Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/e47c3c4d-890c-362a-be0e-7add36135871.roa
File:                     e47c3c4d-890c-362a-be0e-7add36135871.roa (raw, json)
Hash identifier:          PB7dbgVpSbuOqU7MLyYCUmczLauQ81taJkUQt8nKy+Y=
Subject key identifier:   85:D5:65:7E:21:96:36:36:78:3F:2D:6E:A9:FB:08:E8:20:6B:4A:B1
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F4328584A268AB11E0D4B4105D888EA40
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/e47c3c4d-890c-362a-be0e-7add36135871.roa
Signing time:             Wed 11 Jun 2025 01:00:50 +0000
ROA not before:           Wed 11 Jun 2025 01:00:50 +0000
ROA not after:            Tue 09 Sep 2025 01:00:50 +0000
asID:                     14618
IP address blocks:        2620:123:20f9::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:26:8a:b1:1e:0d:4b:41:05:d8:88:ea:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: Jun 11 01:00:50 2025 GMT
            Not After : Sep  9 01:00:50 2025 GMT
        Subject: CN=3fab38ad-1c0e-453d-8ba2-383d570531fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:d9:ca:2b:fe:aa:51:f9:c1:e1:ae:f4:ef:f6:
                    be:e7:a3:4f:6a:48:db:55:a3:bd:d2:fa:7d:b9:59:
                    ac:b1:6e:43:76:1d:83:25:85:36:3d:bd:33:74:1e:
                    56:96:3e:54:cd:01:77:01:c2:14:a3:a6:7d:3f:c1:
                    58:9e:d1:c8:5c:26:27:24:97:2f:80:1b:2c:a4:11:
                    8e:bf:c6:87:23:36:6c:4d:5a:97:4a:24:88:8a:ff:
                    0c:70:93:b6:c1:8d:99:ef:62:6f:de:94:e2:3a:e8:
                    c6:2c:74:9e:1d:ea:39:a7:8a:3d:55:48:dc:a8:cd:
                    27:5d:0b:ac:4d:f4:b9:e6:47:c1:4b:b9:68:a0:88:
                    5d:b6:4c:4b:1a:09:3f:96:50:fe:8a:c3:77:a9:16:
                    79:07:45:e9:4f:ff:52:c9:5e:31:ab:16:b7:77:1b:
                    3b:4d:1a:e0:4a:14:a9:f4:44:58:bb:e4:7e:06:e7:
                    0c:83:9b:aa:c1:90:34:63:59:da:30:a4:be:5a:f5:
                    65:4c:a1:7e:0d:7e:2b:8b:fc:b8:d9:ae:19:9b:00:
                    5a:24:5f:3c:38:bb:94:f9:62:8f:5d:99:44:0e:2d:
                    a5:e2:4c:ad:98:26:b9:b2:05:40:f9:2e:0e:74:15:
                    a1:d5:8d:f2:22:49:55:80:24:be:29:48:fc:7d:15:
                    43:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:D5:65:7E:21:96:36:36:78:3F:2D:6E:A9:FB:08:E8:20:6B:4A:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/e47c3c4d-890c-362a-be0e-7add36135871.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:123:20f9::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:fd:43:a1:52:92:b3:3e:a0:2d:c6:a9:5a:82:e5:83:e4:18:
         3b:bc:41:5d:b3:04:01:02:dd:62:07:11:2f:ac:e0:97:1f:8e:
         fc:9a:52:76:c4:4b:83:d1:9e:46:56:84:bd:4a:f6:1d:49:e8:
         4c:ca:ed:ec:93:94:6c:d0:fc:db:b1:33:70:28:da:66:7c:78:
         fc:39:aa:48:ef:e9:15:d7:ff:b5:94:ef:5e:a6:d1:e6:24:44:
         84:6c:cf:2d:66:d9:08:75:da:7c:c7:de:4a:04:da:8b:c2:f8:
         33:f8:04:52:bb:25:be:be:0e:d4:b3:3a:10:c9:11:b0:9a:76:
         15:a6:3d:d9:cf:0e:e4:16:03:cc:cc:1a:30:ef:9f:85:e9:88:
         89:4d:e2:ac:4a:d1:45:e6:69:ff:1e:4a:5d:69:a0:67:17:35:
         ce:44:1f:aa:3a:af:f5:f5:71:c4:2a:b1:2e:44:70:90:ea:89:
         29:42:56:8e:e0:db:73:06:04:81:b5:fc:80:92:d9:3b:2d:25:
         5c:a1:9a:d2:0f:92:d2:13:0f:12:c7:36:f3:3d:93:4b:dc:a2:
         86:ee:5c:32:e2:d7:28:f7:22:ed:21:cb:01:94:0d:20:a8:a8:
         5c:2c:8a:55:95:cf:55:16:d2:cd:d6:f5:31:f9:b6:a3:aa:86:
         85:0c:e2:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:13:48 2025 by rpki-client