Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/9c78129b-87ff-38ea-8cd7-a246c0876ba3.roa
File:                     9c78129b-87ff-38ea-8cd7-a246c0876ba3.roa (raw, json)
Hash identifier:          +KYULLEP3H53kl4XYcRysf2XXk4J3znHzQj6S4DgaOM=
Subject key identifier:   89:F7:CD:7E:C6:AA:9F:BE:34:C1:FB:10:07:72:39:F2:DD:AF:F7:4C
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F4328584CEA5CEFE45396C9F71F9F7E00
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/9c78129b-87ff-38ea-8cd7-a246c0876ba3.roa
Signing time:             Thu 19 Feb 2026 14:00:40 +0000
ROA not before:           Thu 19 Feb 2026 14:00:40 +0000
ROA not after:            Wed 20 May 2026 13:00:40 +0000
asID:                     30103
IP address blocks:        2620:123:2007::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ea:5c:ef:e4:53:96:c9:f7:1f:9f:7e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: Feb 19 14:00:40 2026 GMT
            Not After : May 20 13:00:40 2026 GMT
        Subject: CN=e6118745-8601-48ec-a223-649cef65658d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:f4:aa:89:20:9b:35:9b:8b:d7:4d:d8:4e:3f:
                    07:dd:c3:dc:5a:a3:cd:34:d4:a7:61:80:92:26:f0:
                    52:8a:63:91:79:54:f0:8e:be:ff:50:3a:c1:8c:54:
                    98:2b:de:73:8e:67:48:ce:1b:67:b3:fc:7a:6c:7f:
                    d5:d4:66:fa:ca:17:35:c8:6b:6c:1c:76:fe:a9:87:
                    a8:94:72:78:af:b0:88:b9:2f:73:8f:1b:c0:88:9f:
                    68:3a:73:20:87:1e:5a:b5:a8:e9:3a:f9:bb:89:02:
                    1c:19:87:f1:ff:11:2c:f8:1b:7c:4a:5f:15:36:0d:
                    74:6d:9b:af:8a:f2:74:d6:c6:82:d9:7e:c6:2a:ad:
                    ba:88:d8:e1:9f:00:0e:da:1c:a1:d1:68:f6:06:ae:
                    cc:c0:05:24:23:7f:21:38:c7:96:26:4a:1f:c8:5d:
                    67:1f:1f:df:81:16:fa:f6:dd:4b:df:fb:8e:a5:d1:
                    8c:aa:20:24:54:43:46:0d:3f:f0:9e:e1:ce:47:09:
                    a6:f4:df:26:ae:b7:cb:af:09:b4:bd:02:0e:58:f0:
                    3c:af:a0:44:0c:4c:c0:f4:34:74:ff:19:72:70:ad:
                    71:2c:2e:9f:81:ce:3d:f6:52:88:7b:ab:32:4a:ad:
                    69:f6:1b:f8:d6:ae:19:5f:bc:52:3c:33:e6:93:d2:
                    e2:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:F7:CD:7E:C6:AA:9F:BE:34:C1:FB:10:07:72:39:F2:DD:AF:F7:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/9c78129b-87ff-38ea-8cd7-a246c0876ba3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:123:2007::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:a0:d1:20:d9:ab:a7:26:f5:e8:59:a3:09:4e:91:95:1e:12:
