Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/9c6c3dcf-7e8f-3ee7-bcca-e9363f66db3b.roa
File:                     9c6c3dcf-7e8f-3ee7-bcca-e9363f66db3b.roa (raw, json)
Hash identifier:          DI4dfmYhO/mL4w/csE2YMIcnyj+8/JvLaTmqCemmNMQ=
Subject key identifier:   AC:6F:0F:FC:D0:92:E3:D2:6C:D4:81:4D:57:6F:FD:E4:20:C6:32:F6
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F4328584CEA5CF2EC16576CD15937E800
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/9c6c3dcf-7e8f-3ee7-bcca-e9363f66db3b.roa
Signing time:             Thu 19 Feb 2026 14:00:40 +0000
ROA not before:           Thu 19 Feb 2026 14:00:40 +0000
ROA not after:            Wed 20 May 2026 13:00:40 +0000
asID:                     30103
IP address blocks:        2620:123:2009::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ea:5c:f2:ec:16:57:6c:d1:59:37:e8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: Feb 19 14:00:40 2026 GMT
            Not After : May 20 13:00:40 2026 GMT
        Subject: CN=0e604f82-1886-45f3-86e2-186809379f44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:61:56:3d:7a:84:1d:e3:17:42:d4:b5:5e:a6:
                    f5:d9:83:ea:22:5b:4c:9f:9c:27:14:97:4d:9f:b0:
                    c6:9e:5c:11:a4:f1:c5:b1:03:b2:07:12:a0:9d:be:
                    48:1a:ca:9a:ff:45:70:5b:a2:4b:0e:e2:c6:fa:60:
                    b8:df:30:eb:96:3f:6b:de:44:ae:fd:8e:75:be:08:
                    cf:ca:49:92:03:e9:3e:19:fd:52:ec:d3:72:fc:a3:
                    85:0f:61:5f:a1:21:89:2a:48:e8:99:19:f1:ad:18:
                    a8:52:59:f2:c2:38:9c:5c:f5:ba:41:0b:a7:0d:58:
                    ff:31:b8:01:1e:b5:50:a3:45:39:92:70:88:dd:dc:
                    fe:6c:da:59:02:d1:27:ee:a7:de:f8:f9:f8:9a:17:
                    99:04:de:a7:f9:57:07:30:a2:ef:56:24:46:bc:f3:
                    8f:d5:7e:ce:6c:e4:23:0e:64:c7:5f:c1:ee:95:fe:
                    b0:8a:fd:2a:be:bb:59:0f:e1:7b:09:8c:79:1e:55:
                    ab:14:ba:fd:ad:e6:9c:62:d6:28:09:26:45:aa:35:
                    93:e5:f2:1f:22:71:42:a1:a5:78:57:ea:3d:4b:25:
                    d7:8e:2b:b6:0d:e0:ba:55:84:61:b9:db:be:49:73:
                    32:18:ab:5c:5c:73:cd:76:68:09:9b:1f:e3:2f:6d:
                    dd:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:6F:0F:FC:D0:92:E3:D2:6C:D4:81:4D:57:6F:FD:E4:20:C6:32:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/9c6c3dcf-7e8f-3ee7-bcca-e9363f66db3b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:123:2009::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:0d:2a:ec:e1:ca:fa:ea:98:f8:c0:38:b2:85:b6:80:73:13:
         44:48:ff:0f:67:72:a0:88:e9:65:21:f9:91:03:84:a5:76:18:
         80:2e:de:b7:bf:1a:8c:17:55:2d:39:05:3f:81:fb:bd:32:9e:
         54:53:d1:d2:a4:c8:a9:6f:e7:c7:02:1f:b6:6f:4f:7f:df:7b:
         4a:60:8a:7d:b3:fc:14:90:14:34:fc:05:4b:8a:67:b1:f2:28:
         36:c6:d0:2b:ef:72:55:b6:21:ad:46:bc:b3:95:03:30:2a:31:
         f5:71:20:3a:f0:03:19:a3:f3:4b:9b:ca:64:b5:77:38:fc:81:
         3d:0e:16:4e:5e:87:86:c6:c9:06:c2:df:4b:80:1d:f2:80:45:
         f7:f7:b2:a2:d1:19:fe:36:20:fa:3f:16:83:74:24:c0:86:0f:
         d8:df:66:4a:30:31:41:87:5e:77:46:06:d6:06:49:91:13:55:
         0a:93:62:9d:7c:d0:7e:6b:ea:1d:7f:38:38:f5:f5:06:20:7c:
         ab:a5:09:ab:25:78:b8:9f:37:6e:ff:07:c4:a6:f4:57:2a:cd:
         e0:6e:09:7f:90:c6:8c:0d:fd:18:72:02:84:c4:86:9f:02:72:
         65:04:0a:69:ee:53:d3:7b:83:1d:12:9b:62:23:2e:de:76:4c:
         2c:90:3e:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:43:57 2026 by rpki-client