Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/4aa8fcfa-0674-34e2-bf12-0ede1debfb62.roa
File:                     4aa8fcfa-0674-34e2-bf12-0ede1debfb62.roa (raw, json)
Hash identifier:          PxQwtTL6Z1URZrLLQGyhI0R6PNem3uXzPBhzd7ruVi0=
Subject key identifier:   9D:DE:3F:38:E9:97:7F:52:23:00:87:A8:FA:21:23:10:99:EC:8B:A1
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F4328584B2CF6EA8CCE58764EA20CEA80
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/4aa8fcfa-0674-34e2-bf12-0ede1debfb62.roa
Signing time:             Sat 13 Sep 2025 01:00:33 +0000
ROA not before:           Sat 13 Sep 2025 01:00:33 +0000
ROA not after:            Fri 12 Dec 2025 02:00:33 +0000
asID:                     30103
IP address blocks:        2620:123:2098::/48 maxlen: 48
                          2620:123:2099::/48 maxlen: 48
                          2620:123:209a::/48 maxlen: 48
                          2620:123:209b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2c:f6:ea:8c:ce:58:76:4e:a2:0c:ea:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: Sep 13 01:00:33 2025 GMT
            Not After : Dec 12 02:00:33 2025 GMT
        Subject: CN=d343304c-a471-4577-a439-77168db9f96c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:92:6c:4a:65:91:3e:ab:28:00:68:67:ec:74:
                    f6:86:f3:3a:62:2f:f9:24:97:e0:3e:ef:69:5a:b6:
                    d5:64:38:05:74:f1:97:ce:fc:06:25:c1:02:fe:a4:
                    15:9a:f3:cf:a7:a0:43:02:7c:ef:36:cb:17:54:d8:
                    17:4f:50:c9:b8:7d:35:14:1c:bb:c9:76:b7:55:42:
                    56:5f:8c:29:0b:6d:a5:fe:11:c6:83:97:d9:58:fa:
                    ed:65:3a:97:6f:6a:f1:e8:e6:fb:07:db:1c:5f:7d:
                    4b:1e:f2:c8:6d:c7:6d:0c:37:96:d9:a3:54:cb:90:
                    2a:d9:94:ef:ac:0a:df:d0:a8:e0:e0:c4:13:7d:92:
                    ce:45:45:4e:6c:4a:d5:02:ab:8a:62:b1:15:88:67:
                    f4:aa:a4:91:4b:6a:e2:25:de:2d:80:c0:98:75:2c:
                    0e:c4:29:11:cf:a3:c5:a5:60:a5:aa:b3:29:2f:e7:
                    51:e5:32:d2:8a:a0:75:40:f9:e1:71:7e:e1:04:65:
                    0d:b8:b5:32:ac:16:94:0e:69:b4:db:50:73:b1:d2:
                    7a:22:20:24:c7:50:fb:56:bc:9c:00:75:31:cf:7b:
                    e6:53:e7:8c:54:ca:8b:26:6d:72:e3:01:bd:9d:9f:
                    db:a1:8d:e5:8d:28:e3:68:4b:89:c8:b8:f8:00:7e:
                    ac:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:DE:3F:38:E9:97:7F:52:23:00:87:A8:FA:21:23:10:99:EC:8B:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/4aa8fcfa-0674-34e2-bf12-0ede1debfb62.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:123:2098::/46

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:ed:59:b6:0f:e3:ca:3e:36:01:93:c5:34:8f:e0:57:16:0b:
         e5:28:06:be:ff:94:c1:c0:e2:4f:3a:c7:fb:c2:a9:73:57:08:
         be:78:78:f1:e9:fd:7e:11:d8:d1:25:9c:b4:5d:5f:87:e4:31:
         f0:8e:03:43:de:77:99:25:72:49:31:59:cb:67:1b:ad:9b:81:
         77:8f:d0:0e:67:fe:65:0a:02:16:2f:fd:07:f4:2d:bf:26:6e:
         07:15:48:0d:af:8b:d3:f1:c3:be:c6:93:27:5d:89:26:53:f7:
         02:e2:c2:2a:27:ce:6b:9b:bf:ca:2d:c5:10:97:8b:60:7e:84:
         98:ea:0c:8a:ac:9d:f6:4f:b2:7f:0c:c3:bd:ab:75:31:59:f6:
         2c:53:8a:0b:37:c2:fa:c3:4c:fb:6f:26:f7:0a:73:d0:42:45:
         f0:5d:65:82:dd:51:97:78:e3:bd:f4:da:ea:2e:5b:53:42:39:
         76:2c:25:00:39:d3:88:b0:f2:2e:2c:98:d7:9a:1e:1b:23:ad:
         10:8c:a4:96:10:fd:cd:32:db:40:06:41:6b:e2:00:87:4f:ff:
         55:d6:e1:fb:d8:f4:6d:54:fe:6c:ae:80:40:19:c8:f1:4d:66:
         0c:d9:e5:26:74:e4:69:ea:56:53:ae:69:50:cb:0b:fe:50:94:
         4b:b4:6f:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:31:34 2025 by rpki-client