Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/f0438e16-a080-38d5-a4e4-691ad6399eff.roa
File:                     f0438e16-a080-38d5-a4e4-691ad6399eff.roa (raw, json)
Hash identifier:          j9C1/+eT+J3jzCJmH57BxZ8LPWwsBMFOjUkSSv8lDDs=
Subject key identifier:   BC:60:59:FD:F7:3B:B8:0E:C9:9A:0D:23:DB:05:4D:76:A6:02:DD:76
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F4328584D4D5A6A6978CED8D16A9E2E80
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/f0438e16-a080-38d5-a4e4-691ad6399eff.roa
Signing time:             Fri 27 Mar 2026 01:00:31 +0000
ROA not before:           Fri 27 Mar 2026 01:00:31 +0000
ROA not after:            Thu 25 Jun 2026 01:00:31 +0000
asID:                     30103
IP address blocks:        2620:123:202c::/48 maxlen: 48
                          2620:123:202d::/48 maxlen: 48
                          2620:123:202e::/48 maxlen: 48
                          2620:123:202f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:4d:5a:6a:69:78:ce:d8:d1:6a:9e:2e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: Mar 27 01:00:31 2026 GMT
            Not After : Jun 25 01:00:31 2026 GMT
        Subject: CN=835a98f0-3b50-4d48-a124-bdcb973fc3a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:d4:09:67:1c:00:8b:37:83:48:2d:27:1a:47:
                    ae:99:b1:cb:e3:51:1e:5d:70:5f:61:53:9c:2b:a5:
                    60:39:61:e6:8f:f0:fe:d1:92:1a:ef:4e:a2:d0:46:
                    70:d8:b7:b6:2c:72:83:a0:d4:b9:31:1e:65:eb:25:
                    e3:d5:28:2e:46:db:25:f6:ee:44:b9:3a:a1:77:33:
                    ee:c1:23:2f:92:2a:11:8b:d4:cc:f5:7d:1f:1f:34:
                    d1:d7:bf:f5:02:96:2d:36:88:bb:ba:61:bd:42:e4:
                    88:d3:75:fd:db:13:5a:95:78:9e:70:14:e0:e1:fd:
                    44:d4:07:4e:dd:e3:b5:09:3b:80:5b:13:82:b5:72:
                    57:4c:8f:97:48:d4:2c:a6:65:f2:14:b3:b0:34:91:
                    ec:cf:bb:24:c9:ea:e8:87:07:39:e9:86:b8:80:6b:
                    55:27:68:b5:27:f1:a7:51:c3:5e:0c:04:4b:69:dc:
                    3b:6b:35:48:89:f0:c0:8f:66:ca:59:54:91:0a:d4:
                    08:88:9f:7c:b0:03:c3:b7:01:19:f3:b4:0b:1d:da:
                    c8:cc:2d:5a:a7:05:ee:ff:5a:89:34:6a:82:2e:74:
                    0a:2b:d2:91:85:f0:2b:36:97:2e:2a:3f:ee:e1:8e:
                    00:60:19:81:ed:9f:9e:de:5e:54:95:f7:db:ee:41:
                    3a:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:60:59:FD:F7:3B:B8:0E:C9:9A:0D:23:DB:05:4D:76:A6:02:DD:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/f0438e16-a080-38d5-a4e4-691ad6399eff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:123:202c::/46

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:b7:95:19:d1:90:a8:18:9a:f0:ae:ca:69:19:c0:79:bb:f3:
         d2:65:5d:c5:f4:c0:1e:45:24:d2:81:68:8b:34:e0:61:c1:f7:
         35:b3:e5:3b:09:d6:b8:7b:3f:cf:b8:9a:d2:61:d8:41:9a:10:
         8f:b2:ba:82:75:87:39:86:88:01:b4:16:a3:02:45:b3:4b:de:
         57:f6:86:bf:88:2a:6e:f7:7d:8b:67:92:18:2a:b5:6d:4d:c1:
         00:ff:34:4c:69:b5:e0:e0:5d:fe:d1:13:67:b9:05:92:22:37:
         92:e2:76:6c:7e:ba:2b:ad:79:96:80:13:94:2f:59:64:f7:eb:
         8c:fb:34:bf:a6:62:14:51:f1:49:bb:3a:42:4a:a8:52:81:2c:
         04:22:30:3d:a5:ab:64:b1:a3:6d:ff:04:f3:bc:ed:14:45:10:
         58:1c:73:44:10:e2:51:1d:3f:47:34:f8:51:1a:a5:b9:00:82:
         64:e2:34:e4:83:24:51:09:c8:38:71:67:1f:21:df:ca:00:3d:
         e5:fc:8d:25:c2:3b:6e:e3:79:7c:b1:40:83:eb:b3:6c:2c:85:
         3e:f4:6b:3d:8f:ac:cd:0d:4b:ab:e2:9b:ce:2c:99:9b:e5:c8:
         4f:0f:4b:e2:cd:3c:ad:0c:9d:fa:c0:dd:af:e7:fe:bb:83:d7:
         c6:dd:60:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:39:58 2026 by rpki-client