Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/b66dab98-eb73-3e5f-84f4-a4157ba27b9e.roa
File:                     b66dab98-eb73-3e5f-84f4-a4157ba27b9e.roa (raw, json)
Hash identifier:          zmLXTxIz2y8OQj/2IbovGuXR6PZreUr6o4z4ez8oVG4=
Subject key identifier:   72:C8:06:7F:66:70:8A:B7:6D:71:58:BF:6A:3B:D0:A1:5B:3E:7F:FF
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F4328584A89A61DF13031E12439AE4140
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/b66dab98-eb73-3e5f-84f4-a4157ba27b9e.roa
Signing time:             Wed 16 Jul 2025 13:01:03 +0000
ROA not before:           Wed 16 Jul 2025 13:01:03 +0000
ROA not after:            Tue 14 Oct 2025 13:01:03 +0000
asID:                     30103
IP address blocks:        2620:123:2050::/48 maxlen: 48
                          2620:123:2051::/48 maxlen: 48
                          2620:123:2053::/48 maxlen: 48
                          2620:123:208e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:89:a6:1d:f1:30:31:e1:24:39:ae:41:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: Jul 16 13:01:03 2025 GMT
            Not After : Oct 14 13:01:03 2025 GMT
        Subject: CN=633330ac-5964-401a-8ab6-edd1b4f467fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f2:19:d7:dc:b7:28:d2:1c:e7:14:b5:5a:05:
                    f9:0c:2a:e5:be:35:20:12:cd:d9:d1:f2:bb:17:7c:
                    7b:98:7c:67:92:10:c7:f2:bd:87:b3:67:38:8e:65:
                    57:10:bd:db:c0:f3:5e:bf:7a:df:8d:b7:15:64:27:
                    28:11:c8:75:b9:02:99:93:c2:d0:7f:5f:c3:0b:87:
                    09:fe:ec:65:0e:34:a1:86:e6:52:fe:a7:27:d2:d3:
                    9f:37:86:46:da:65:60:e0:66:81:35:ff:23:b6:56:
                    02:e4:27:97:5c:04:92:01:a3:32:8f:29:e6:78:6a:
                    aa:9b:89:4e:b0:1c:d0:72:20:1f:dd:56:86:3c:ec:
                    05:8a:b8:73:07:cb:ed:30:6d:c0:aa:9c:79:94:df:
                    4c:26:9e:89:94:f2:f8:68:2a:bf:39:c9:d5:8f:96:
                    11:ef:b5:d4:6b:78:0a:10:e7:8e:2a:e4:0f:46:4d:
                    78:7b:2d:6c:26:17:4e:36:69:0b:52:36:89:0b:05:
                    21:8a:e1:1d:70:4c:bf:f1:ad:fc:e9:6f:f0:2c:b0:
                    0c:20:72:cf:e8:28:b8:d4:02:97:f5:61:00:84:bd:
                    d6:86:77:b7:c4:62:c2:94:ac:1e:2d:32:e3:67:27:
                    69:07:11:95:62:b1:e4:36:72:dd:c8:af:e3:64:8d:
                    37:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:C8:06:7F:66:70:8A:B7:6D:71:58:BF:6A:3B:D0:A1:5B:3E:7F:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/b66dab98-eb73-3e5f-84f4-a4157ba27b9e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:123:2050::/47
                  2620:123:2053::/48
                  2620:123:208e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:52:a1:eb:f6:57:1e:be:1f:f5:0b:f1:e6:4c:cf:4a:4f:13:
         bc:74:12:c1:7e:71:05:db:73:3b:46:f5:bd:82:1c:c8:8c:7f:
         35:12:20:e7:6e:bf:94:53:17:df:b4:16:82:c2:0b:11:06:7d:
         11:43:b1:d1:a0:78:cb:f2:75:4f:d9:cd:ec:11:35:f8:db:75:
         99:e8:9f:f5:00:05:fe:b3:de:ea:83:2a:77:8e:50:bb:af:6b:
         ab:8f:f5:34:a7:53:24:38:14:c8:c1:58:54:de:c0:74:d8:cb:
         6a:0e:64:9f:04:9a:52:d6:5e:d7:8e:ba:a4:7f:52:74:78:d0:
         cc:83:7d:9b:21:f3:c9:5a:77:96:4e:dc:4e:bd:f4:c8:ca:ed:
         75:ba:c0:cd:8a:65:0f:f0:b5:31:35:92:b4:48:92:20:46:49:
         5e:da:e5:2e:83:bd:61:9f:fc:32:8d:0f:27:07:05:29:29:94:
         71:57:df:f8:b9:58:8e:d5:f7:0e:9b:66:66:98:fc:9b:ed:a1:
         a0:a8:8e:cd:6d:f5:a1:35:af:a2:fe:a2:7e:6a:8d:62:1e:14:
         9a:e6:58:d9:9c:13:5f:bb:53:18:2c:39:f4:36:f5:71:55:58:
         80:ec:9a:65:7b:9d:ce:f9:85:cd:98:02:0e:45:e3:57:d3:ae:
         0e:a9:56:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 17:34:49 2025 by rpki-client