Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/22a90e0c-1dbf-3666-9a02-86fb5f83cabe.roa
File:                     22a90e0c-1dbf-3666-9a02-86fb5f83cabe.roa (raw, json)
Hash identifier:          lXkj3lnuqTNaidt9/CgeuCVnUIfFmLEkWWpHqpBKUKM=
Subject key identifier:   02:65:58:DE:D5:3E:8D:22:8C:88:D3:67:02:7F:A1:24:08:D1:EC:10
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F43285849CE9A5D7C5FAF9D054C4C3800
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/22a90e0c-1dbf-3666-9a02-86fb5f83cabe.roa
Signing time:             Sat 10 May 2025 13:01:00 +0000
ROA not before:           Sat 10 May 2025 13:01:00 +0000
ROA not after:            Fri 08 Aug 2025 13:01:00 +0000
asID:                     30103
IP address blocks:        2620:123:2087::/48 maxlen: 48
                          2620:123:2088::/48 maxlen: 48
                          2620:123:2089::/48 maxlen: 48
                          2620:123:208a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ce:9a:5d:7c:5f:af:9d:05:4c:4c:38:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: May 10 13:01:00 2025 GMT
            Not After : Aug  8 13:01:00 2025 GMT
        Subject: CN=bcde6609-7aa5-4a00-9f59-5d4513764a3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:c9:22:7b:7c:d2:ec:35:4a:17:ce:3e:96:08:
                    bf:0a:6b:52:45:c0:16:bd:31:f8:20:a2:e4:bc:78:
                    65:19:8a:73:bf:6d:88:f6:d6:90:5f:d8:91:d5:fe:
                    3a:31:6a:14:c2:37:08:22:32:36:ba:eb:79:da:5f:
                    5c:d1:df:77:3a:bc:e4:92:e9:86:4d:2c:23:f9:0a:
                    bf:9e:8b:25:ad:33:75:16:91:41:7f:8b:ad:85:20:
                    41:54:9d:25:38:0f:7d:ed:b1:16:22:bb:28:21:c8:
                    f4:e9:14:b9:0a:3f:12:a1:89:f5:80:1e:66:ce:f8:
                    28:23:24:d0:f0:9c:b4:7f:bd:77:f9:13:87:a9:47:
                    59:8c:18:82:a7:de:f5:40:1c:6c:21:2e:78:b8:55:
                    68:54:a9:83:a4:ca:cc:e9:a8:48:35:45:ae:58:33:
                    57:3b:69:4d:4e:ae:ad:18:e8:8a:23:c2:e6:22:6e:
                    ce:69:97:4f:35:c5:c1:8a:c0:b1:69:72:a5:98:3b:
                    95:9f:2e:0f:45:17:97:8a:89:cd:97:d1:6e:cc:c7:
                    c1:2d:f5:3a:8d:7c:fe:73:85:17:18:71:ed:4f:45:
                    76:eb:3a:84:68:67:20:fe:97:b7:93:80:ec:23:a9:
                    f8:6c:cf:a6:5b:6c:a7:05:22:a0:85:e0:7a:52:0f:
                    95:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:65:58:DE:D5:3E:8D:22:8C:88:D3:67:02:7F:A1:24:08:D1:EC:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/22a90e0c-1dbf-3666-9a02-86fb5f83cabe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:123:2087::-2620:123:208a:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:8b:a1:14:4c:bf:0f:89:5a:f5:32:af:51:b8:ca:65:b0:c8:
