Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/18e44ea4-b598-3f56-b2a8-7861ef29958e.roa
File:                     18e44ea4-b598-3f56-b2a8-7861ef29958e.roa (raw, json)
Hash identifier:          9hsQqTskUQlwF0A1auQVaCWN7MdZiwvNyTmEKZNfFEk=
Subject key identifier:   C5:E2:04:61:F2:D6:A3:F7:7E:C2:E8:2D:FC:0C:1A:34:B4:13:0E:50
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F4328584EC0A71C5FE59FC7D83930B880
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/18e44ea4-b598-3f56-b2a8-7861ef29958e.roa
Signing time:             Fri 07 Aug 2026 01:00:12 +0000
ROA not before:           Fri 07 Aug 2026 01:00:12 +0000
ROA not after:            Thu 05 Nov 2026 02:00:12 +0000
asID:                     30103
IP address blocks:        2620:123:20c8::/48 maxlen: 48
                          2620:123:20c9::/48 maxlen: 48
                          2620:123:20ca::/48 maxlen: 48
                          2620:123:20cb::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c0:a7:1c:5f:e5:9f:c7:d8:39:30:b8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: Aug  7 01:00:12 2026 GMT
            Not After : Nov  5 02:00:12 2026 GMT
        Subject: CN=8f3ede03-b316-4cdd-a1e7-6927a76fda3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:e0:b5:5d:34:42:c2:3a:c5:23:6e:22:fd:2f:
                    b5:c3:ce:40:11:2b:63:86:ee:b4:44:df:ae:68:ef:
                    2a:e8:a3:ff:76:ab:ec:57:e8:b6:b0:f0:a1:9e:b2:
                    83:53:99:30:6b:17:e1:5d:c1:54:e4:3a:b4:94:a1:
                    fd:df:13:80:14:d8:ff:60:14:26:f6:e9:5b:0b:aa:
                    ae:dc:96:fa:a9:fa:9d:d9:5e:93:eb:0d:0e:da:6a:
                    4c:ab:6a:cb:48:7e:fd:64:24:b1:3a:eb:42:5d:6a:
                    36:01:75:1b:bd:a9:8e:37:36:ae:16:da:2b:33:16:
                    a1:9a:b8:3f:12:6d:a2:20:11:8f:4d:26:5e:48:2e:
                    db:d0:ef:19:69:a7:0d:40:a3:5d:34:03:e5:e6:38:
                    5a:9f:6c:64:c4:a7:6b:a1:bf:eb:3f:06:3e:91:1a:
                    48:6e:ad:fb:c9:ed:a5:e7:e2:16:2d:ff:54:e5:bf:
                    e4:4e:77:ec:05:8e:7a:79:a0:de:33:e8:1a:d3:39:
                    ce:cc:61:b0:4b:d8:38:b6:af:81:02:79:1d:87:d7:
                    d7:ba:87:31:32:f8:66:aa:fa:1a:d3:fc:f8:14:78:
                    d4:4e:75:86:e1:72:cb:41:3f:0d:1e:d2:ac:2c:a3:
                    af:b3:e5:08:e5:03:4c:0b:3f:34:d0:65:e0:46:75:
                    ac:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:E2:04:61:F2:D6:A3:F7:7E:C2:E8:2D:FC:0C:1A:34:B4:13:0E:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/18e44ea4-b598-3f56-b2a8-7861ef29958e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:123:20c8::/46

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:f0:94:b1:f4:5c:00:88:28:23:ef:f9:23:8f:16:e2:2f:8a:
         83:3a:bf:eb:76:b8:4b:42:ad:41:bd:90:ac:c8:ed:d9:a1:01:
         32:9a:14:08:10:fe:57:37:55:98:31:7b:d9:49:dd:4c:10:47:
         c5:5d:31:27:eb:32:7c:38:f3:70:27:0f:56:5c:45:ad:9a:b9:
         b3:54:4f:44:2b:55:56:5b:70:b9:5f:79:a4:2c:21:54:67:04:
         c4:00:9a:8c:5d:ff:9a:ba:0c:a4:66:b2:bc:ed:a9:a7:3d:eb:
         fa:c0:5b:26:35:ab:04:10:1c:fe:13:a9:6a:bc:54:24:f4:5b:
         6c:2a:dc:4f:19:e6:32:d6:75:5f:82:cb:a4:ae:bf:0d:21:52:
         5e:18:f4:b4:f9:1e:10:1b:ba:8d:6c:64:81:54:9f:8d:e7:4e:
         75:da:f3:ae:a9:be:d2:0b:c5:a3:a1:77:6c:11:d2:c7:7a:a5:
         96:7b:6e:95:fb:64:e2:b0:5c:b6:8c:f2:7e:e9:cc:b9:54:67:
         c4:db:e6:83:d8:c9:a6:23:0c:0c:88:0d:17:9c:48:76:87:86:
         29:b4:46:ed:de:9f:8b:d5:dd:70:96:46:24:e6:ac:8e:58:dd:
         d9:ce:43:36:d0:bf:c9:4e:52:cf:de:aa:62:a6:1d:c8:28:ad:
         66:51:bb:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 07:18:23 2026 by rpki-client