Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/18e44ea4-b598-3f56-b2a8-7861ef29958e.roa
File:                     18e44ea4-b598-3f56-b2a8-7861ef29958e.roa (raw, json)
Hash identifier:          YGu7ANx/edMCe0HtAQxtCXoaV3BK9BLoLQBreLdPuIY=
Subject key identifier:   3E:17:27:74:48:C5:61:4E:BB:91:62:85:6A:35:33:EE:62:F6:E5:8D
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F4328584B7DECA5FF88CBAABD84388180
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/18e44ea4-b598-3f56-b2a8-7861ef29958e.roa
Signing time:             Sun 12 Oct 2025 01:00:30 +0000
ROA not before:           Sun 12 Oct 2025 01:00:30 +0000
ROA not after:            Sat 10 Jan 2026 02:00:30 +0000
asID:                     30103
IP address blocks:        2620:123:20c8::/48 maxlen: 48
                          2620:123:20c9::/48 maxlen: 48
                          2620:123:20ca::/48 maxlen: 48
                          2620:123:20cb::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7d:ec:a5:ff:88:cb:aa:bd:84:38:81:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: Oct 12 01:00:30 2025 GMT
            Not After : Jan 10 02:00:30 2026 GMT
        Subject: CN=3926dec4-6a4b-4f82-a959-c60268d89d8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:56:45:5a:96:03:7b:13:5b:25:11:cf:5a:ef:
                    4f:0f:23:44:dc:ff:ea:e7:64:d9:9d:42:fd:a9:96:
                    8c:ea:b7:a5:78:c0:40:10:2d:79:64:db:00:0c:a5:
                    ab:c7:df:18:25:4e:59:8b:ef:e5:2a:21:d6:36:db:
                    d3:80:77:80:bb:e6:3c:88:8b:68:1b:b7:2e:b9:5b:
                    c8:8f:64:bf:d9:39:97:0c:9b:d0:17:af:0f:e1:2f:
                    b1:80:1e:9f:56:19:e3:a7:58:d1:6b:27:b3:01:ff:
                    58:19:c6:56:a6:da:92:7c:9f:83:84:6b:60:2e:51:
                    cf:82:5c:24:56:e7:bb:2e:fe:81:57:74:e5:ba:d4:
                    c1:52:09:10:5c:23:4d:1b:7c:5e:05:b6:9c:b2:25:
                    d5:5b:dd:8b:53:9f:76:f3:e5:80:ca:af:5c:8f:9d:
                    25:0b:43:65:b9:84:7a:87:d2:20:aa:a7:ee:67:c3:
                    0f:fb:72:56:04:bb:24:f2:a5:b3:06:b7:8c:7d:81:
                    15:39:f0:03:00:f8:43:65:de:0f:56:14:36:a5:18:
                    04:6e:b9:0f:68:22:00:1d:c4:51:9e:27:9a:b9:39:
                    88:07:5f:79:89:b6:0c:03:92:cc:82:2e:52:c3:3c:
                    ed:9f:31:4d:2e:a4:f2:14:c2:4c:88:d2:c8:bf:c6:
                    1d:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:17:27:74:48:C5:61:4E:BB:91:62:85:6A:35:33:EE:62:F6:E5:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/18e44ea4-b598-3f56-b2a8-7861ef29958e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:123:20c8::/46