         9b:71:5b:04:42:2f:a5:39:2e:9c:3b:a3:d6:7c:bd:c1:9e:39:
         9d:35:dd:5f:4f:25:e5:11:fc:ce:f0:3f:4e:29:df:04:7e:b0:
         7b:54:a3:ec:95:f8:7c:37:e4:40:7a:e7:f9:3a:ca:27:c9:28:
         74:84:0c:79:d1:47:56:27:cd:36:72:04:be:36:1c:64:82:a9:
         db:70:70:33:f8:b0:96:4b:17:a7:43:7b:b3:e1:0c:5f:a4:39:
         63:44:bb:c3:5f:d1:a9:cc:b5:f1:73:d0:1f:d5:74:da:54:7d:
         f6:a7:62:38:f6:f0:ce:62:63:11:90:a3:57:12:df:0d:d7:bc:
         f2:09:13:88:4a:55:f9:33:b5:63:65:49:65:bd:f3:43:2a:ae:
         62:85:e5:45:72:84:e6:df:03:4b:9f:94:74:c8:7b:f9:ee:81:
         27:8c:f4:d2:7b:ff:ef:35:3f:a4:17:af:1f:f9:c4:18:74:92:
         21:d0:27:f9:f4:2c:cf:59:af:47:ab:fb:1c:c0:7f:aa:3c:ff:
         f8:52:e7:73:b1:0e:a2:49:5e:1d:ea:5a:7c:b5:52:76:9e:29:
         66:46:cb:5e:32:43:a4:d0:9a:c7:a7:ce:67:d7:79:e5:57:3b:
         f2:0a:f6:2c
-----BEGIN CERTIFICATE-----
MIIGUTCCBTmgAwIBAgIUAQ0Mn0MoWEnOml18X6+dBUxMOAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGM0NTVlNTgtNjE4OS00ZjI4LWI4MDMtNjFhOTY1YTIx
YzY1MB4XDTI1MDUxMDEzMDEwMFoXDTI1MDgwODEzMDEwMFowLzEtMCsGA1UEAxMk
YmNkZTY2MDktN2FhNS00YTAwLTlmNTktNWQ0NTEzNzY0YTNiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlckie3zS7DVKF84+lgi/CmtSRcAWvTH4IKLk
vHhlGYpzv22I9taQX9iR1f46MWoUwjcIIjI2uut52l9c0d93OrzkkumGTSwj+Qq/
noslrTN1FpFBf4uthSBBVJ0lOA997bEWIrsoIcj06RS5Cj8SoYn1gB5mzvgoIyTQ
8Jy0f713+ROHqUdZjBiCp971QBxsIS54uFVoVKmDpMrM6ahINUWuWDNXO2lNTq6t
GOiKI8LmIm7OaZdPNcXBisCxaXKlmDuVny4PRReXionNl9FuzMfBLfU6jXz+c4UX
GHHtT0V26zqEaGcg/pe3k4DsI6n4bM+mW2ynBSKgheB6Ug+VTwIDAQABo4IDYzCC
A18wHQYDVR0OBBYEFAJlWN7VPo0ijIjTZwJ/oSQI0ewQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1
NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5NjVhMjFjNjUvMjJhOTBlMGMtMWRiZi0z
NjY2LTlhMDItODZmYjVmODNjYWJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGM0NTVlNTgtNjE4OS00ZjI4LWI4
MDMtNjFhOTY1YTIxYzY1L2RjNDU1ZTU4LTYxODktNGYyOC1iODAzLTYxYTk2NWEy
MWM2NS5jcmwwHwYDVR0jBBgwFoAUZka/BM8QPkyukKDmzSU2ULZFvD8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5
NjVhMjFjNjUuY2VyMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAAjAUMBIDBwAmIAEj
IIcDBwAmIAEjIIowVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUF
BwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRt
bDANBgkqhkiG9w0BAQsFAAOCAQEAHouhFEy/D4la9TKvUbjKZbDIm3FbBEIvpTku
nDuj1ny9wZ45nTXdX08l5RH8zvA/TinfBH6we1Sj7JX4fDfkQHrn+TrKJ8kodIQM
edFHVifNNnIEvjYcZIKp23BwM/iwlksXp0N7s+EMX6Q5Y0S7w1/Rqcy18XPQH9V0
2lR99qdiOPbwzmJjEZCjVxLfDde88gkTiEpV+TO1Y2VJZb3zQyquYoXlRXKE5t8D
S5+UdMh7+e6BJ4z00nv/7zU/pBevH/nEGHSSIdAn+fQsz1mvR6v7HMB/qjz/+FLn
c7EOokleHepafLVSdp4pZkbLXjJDpNCax6fOZ9d55Vc78gr2LA==
-----END CERTIFICATE-----
Generated at Sun Jun 15 06:23:32 2025 by rpki-client