Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/405b323e-ed7c-38a5-8774-bb097e86b465.roa
File:                     405b323e-ed7c-38a5-8774-bb097e86b465.roa (raw, json)
Hash identifier:          1P6OHVfIKP78McIFWeFruECfFatrMVtFylh0EgD7n7o=
Subject key identifier:   2A:82:EC:08:A8:7F:FF:11:A5:56:74:9F:65:45:72:BE:0C:5F:C9:5F
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F432858496A19AB5F8D018A6961035F80
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/405b323e-ed7c-38a5-8774-bb097e86b465.roa
Signing time:             Fri 04 Apr 2025 13:00:59 +0000
ROA not before:           Fri 04 Apr 2025 13:00:59 +0000
ROA not after:            Thu 03 Jul 2025 13:00:59 +0000
asID:                     30103
IP address blocks:        2620:123:2004::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:6a:19:ab:5f:8d:01:8a:69:61:03:5f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: Apr  4 13:00:59 2025 GMT
            Not After : Jul  3 13:00:59 2025 GMT
        Subject: CN=c3741f19-d140-4fc1-a58b-2eaeab3a1fbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:aa:09:f0:42:4c:b5:05:18:72:cd:9f:7e:29:
                    c3:64:ad:f3:c8:2e:b4:94:71:bb:1e:2a:85:4e:28:
                    ee:11:46:cc:2a:77:17:0a:61:fe:ad:f4:7f:ba:75:
                    75:04:44:ec:7f:70:4f:90:d9:af:f9:85:6b:53:b7:
                    d9:cd:c8:42:cd:ad:cc:74:88:0d:7e:54:b3:a4:17:
                    1b:94:50:51:9c:55:9d:5b:3c:5b:d3:96:2a:c8:4f:
                    80:bc:7e:d7:6b:82:ad:f7:0c:16:ed:44:8a:ae:38:
                    e3:c6:c4:23:bb:03:4f:c1:d4:95:c7:aa:c8:00:f0:
                    1b:97:08:56:6c:dc:bc:cc:5b:d4:9c:18:68:47:53:
                    20:22:93:03:0b:4e:3e:b1:e4:da:0b:05:c9:03:cc:
                    75:da:24:5b:c6:35:55:d7:18:b2:2b:27:66:e8:c4:
                    2d:51:d0:ce:0f:9e:d4:2d:79:17:e3:c6:e4:2e:6b:
                    1f:e8:5b:d3:b3:5d:cb:6a:bb:f7:51:51:f6:d8:a2:
                    90:e9:74:6b:21:16:bb:f2:c5:00:af:32:af:5b:f9:
                    b0:b8:43:b8:a5:7f:f3:3b:39:ce:4e:73:56:ef:23:
                    72:5e:d0:b0:4f:cf:83:5f:6a:30:a6:89:34:a6:75:
                    aa:ac:67:d3:52:f9:2b:f7:99:b8:2d:68:58:dd:30:
                    fe:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:82:EC:08:A8:7F:FF:11:A5:56:74:9F:65:45:72:BE:0C:5F:C9:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/405b323e-ed7c-38a5-8774-bb097e86b465.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:123:2004::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:09:db:70:6b:a1:f5:bd:47:f7:77:51:97:14:78:0a:1d:04:
         df:5b:86:76:23:04:9b:58:d3:15:4d:8c:61:dd:56:49:43:3f:
         e8:9b:15:af:09:21:1b:db:91:9c:d2:e7:21:62:ca:df:9c:e6:
         1f:32:47:70:78:71:45:55:37:27:dd:d2:c3:2f:a2:d8:01:47:
         56:b2:94:36:2b:08:43:38:62:8b:94:26:fa:da:64:3e:a6:69:
         47:3a:58:7d:dc:30:e6:c6:42:cf:58:75:14:76:68:e5:ac:8f:
         db:f3:11:4d:65:9b:84:aa:9b:4f:4e:70:03:26:b2:56:8a:55:
         dd:1b:e4:ac:b6:7c:13:36:b9:5b:c4:9f:9c:cc:15:8b:79:b6:
         02:d5:16:53:30:f2:f5:78:0c:40:5b:53:46:86:ce:15:23:cf:
         7a:9a:2e:94:cc:e9:60:bd:23:8b:03:0b:9a:84:5a:83:f9:40:
         61:df:80:39:3d:33:53:35:7f:80:d3:6c:44:9e:56:f4:5b:91:
         84:6b:a9:17:e3:62:17:a8:1f:d1:39:ae:32:76:b9:c5:2f:6c:
         aa:a2:8f:fb:ba:cf:09:a2:85:b3:39:a7:8d:2b:6b:3c:2d:38:
         b5:5d:ed:14:1b:7a:43:49:09:64:02:60:08:b7:4c:2f:44:c2:
         13:f6:b6:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:07:24 2025 by rpki-client