Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/d74ad7f3-7ec6-31d9-a26f-d46a9822a490.roa
File:                     d74ad7f3-7ec6-31d9-a26f-d46a9822a490.roa (raw, json)
Hash identifier:          6oCo8lHq4yUQjF8IBqE1GNE8gZUzuJwYDQKmhTM+bLo=
Subject key identifier:   F4:8F:69:85:67:90:14:97:75:44:AB:6C:24:21:D0:D5:1E:83:C4:C2
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F4328584F3E47E7ACEBF571EADB546C00
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/d74ad7f3-7ec6-31d9-a26f-d46a9822a490.roa
Signing time:             Mon 21 Sep 2026 01:00:11 +0000
ROA not before:           Mon 21 Sep 2026 01:00:11 +0000
ROA not after:            Sun 20 Dec 2026 02:00:11 +0000
asID:                     30103
IP address blocks:        2620:123:2041::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3e:47:e7:ac:eb:f5:71:ea:db:54:6c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: Sep 21 01:00:11 2026 GMT
            Not After : Dec 20 02:00:11 2026 GMT
        Subject: CN=924a17ab-dd94-4fe0-973b-f450a6910f6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:d8:6b:62:8f:15:ae:2b:35:0c:e6:8c:c5:ef:
                    95:2b:bd:4a:a9:83:72:f2:25:d3:0c:84:a2:03:fb:
                    50:c6:d1:ea:50:7e:c3:20:e1:86:78:3c:54:c6:39:
                    ea:6b:e6:dd:aa:b9:ed:cd:b8:36:31:6a:be:4f:8d:
                    52:6a:f9:60:9e:d8:fa:6a:c6:50:ad:0b:a6:05:be:
                    2f:cc:76:09:76:3c:89:56:af:e8:b3:b4:2a:8b:59:
                    00:9d:34:da:cf:55:a1:f5:fc:31:46:b1:6c:62:6f:
                    c5:e9:7a:ad:ac:9d:f6:28:ff:4c:a8:ec:87:cb:21:
                    8a:f1:ce:2e:ad:3c:b9:f1:e8:78:97:1a:45:1f:21:
                    4c:33:27:cf:0f:82:f2:15:0b:f4:cd:13:fe:b9:13:
                    b6:55:12:e8:c6:a6:08:2f:82:f1:35:67:cd:b9:5c:
                    5a:71:57:b4:8a:c0:c2:c8:23:74:fa:61:8b:91:05:
                    c7:06:52:76:72:67:ad:e8:6c:24:35:67:0f:50:08:
                    9e:33:35:74:57:f9:97:15:91:3f:04:7a:4b:4a:98:
                    00:ef:48:ba:81:4b:27:21:df:3d:f6:9e:dc:d5:63:
                    81:70:3a:d9:01:5a:23:d2:16:fa:27:aa:ea:54:26:
                    88:0e:14:85:98:a1:9e:ed:62:f9:06:9d:a1:9f:3d:
                    0c:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:8F:69:85:67:90:14:97:75:44:AB:6C:24:21:D0:D5:1E:83:C4:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/d74ad7f3-7ec6-31d9-a26f-d46a9822a490.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:123:2041::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:f1:8a:67:0f:a5:06:90:b7:ea:42:4a:32:2e:bc:bb:96:a3:
         dd:0e:6f:ed:bc:18:91:dc:d8:2e:58:20:6a:6d:b9:27:b0:d0:
         fa:ca:98:0a:d8:4d:b1:c1:7d:4f:a3:16:1c:57:f2:65:00:85:
         93:eb:93:f0:dd:1e:cf:e4:bd:86:88:fe:e0:6e:3b:f1:ec:98:
         aa:bb:98:ff:e9:f9:22:21:f1:f3:11:82:92:53:b6:4e:dc:e0:
         47:bf:01:2b:ea:56:2d:26:ad:60:e6:71:35:9a:c9:39:a7:a2:
         1f:7f:01:02:bf:47:cc:dd:27:eb:0e:77:30:6d:11:3a:10:50:
         f6:74:4d:b8:7a:b7:26:d1:16:c6:e5:58:26:30:cd:a4:8a:4e:
         8e:d1:8c:33:16:29:d9:40:7e:e3:e1:cb:12:47:76:1c:ca:f1:
         1e:16:6f:94:03:80:a5:fa:f9:60:48:c8:c9:76:bf:dd:28:24:
         6b:4a:5d:8d:30:be:17:d8:52:15:d3:4e:b3:98:6a:11:a6:aa:
         63:67:bf:42:54:e5:65:f0:18:48:78:c3:fb:88:11:09:29:d5:
         f2:3f:db:3f:8e:b3:57:92:0e:d7:22:4f:c5:64:12:09:b6:57:
         3b:fc:4f:7c:8a:39:e5:6e:44:cd:30:86:ec:7c:4a:89:44:39:
         13:49:1b:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 19:15:42 2026 by rpki-client