Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/e019ea74-af0c-3a69-8081-bd191acee178.roa
File:                     e019ea74-af0c-3a69-8081-bd191acee178.roa (raw, json)
Hash identifier:          1UgHTMVMWZRYjp4TWzgTtNphuM1H886gGgh1VPPCiNw=
Subject key identifier:   CF:09:9F:95:F5:65:08:7B:72:75:5E:7F:24:98:04:E2:8F:98:AE:CF
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F4328584E3B947D6CC191DC516CEC8880
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/e019ea74-af0c-3a69-8081-bd191acee178.roa
Signing time:             Sat 20 Jun 2026 09:00:13 +0000
ROA not before:           Sat 20 Jun 2026 09:00:13 +0000
ROA not after:            Fri 18 Sep 2026 09:00:13 +0000
asID:                     30103
IP address blocks:        2620:123:209c::/48 maxlen: 48
                          2620:123:209d::/48 maxlen: 48
                          2620:123:209e::/48 maxlen: 48
                          2620:123:209f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3b:94:7d:6c:c1:91:dc:51:6c:ec:88:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: Jun 20 09:00:13 2026 GMT
            Not After : Sep 18 09:00:13 2026 GMT
        Subject: CN=13c1ef63-f4fd-4f80-942a-396d8dbd8dfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:81:1e:9c:bd:a4:9f:fb:dd:83:38:16:66:14:
                    ba:95:04:1f:3a:8b:62:b0:47:54:55:db:e0:26:13:
                    64:90:8a:a7:cd:cb:b8:7b:cd:99:0b:99:f2:08:a9:
                    72:88:d9:b6:d3:99:52:49:ed:27:b6:f7:a9:33:24:
                    80:c1:73:44:ce:f9:b7:19:ba:6c:93:42:e3:d6:4c:
                    ce:1a:5b:11:ad:a1:66:93:b6:4b:5e:5d:69:37:78:
                    f3:38:65:de:cc:f5:fe:23:3b:4f:a2:e1:1d:ab:34:
                    1b:e3:b5:13:6e:d1:1e:99:e8:50:e7:1e:4a:f9:cb:
                    7a:d8:25:00:43:a4:83:50:a5:c3:3c:59:34:6b:72:
                    70:8b:9c:9d:1c:5b:63:67:6d:70:9d:03:13:8e:f3:
                    f9:38:7f:6f:7e:a4:ed:a2:d5:e1:d1:2a:3d:36:26:
                    a5:bd:67:e7:b8:35:d8:b8:fe:4b:bb:38:1a:a7:24:
                    63:9f:61:e3:68:d2:f8:30:10:df:f1:9a:ff:9e:f5:
                    d7:ff:67:46:b9:85:30:38:14:ce:4e:c1:3a:cc:fd:
                    02:39:8d:68:26:98:6e:28:f9:4c:77:38:a2:fc:4b:
                    7c:f5:6c:ff:29:e6:fb:e7:53:66:92:69:19:e9:b4:
                    83:69:69:3a:92:25:e9:7c:ed:3e:0f:45:57:1d:de:
                    dd:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:09:9F:95:F5:65:08:7B:72:75:5E:7F:24:98:04:E2:8F:98:AE:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/e019ea74-af0c-3a69-8081-bd191acee178.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:123:209c::/46

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:7b:fc:96:95:2c:7b:ab:08:df:07:f4:01:9f:d0:aa:95:dd:
         1c:b9:c0:4f:bb:70:b3:25:9f:49:6f:7f:4c:8b:f6:ff:7f:1d:
         87:ff:f1:42:8e:f5:48:e9:b6:5d:91:55:d0:1d:98:d2:60:0a:
         69:4e:7e:50:bc:ec:f2:68:6c:d0:c6:94:1f:64:4d:e7:fb:1f:
         3d:11:11:8e:96:cb:93:0b:c6:b9:e9:e2:7d:18:61:6e:0b:0f:
         ad:21:4c:d8:f0:68:31:17:2a:43:7d:3b:f1:b6:af:98:30:66:
         06:52:9f:b9:d0:5e:64:03:9f:5f:ef:0d:bf:d9:3d:82:26:60:
         7b:75:9c:55:52:2e:db:d7:35:61:7a:9f:63:46:64:b3:9d:83:
         43:74:77:6f:13:5b:38:c0:92:fd:43:d7:e7:0b:32:6e:3c:67:
         79:58:ed:d8:25:34:e7:0e:88:13:28:98:b8:63:e9:f0:ce:29:
         4f:0a:3f:40:60:4c:e4:10:15:60:73:cf:27:c7:4c:b5:2b:e7:
         3d:b8:bc:ef:56:04:cc:e1:2a:77:c8:dc:37:50:dc:90:79:a0:
         4f:a7:b4:be:90:d8:f5:b9:07:17:5c:7f:dd:c5:33:9b:95:1c:
         64:48:82:9a:2c:25:80:00:9c:1a:7b:f6:18:f1:f5:3f:24:5a:
         d5:f3:7d:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:22:50 2026 by rpki-client