Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/bb265d72-5451-3383-9899-d78b8a322a33.roa
File:                     bb265d72-5451-3383-9899-d78b8a322a33.roa (raw, json)
Hash identifier:          AfaC04pgrF8+xmtYLaG0focfNy2jeIaVBS/d/AdWKi8=
Subject key identifier:   6A:4D:E8:0E:D0:2E:2A:6D:E8:4F:48:5F:99:3F:E1:AD:C0:C6:0A:8E
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F4328584CDB0219480F91E11DB7577040
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/bb265d72-5451-3383-9899-d78b8a322a33.roa
Signing time:             Sat 14 Feb 2026 02:00:32 +0000
ROA not before:           Sat 14 Feb 2026 02:00:32 +0000
ROA not after:            Fri 15 May 2026 01:00:32 +0000
asID:                     30103
IP address blocks:        2620:123:204c::/48 maxlen: 48
                          2620:123:204d::/48 maxlen: 48
                          2620:123:204e::/48 maxlen: 48
                          2620:123:204f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:db:02:19:48:0f:91:e1:1d:b7:57:70:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: Feb 14 02:00:32 2026 GMT
            Not After : May 15 01:00:32 2026 GMT
        Subject: CN=50cd06aa-92d6-4f87-a8cf-8334268699db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:f3:46:ff:54:f5:c2:9b:b2:68:7b:40:05:93:
                    1b:c8:32:92:7d:f7:8c:36:d2:73:43:21:88:8f:9f:
                    87:66:34:a4:37:bf:2e:94:3c:31:a8:e4:a6:11:fe:
                    7d:f8:66:68:db:6d:a2:03:d3:f4:71:e0:1b:85:88:
                    9c:8f:9b:74:68:17:d1:fe:65:78:53:28:74:08:4d:
                    f6:b9:2a:43:70:44:06:84:af:a9:71:ba:dc:35:40:
                    d5:4e:31:c2:21:e5:89:c0:f8:1f:3d:01:16:b4:c7:
                    75:d1:98:a0:41:48:31:01:ad:b3:56:4b:98:de:7e:
                    b8:bd:39:0f:8b:fa:fd:07:ca:44:0d:4a:1d:45:f8:
                    7c:3b:29:63:e0:c5:64:40:3f:76:c4:18:af:1d:e8:
                    96:98:8c:46:0c:4a:7a:e5:35:2f:7d:23:8b:4b:84:
                    98:1d:a0:32:f5:25:5f:7d:59:9d:88:62:b5:73:cc:
                    f4:1e:cb:57:32:0e:e4:d6:56:b9:cd:99:f0:d0:7b:
                    8e:a4:8c:ef:04:75:f9:1a:7b:3a:b0:6b:96:e9:b0:
                    f5:52:7e:20:07:ae:43:47:ff:d6:62:7a:c7:42:fe:
                    8e:9d:44:2b:3f:b4:82:1d:0a:a5:a5:12:99:74:1d:
                    0f:f5:fa:11:db:13:a6:19:15:13:ee:7f:f8:62:e6:
                    8a:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:4D:E8:0E:D0:2E:2A:6D:E8:4F:48:5F:99:3F:E1:AD:C0:C6:0A:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/bb265d72-5451-3383-9899-d78b8a322a33.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:123:204c::/46

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:d4:2e:fc:99:fb:0d:a3:60:d7:b1:f1:c5:d1:5a:5e:46:be:
         38:26:bd:d1:06:45:ea:3a:44:65:e7:8b:8d:e6:72:2a:19:71:
         3a:42:f5:aa:dc:a2:a3:45:75:47:fe:31:f4:d7:44:63:0f:bf:
         1a:da:34:02:4d:c0:20:61:1e:c5:c7:ad:c9:b6:4a:ce:90:54:
         e2:44:5a:0e:66:01:93:c8:90:d2:bc:37:c3:a1:69:91:b5:db:
         be:b8:29:83:03:a3:c0:04:ba:10:02:78:73:ee:e7:07:ac:ba:
         1c:69:a5:bb:2a:a2:2c:7f:9c:88:4d:b5:39:e3:dd:4a:1c:d8:
         96:ab:21:2d:24:ae:ef:95:f5:1b:f3:fa:5b:e8:78:15:65:b7:
         8b:88:51:3c:25:42:da:c4:0c:33:8d:44:78:1b:68:00:7c:21:
         50:54:5a:b1:b3:e0:d2:e2:6b:61:d0:2a:5e:bf:e0:df:e7:95:
         a9:33:3a:dd:2f:d1:a4:bd:23:20:58:5f:80:30:68:f6:c3:35:
         dd:29:62:e3:39:cf:7b:ad:bd:4b:13:49:06:be:3d:01:ac:6e:
         10:1e:72:75:9c:8d:82:33:d5:77:89:60:a0:9c:34:6d:79:11:
         6a:d2:d7:41:d8:50:55:37:93:24:3d:49:3a:0a:be:d6:a2:98:
         59:7e:7f:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:02:32 2026 by rpki-client