydRgDMlt7bmX6W
btYQkTLH5t/4bp4nfMOwatOyn8btZvyzD1xyv6iY5Eb97wQ3RojTshNjjVes0Tuh
FlyNCDuuqfVd6wCgZcCR1o4g60wIOSa1FcAnkkJotLFVa213nzVcmbNme2JFb6WV
cyeNGzqtNty5aaXHcJp73KvxCJh6naZo+/I6IsigBUu0d8tFvmFRGwlYjtD5eEkf
tuv2OYTjcsU1/AJtbvuk7l8rxdf+QqM8UDvL/WjHv5q07b+/1QgV3h/Jp86ubK+7
HInOddYJybsCfgF28ofPWfGyTP5BY3m81ekFh04M5YI404tLbQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFNGxzhI0RvNDq9Yex5/kGEWW+VaYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1
ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvNjVmMWZiYzUtM2QzOS0z
M2UzLTlkYzYtZjg1YzVmYzY4ODY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3
NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5
YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0
MWYxOWI2MDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYHJgOQuAAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAdDPWJhk1zZh/M7uu9WFnKLqTwLb0xeluEth7GEyIqwAlSnk8Nra6
S5uaSCahUeywbctlbAvbtQt9XkBv3D+EbdngB75V2pYFfzfivkCaWVMnzizQ8g+k
36qMQOBYKbpKHPMSCr1m1BEb8c9l1X6oONXzMHXYUFJAFlve41QFCUo+LO1XLPH1
ZGnKAmuerLSgwmWIXSOWuvBNBNIh2vcxckibOeJ7rWb4V7TpFZwanwCMN6xc7u+N
jDGWUhk3j9/azHLqkJoMnvj2+pUFpQzx2S87y8TAPUn8I5x1sf0sTNulYnyU+Bak
BaIAzpXd5MVnjITJAI/ngCMyFzMLoe3nJQ==
-----END CERTIFICATE-----
Generated at Fri Jun 6 04:58:57 2025 by rpki-client