Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/e6a05c39-8b32-3b27-98c2-410b4010156f.roa
File:                     e6a05c39-8b32-3b27-98c2-410b4010156f.roa (raw, json)
Hash identifier:          IRz4X1tcs1HLtH5TleuUmTyanYElBR7Nsx90B5cbjq8=
Subject key identifier:   8C:5C:83:64:CB:8B:EE:99:58:6B:BB:FD:11:04:78:53:84:12:F4:7A
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F4328584E9A7FD328B7895D54780B2ADA
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/e6a05c39-8b32-3b27-98c2-410b4010156f.roa
Signing time:             Fri 24 Jul 2026 09:00:12 +0000
ROA not before:           Fri 24 Jul 2026 09:00:12 +0000
ROA not after:            Thu 22 Oct 2026 09:00:12 +0000
asID:                     30103
IP address blocks:        2620:123:2021::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9a:7f:d3:28:b7:89:5d:54:78:0b:2a:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: Jul 24 09:00:12 2026 GMT
            Not After : Oct 22 09:00:12 2026 GMT
        Subject: CN=5717febc-5f46-4235-be74-89d50d14203f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:b8:af:3f:81:02:d3:1d:e9:06:ca:f3:18:3e:
                    4c:13:d6:ba:ba:dd:0f:09:b4:2b:11:4f:e7:7c:76:
                    86:39:ce:89:d4:b5:71:22:94:6c:dd:55:2e:ff:75:
                    eb:da:30:36:bb:20:ed:54:3b:85:16:3e:d6:9e:57:
                    83:cd:7a:09:68:dc:77:9b:4d:a8:74:b0:23:27:60:
                    ce:de:16:29:95:32:16:07:2c:2a:29:aa:a4:21:f5:
                    8b:07:23:17:39:90:7c:6e:ea:12:0e:5d:1b:de:5d:
                    70:7b:d2:2b:71:3b:90:ee:35:9e:1b:b1:51:a5:2b:
                    9d:df:c4:9f:4c:d8:da:f2:d9:88:6d:1c:26:24:a9:
                    4c:c4:d1:3b:84:1f:4d:1e:93:b1:42:a6:89:5f:88:
                    bd:ac:d8:b4:33:cf:64:f6:8c:f0:3b:a3:79:09:16:
                    00:2a:41:05:d6:f3:e9:51:d1:e3:9b:12:f3:2d:17:
                    ed:8b:a7:e8:44:66:a1:1c:d8:1f:b3:58:6e:62:38:
                    51:62:d4:c0:2e:30:b5:9f:dd:52:f8:57:c5:a4:f1:
                    da:76:f3:fa:48:39:58:70:22:77:c3:d0:c7:b0:38:
                    b9:50:9f:ff:d9:d7:8a:51:80:49:2f:ee:34:32:d6:
                    48:ef:d0:7f:19:b9:3c:cc:e0:be:cf:fb:0f:e3:cb:
                    84:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:5C:83:64:CB:8B:EE:99:58:6B:BB:FD:11:04:78:53:84:12:F4:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/e6a05c39-8b32-3b27-98c2-410b4010156f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:123:2021::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:39:9c:e6:d3:6e:d4:33:df:81:82:52:8c:d4:7d:1f:41:05:
         9e:fc:75:d3:8e:63:d5:39:5e:d6:19:49:10:ae:76:5c:65:fd:
         96:e0:3c:c3:b0:7b:9e:c9:fa:c1:af:f3:47:ab:3f:9f:e4:a8:
         c5:2e:23:dc:a0:77:b2:eb:de:b8:65:83:a9:d3:17:a4:a3:46:
         b6:15:0b:57:0c:72:c1:1e:91:bf:64:86:78:68:9e:55:b7:65:
         0b:95:3b:70:a6:46:46:8b:f8:c9:a3:a4:79:2f:42:c9:48:ff:
         ae:11:87:6c:cd:57:68:bf:05:37:ad:44:71:b3:1d:b8:a2:3f:
         57:24:c0:d9:fe:6e:83:aa:8c:b1:25:c5:2c:d1:ed:45:47:3b:
         14:0f:09:0d:1f:41:95:10:93:86:34:67:aa:e3:38:cf:b8:ff:
         36:a0:d6:f2:22:81:94:89:c2:df:e1:bd:c2:c0:10:99:1d:c8:
         5c:2a:ce:40:9e:bc:cf:16:d7:07:5b:13:03:1d:15:eb:72:6e:
         61:c9:fe:e3:a8:37:6d:52:a9:b9:1b:22:e8:b6:68:2a:91:44:
         47:12:cd:95:fa:0b:41:19:91:4e:a3:df:2b:53:d0:f3:3b:c7:
         fe:b2:3f:b0:84:46:69:d2:13:55:72:08:14:1e:cb:52:71:5b:
         1d:a9:e9:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:51:17 2026 by rpki-client