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:d4:2c:76:ac:ff:d9:d6:f9:a1:92:1c:42:bf:21:c5:66:a9:
         50:47:0b:eb:4f:5e:5a:71:07:41:bb:f7:d0:3a:80:1a:94:aa:
         a4:6c:7b:29:e0:90:f4:7d:98:a1:45:a4:68:46:0e:d1:77:3d:
         af:f3:2e:ac:02:20:d9:39:d2:4f:f4:86:52:d7:2d:12:77:d3:
         20:8c:ba:3e:81:2f:e0:18:e7:a2:8a:7b:14:75:96:3f:32:41:
         4f:2c:e8:bb:63:88:69:2a:22:27:24:27:b4:b7:b1:82:a0:1e:
         66:11:bf:5e:93:6e:18:83:e2:a1:7c:68:98:5e:ad:15:64:38:
         ac:83:ce:98:ae:08:5e:ab:b7:65:03:a6:16:15:7b:14:5b:0d:
         c8:fe:82:99:06:40:74:d3:2b:3a:48:51:0c:e6:0e:1c:23:7f:
         3e:46:f9:f3:50:65:eb:df:d0:1e:2c:1e:fa:79:50:dd:5e:ff:
         d6:9f:d0:6c:ad:b5:86:29:8f:d5:b9:a4:d2:9c:ef:1f:e1:31:
         f5:4c:01:61:59:14:11:9a:e7:34:a8:6b:83:c1:e6:a9:9c:22:
         c6:64:b0:1f:9a:bd:f8:7e:b7:ae:d7:3b:f4:0b:97:7a:3f:e1:
         1d:b3:4b:25:a9:39:46:80:8e:29:3d:2a:0f:45:20:0f:0f:c1:
         7d:26:cf:ab
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEt97KX/iMuqvYQ4gYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGM0NTVlNTgtNjE4OS00ZjI4LWI4MDMtNjFhOTY1YTIx
YzY1MB4XDTI1MTAxMjAxMDAzMFoXDTI2MDExMDAyMDAzMFowLzEtMCsGA1UEAxMk
MzkyNmRlYzQtNmE0Yi00ZjgyLWE5NTktYzYwMjY4ZDg5ZDhmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAylZFWpYDexNbJRHPWu9PDyNE3P/q52TZnUL9
qZaM6releMBAEC15ZNsADKWrx98YJU5Zi+/lKiHWNtvTgHeAu+Y8iItoG7cuuVvI
j2S/2TmXDJvQF68P4S+xgB6fVhnjp1jRayezAf9YGcZWptqSfJ+DhGtgLlHPglwk
Vue7Lv6BV3TlutTBUgkQXCNNG3xeBbacsiXVW92LU5928+WAyq9cj50lC0NluYR6
h9IgqqfuZ8MP+3JWBLsk8qWzBreMfYEVOfADAPhDZd4PVhQ2pRgEbrkPaCIAHcRR
nieauTmIB195ibYMA5LMgi5SwzztnzFNLqTyFMJMiNLIv8YdEQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFD4XJ3RIxWFOu5FihWo1M+5i9uWNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1
NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5NjVhMjFjNjUvMThlNDRlYTQtYjU5OC0z
ZjU2LWIyYTgtNzg2MWVmMjk5NThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGM0NTVlNTgtNjE4OS00ZjI4LWI4
MDMtNjFhOTY1YTIxYzY1L2RjNDU1ZTU4LTYxODktNGYyOC1iODAzLTYxYTk2NWEy
MWM2NS5jcmwwHwYDVR0jBBgwFoAUZka/BM8QPkyukKDmzSU2ULZFvD8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5
NjVhMjFjNjUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcCJiABIyDI
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAJDULHas/9nW+aGSHEK/IcVmqVBHC+tPXlpxB0G799A6gBqUqqRs
eyngkPR9mKFFpGhGDtF3Pa/zLqwCINk50k/0hlLXLRJ30yCMuj6BL+AY56KKexR1
lj8yQU8s6LtjiGkqIickJ7S3sYKgHmYRv16TbhiD4qF8aJherRVkOKyDzpiuCF6r
t2UDphYVexRbDcj+gpkGQHTTKzpIUQzmDhwjfz5G+fNQZevf0B4sHvp5UN1e/9af
0GyttYYpj9W5pNKc7x/hMfVMAWFZFBGa5zSoa4PB5qmcIsZksB+avfh+t67XO/QL
l3o/4R2zSyWpOUaAjik9Kg9FIA8PwX0mz6s=
-----END CERTIFICATE-----
Generated at Mon Oct 20 16:31:30 2025 by rpki-client