Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/9f33e496-51e8-3d23-8517-1b6d973523cf.roa
File:                     9f33e496-51e8-3d23-8517-1b6d973523cf.roa (raw, json)
Hash identifier:          eaq26s5JXHj1kYcl4DwR+9WcePv6sjgA7bvRkzJ5ndk=
Subject key identifier:   05:44:F5:D0:8D:33:00:E4:FC:AA:86:89:3F:CE:05:8D:E6:E6:82:02
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F4328584E9BE51818FA29ED97178ACE00
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/9f33e496-51e8-3d23-8517-1b6d973523cf.roa
Signing time:             Fri 24 Jul 2026 21:00:12 +0000
ROA not before:           Fri 24 Jul 2026 21:00:12 +0000
ROA not after:            Thu 22 Oct 2026 21:00:12 +0000
asID:                     30103
IP address blocks:        2620:123:2044::/48 maxlen: 48
                          2620:123:2045::/48 maxlen: 48
                          2620:123:2046::/48 maxlen: 48
                          2620:123:2047::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9b:e5:18:18:fa:29:ed:97:17:8a:ce:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: Jul 24 21:00:12 2026 GMT
            Not After : Oct 22 21:00:12 2026 GMT
        Subject: CN=e51664b2-400c-40c4-a5df-3a4da0ee59d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:92:19:6b:99:dc:fb:ef:65:94:ac:d5:02:fc:
                    4a:02:18:5b:3f:ce:b5:f4:73:d3:78:35:67:3a:c2:
                    c5:20:b1:29:f0:12:3d:b3:4e:f9:59:79:b6:8b:1e:
                    85:ff:46:30:76:72:0a:27:53:a2:81:26:10:99:0d:
                    6a:71:42:b1:a1:f2:43:af:9c:4a:24:4f:72:7b:3b:
                    62:b4:b4:13:0c:d4:b3:46:7e:7d:23:bb:75:2c:81:
                    35:af:0f:46:88:0b:fe:23:3a:e5:f4:8e:c1:8f:b3:
                    5c:f9:15:ff:71:37:c5:d8:99:05:83:c3:72:54:b5:
                    48:30:f0:87:c2:ea:39:d3:fe:53:ef:90:3d:3a:a0:
                    b2:d0:d3:fc:e1:54:eb:e4:e0:11:9d:60:b2:8d:b6:
                    b4:4c:17:77:3c:3e:5a:e8:48:78:5d:f9:8c:ff:7f:
                    31:b9:10:47:65:81:d6:6e:a6:5f:55:95:16:d9:71:
                    d1:c2:45:ab:1c:2e:94:26:2b:6e:44:47:96:9a:95:
                    02:9b:00:7b:86:c3:f7:bd:2e:a6:67:ae:1a:ab:df:
                    7b:83:0b:86:01:29:28:e0:73:54:c2:34:9e:94:74:
                    da:09:cc:11:1e:a2:4b:46:75:51:4f:c3:3a:fe:f2:
                    ee:76:44:09:37:fc:96:38:51:a9:d2:ee:12:28:90:
                    4b:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:44:F5:D0:8D:33:00:E4:FC:AA:86:89:3F:CE:05:8D:E6:E6:82:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/9f33e496-51e8-3d23-8517-1b6d973523cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:123:2044::/46

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:23:ba:46:83:b9:10:ce:a5:0c:2c:ba:70:43:63:53:d5:31:
         98:45:af:03:bc:09:08:51:5d:c3:96:cf:67:57:ef:40:01:5d:
         d0:fd:0c:d1:bc:78:4e:73:71:f6:45:75:79:98:31:73:27:cd:
         f5:b1:b2:79:f9:8e:88:35:bc:23:7a:ae:c1:2d:02:e9:23:8e:
         1a:8d:b4:b3:12:ee:3b:2c:69:1e:e4:14:5d:9a:31:19:52:72:
         be:d0:ad:23:b1:0a:2d:0c:55:51:1c:03:cd:6e:4b:f8:b4:c3:
         81:15:f4:e3:52:2f:f8:c9:e6:47:27:3a:cd:2a:d2:06:78:da:
         4a:44:79:11:8c:92:17:d9:3b:47:f0:b2:6a:4d:d6:24:50:79:
         5e:8d:e3:6c:a0:f2:63:07:e1:10:f9:80:e5:ad:c1:32:bf:8d:
         56:8c:ea:d6:ad:8b:a3:62:0a:97:36:35:31:63:6f:33:6e:5b:
         75:38:fa:3f:78:c7:a6:69:da:9a:ec:43:09:37:3f:04:38:95:
         86:2f:0e:4e:1d:02:3a:76:0e:d8:5c:23:c7:c2:f1:af:de:99:
         be:ef:0c:40:51:d5:e6:4d:fa:10:8f:96:34:a4:0d:51:96:bf:
         08:04:77:5f:e2:fe:81:ae:c2:c0:71:3d:ff:60:14:ae:5b:ba:
         b6:a0:d5:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:50:13 2026 by rpki-client