         3e:91:96:e2:78:85:08:86:56:63:ac:3e:50:8c:8f:b3:01:10:
         80:5f:39:f5:b5:1f:dd:88:21:2f:c4:45:11:40:7b:0f:fa:72:
         aa:11:06:a5:30:b9:82:78:be:0f:e4:b0:5c:4b:74:9c:54:10:
         19:70:93:b3:1e:ba:6c:bb:d4:42:f2:5d:c5:0a:26:3e:2d:c0:
         f5:aa:2d:c4:4b:86:2e:60:f2:30:61:93:4b:04:a9:45:64:e1:
         85:44:5d:55:ed:65:e7:f2:30:25:ca:c8:64:ff:2b:43:95:58:
         c5:ce:9c:14:15:87:f1:eb:37:70:3a:1e:2d:73:cf:63:8c:0d:
         95:9a:bc:28:2a:9b:05:d4:a0:8f:82:d0:95:73:c3:7e:7f:5f:
         84:54:0f:bb:34:73:c8:02:b7:a7:ad:2f:db:d1:47:69:59:7a:
         08:c2:82:f5:25:f0:c8:f3:3c:a4:23:da:13:da:15:16:e3:fd:
         4f:55:fb:c9:49:94:7a:8b:ff:32:55:a9:29:52:30:f6:7c:5f:
         be:84:63:57:a1:56:45:e1:83:c0:d0:c4:aa:9c:ed:20:1e:06:
         90:3e:8a:af:c8:e4:0c:00:95:2e:e2:22:ee:79:02:96:29:ad:
         b9:b1:d4:af
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEzqXO/kU5bJ9x+ffgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGM0NTVlNTgtNjE4OS00ZjI4LWI4MDMtNjFhOTY1YTIx
YzY1MB4XDTI2MDIxOTE0MDA0MFoXDTI2MDUyMDEzMDA0MFowLzEtMCsGA1UEAxMk
ZTYxMTg3NDUtODYwMS00OGVjLWEyMjMtNjQ5Y2VmNjU2NThkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkPSqiSCbNZuL103YTj8H3cPcWqPNNNSnYYCS
JvBSimOReVTwjr7/UDrBjFSYK95zjmdIzhtns/x6bH/V1Gb6yhc1yGtsHHb+qYeo
lHJ4r7CIuS9zjxvAiJ9oOnMghx5atajpOvm7iQIcGYfx/xEs+Bt8Sl8VNg10bZuv
ivJ01saC2X7GKq26iNjhnwAO2hyh0Wj2Bq7MwAUkI38hOMeWJkofyF1nHx/fgRb6
9t1L3/uOpdGMqiAkVENGDT/wnuHORwmm9N8mrrfLrwm0vQIOWPA8r6BEDEzA9DR0
/xlycK1xLC6fgc499lKIe6sySq1p9hv41q4ZX7xSPDPmk9LijwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFIn3zX7Gqp++NMH7EAdyOfLdr/dMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1
NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5NjVhMjFjNjUvOWM3ODEyOWItODdmZi0z
OGVhLThjZDctYTI0NmMwODc2YmEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGM0NTVlNTgtNjE4OS00ZjI4LWI4
MDMtNjFhOTY1YTIxYzY1L2RjNDU1ZTU4LTYxODktNGYyOC1iODAzLTYxYTk2NWEy
MWM2NS5jcmwwHwYDVR0jBBgwFoAUZka/BM8QPkyukKDmzSU2ULZFvD8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5
NjVhMjFjNjUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABIyAH
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAI+g0SDZq6cm9ehZowlOkZUeEj6RluJ4hQiGVmOsPlCMj7MBEIBf
OfW1H92IIS/ERRFAew/6cqoRBqUwuYJ4vg/ksFxLdJxUEBlwk7Meumy71ELyXcUK
Jj4twPWqLcRLhi5g8jBhk0sEqUVk4YVEXVXtZefyMCXKyGT/K0OVWMXOnBQVh/Hr
N3A6Hi1zz2OMDZWavCgqmwXUoI+C0JVzw35/X4RUD7s0c8gCt6etL9vRR2lZegjC
gvUl8MjzPKQj2hPaFRbj/U9V+8lJlHqL/zJVqSlSMPZ8X76EY1ehVkXhg8DQxKqc
7SAeBpA+iq/I5AwAlS7iIu55ApYprbmx1K8=
-----END CERTIFICATE-----
Generated at Sun Mar 1 19:00:55 2026 by rpki-client