Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/9abf490e-12d9-3db2-b661-3e64feafa9e2.roa
File:                     9abf490e-12d9-3db2-b661-3e64feafa9e2.roa (raw, json)
Hash identifier:          DVnwz6qOKOUWTKvIitZwhulQqojDSJojr5m/8WMF95o=
Subject key identifier:   A1:6A:64:60:02:C3:5D:A7:55:24:EA:EA:82:FF:4A:37:90:4B:6D:EC
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F4328584CE4C76ECD9E05992AA28D1470
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/9abf490e-12d9-3db2-b661-3e64feafa9e2.roa
Signing time:             Tue 17 Feb 2026 14:00:41 +0000
ROA not before:           Tue 17 Feb 2026 14:00:41 +0000
ROA not after:            Mon 18 May 2026 13:00:41 +0000
asID:                     31898
IP address blocks:        2620:123:208c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e4:c7:6e:cd:9e:05:99:2a:a2:8d:14:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: Feb 17 14:00:41 2026 GMT
            Not After : May 18 13:00:41 2026 GMT
        Subject: CN=cb5da5c7-7b69-4e6a-bee3-47084c7ab802
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:99:03:bf:e0:b4:7d:7a:15:6c:da:61:e1:ee:
                    0c:f7:19:c9:20:ea:76:84:0e:da:49:28:12:33:f9:
                    ad:de:97:63:ec:25:70:86:40:46:c4:82:44:fd:76:
                    32:a6:0d:cb:ce:ac:2f:ef:59:59:41:2f:2f:14:c2:
                    3f:4c:5b:2b:f3:58:bc:78:b6:79:4e:2d:e5:72:d7:
                    85:73:e2:e8:49:3d:ec:c0:7a:bf:40:4c:45:a3:8e:
                    20:ec:b6:1e:b9:28:53:61:f2:a8:25:74:62:05:65:
                    8f:e3:15:64:e5:fc:1c:af:6e:8f:0e:ba:0a:d2:bf:
                    f6:43:10:7e:86:12:2f:5d:3d:3d:e6:64:3b:d5:5b:
                    65:b8:b3:42:5c:6c:9f:13:ce:bc:fd:9f:2e:e4:15:
                    6c:07:57:f4:67:d4:0e:b6:c4:19:d8:d1:a9:80:2d:
                    ee:f8:5d:a0:0d:ea:9c:aa:a6:52:08:ee:76:60:e5:
                    8e:c3:36:8c:b5:cb:1e:a6:89:e7:2e:19:5e:8c:06:
                    d3:f7:58:97:11:2c:7d:33:5a:62:bd:96:af:99:59:
                    2e:e5:71:82:ee:2b:78:f1:97:f7:62:52:42:d9:70:
                    c4:15:2f:2d:a5:e2:84:c7:61:e9:9e:f0:48:02:41:
                    83:7a:b8:77:8c:2f:ed:8d:da:b1:70:b1:da:31:af:
                    09:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:6A:64:60:02:C3:5D:A7:55:24:EA:EA:82:FF:4A:37:90:4B:6D:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/9abf490e-12d9-3db2-b661-3e64feafa9e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:123:208c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:ad:01:ff:67:15:d7:0b:3e:f5:6e:51:b4:8e:54:5f:fa:2a:
         f3:bb:be:34:69:2d:53:c6:0e:ce:fd:30:dc:e1:b2:7c:56:ea:
         5c:1e:96:b4:e5:71:6d:3b:03:99:89:b2:6f:8d:e4:be:8e:f3:
         94:4e:74:3e:fc:7a:b6:8e:e7:8e:12:ac:1b:da:0d:e9:5e:67:
         44:cc:32:3a:96:8d:da:a9:7d:7c:c0:56:f7:e9:d3:52:ec:2c:
         79:ab:97:f4:83:c2:6b:73:41:67:d8:e0:eb:b2:84:a9:bf:9c:
         ba:6e:dd:ac:84:76:7e:e4:3c:af:b6:45:9d:0d:53:62:b3:44:
         be:a2:ae:b9:81:7d:a5:be:45:db:be:d4:f4:c8:d4:f3:80:9a:
         b3:4e:88:1b:74:34:5f:49:55:e1:c3:2d:0d:cb:21:ed:5b:43:
         e3:2f:88:a6:db:07:c2:11:a2:ef:63:10:ca:07:4f:fb:d1:cd:
         a6:66:dc:e7:c5:fc:15:0b:51:14:00:2f:6d:51:46:96:8a:fa:
         55:7b:62:1a:71:68:97:83:b8:c9:95:ce:c4:28:4b:25:39:06:
         98:96:a7:33:8d:a8:a4:dd:5f:e8:5a:12:50:82:2d:ef:d4:1c:
         f0:5c:1c:20:35:47:05:a4:07:e1:5b:29:e9:94:f0:2e:fd:5e:
         fb:9e:dd:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:17:31 2026 by rpki-client