Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/0165a1df-b963-39c5-a8ea-56b2f7123fb3.roa
File:                     0165a1df-b963-39c5-a8ea-56b2f7123fb3.roa (raw, json)
Hash identifier:          hZd+dUI9W0XoaJcVOt85El3jJzLvoL7PVDRP+yCeQlY=
Subject key identifier:   05:F2:B5:DF:89:22:88:1C:E4:AD:B7:62:F1:E8:9E:47:F4:DA:0A:9C
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F432858495ABEC949A67EAFDCA5DEE780
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/0165a1df-b963-39c5-a8ea-56b2f7123fb3.roa
Signing time:             Sun 30 Mar 2025 01:00:47 +0000
ROA not before:           Sun 30 Mar 2025 01:00:47 +0000
ROA not after:            Sat 28 Jun 2025 01:00:47 +0000
asID:                     30103
IP address blocks:        2620:123:20c1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 19 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5a:be:c9:49:a6:7e:af:dc:a5:de:e7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: Mar 30 01:00:47 2025 GMT
            Not After : Jun 28 01:00:47 2025 GMT
        Subject: CN=88a5aaa7-64ba-4e76-9db6-52d439200e61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:1d:fe:c1:e5:c2:77:d0:37:de:93:22:f6:31:
                    74:a4:bc:64:f1:b5:38:3b:63:d1:9b:07:ab:b6:49:
                    07:90:93:80:49:2b:b3:99:75:d4:0e:ff:82:da:38:
                    e0:0f:52:d4:b1:96:a4:63:fc:e2:4b:17:c7:84:11:
                    4b:6c:99:5e:b5:99:91:c9:9f:0b:80:24:cd:a0:bc:
                    ef:23:8c:d9:99:5c:2d:52:58:01:eb:0d:df:d2:bf:
                    c3:0f:81:06:6d:42:07:a0:d7:73:0a:7b:53:0c:51:
                    32:a6:e1:14:f1:63:7f:21:6c:17:ff:85:58:16:e8:
                    74:91:cb:5e:d6:91:fa:34:68:26:9d:a3:b5:65:fa:
                    3c:37:3d:78:10:04:7b:1c:66:d9:21:fc:68:98:82:
                    a8:80:60:37:81:3b:f5:85:ec:d8:50:71:43:77:be:
                    10:d2:62:d6:d7:4f:13:44:ac:ea:4d:f9:43:4b:c1:
                    77:1a:ed:47:4d:97:52:ce:61:ff:c7:c1:0d:10:f9:
                    d7:c3:ba:05:9b:a5:c6:3c:9f:66:a9:ac:ec:94:3a:
                    d2:c1:b7:0e:09:02:c0:46:cb:3a:41:2d:84:2c:7e:
                    a7:d8:31:0b:bc:c6:fb:4e:04:ae:e6:8a:4a:c4:e9:
                    51:4a:ff:d3:30:c1:4d:ca:14:fe:e5:89:16:8f:ae:
                    48:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:F2:B5:DF:89:22:88:1C:E4:AD:B7:62:F1:E8:9E:47:F4:DA:0A:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/0165a1df-b963-39c5-a8ea-56b2f7123fb3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:123:20c1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:85:8b:f6:80:c0:3a:6c:04:d9:65:d0:91:c5:b6:e4:84:fe:
         70:4c:e5:7c:76:01:4e:fa:d1:c5:e3:0f:52:d8:b8:43:3f:bd:
         f8:6d:59:aa:0b:01:b2:d1:2f:74:74:32:8c:cc:6a:38:d0:2d:
         ef:7b:21:04:50:d2:95:a2:2c:39:09:5a:11:7a:0d:3b:f1:3b:
         de:49:39:27:2a:52:49:69:68:52:b2:b4:c9:81:84:c5:46:95:
         d8:23:8c:b6:f1:33:59:92:35:8c:d0:78:58:f0:97:1c:09:fb:
         a1:91:d3:ff:d1:96:40:ac:42:f3:dd:67:0a:1e:8d:8b:55:ef:
         60:41:50:01:9b:44:d6:54:d5:33:a1:1c:2c:f1:52:1f:5e:2f:
         37:df:29:80:2a:93:7a:74:38:07:88:d0:a1:18:05:e4:83:b8:
         dc:3b:a8:df:3a:3e:2d:f3:ae:48:41:be:bd:4a:0a:10:fc:7a:
         c2:96:3f:e5:d1:fa:15:09:16:ab:34:d6:f5:c8:ae:7d:eb:8a:
         bc:0a:16:71:d0:4a:91:2b:4c:54:fb:26:55:5a:d9:df:75:e3:
         6e:a5:a3:b1:83:49:d6:e7:06:58:5f:1d:f0:9c:81:41:d1:bf:
         46:9d:4c:4f:1a:c2:c3:f1:47:50:e1:55:bd:35:dd:82:c5:65:
         09:18:99:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 22:32:30 2025 by rpki-client