Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/8b9ff0c7-d69b-3250-964d-135ee9dd2454.roa
File:                     8b9ff0c7-d69b-3250-964d-135ee9dd2454.roa (raw, json)
Hash identifier:          zDU9JEe3lJTqfNoExyVhYmJdN9DrOeqbEI+Y36LOSjY=
Subject key identifier:   B2:0C:FE:A5:0E:44:E4:B1:9C:08:19:E6:D0:14:DA:72:49:9E:FB:69
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F43285849BDDA1D821BDD784C8FB6A000
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/8b9ff0c7-d69b-3250-964d-135ee9dd2454.roa
Signing time:             Sun 04 May 2025 13:01:00 +0000
ROA not before:           Sun 04 May 2025 13:01:00 +0000
ROA not after:            Sat 02 Aug 2025 13:01:00 +0000
asID:                     30103
IP address blocks:        2620:123:2024::/48 maxlen: 48
                          2620:123:2025::/48 maxlen: 48
                          2620:123:2026::/48 maxlen: 48
                          2620:123:2027::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bd:da:1d:82:1b:dd:78:4c:8f:b6:a0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: May  4 13:01:00 2025 GMT
            Not After : Aug  2 13:01:00 2025 GMT
        Subject: CN=da24c3a0-a84d-4fad-8f77-59cab07a472f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:23:16:93:d0:ef:03:e6:6b:8a:d6:86:07:99:
                    93:f9:ab:32:c4:8c:0d:44:08:33:90:c5:99:d0:eb:
                    cb:17:d5:33:4f:ec:07:3b:8f:41:4c:a6:1f:76:30:
                    0a:86:a5:18:c0:cf:c2:a9:51:90:b6:88:da:1a:c1:
                    6c:15:88:65:ba:8f:c9:2f:bc:8d:78:89:cd:1f:67:
                    2d:b1:91:fa:8a:4b:8e:be:41:ab:d2:28:d3:36:b8:
                    79:83:78:43:df:7e:4e:62:bf:5f:7e:81:98:14:09:
                    0d:c2:8f:c2:38:9f:8c:b7:38:a0:98:36:c9:81:d9:
                    bf:7e:3b:2e:34:ca:e5:9f:ff:08:48:82:66:b1:84:
                    6e:d2:6d:56:8a:9f:5b:27:65:91:68:66:a8:4a:98:
                    d0:e5:87:b5:19:94:53:1a:f2:be:39:5f:af:19:14:
                    44:83:fe:a4:5c:84:79:86:13:12:c5:72:4c:c5:05:
                    c3:67:eb:33:f4:ee:52:e5:6f:73:1e:16:a5:1c:fd:
                    ed:d2:8a:cb:9b:3d:fc:cf:c8:57:49:d2:4d:69:1c:
                    a5:ff:87:4b:d5:dd:1a:df:88:6b:e3:17:4f:ab:d1:
                    56:5f:02:c7:3a:45:37:9a:05:70:79:58:cc:3c:bc:
                    a2:be:c1:b6:2c:99:ef:17:52:ed:fd:5a:b8:3e:77:
                    25:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:0C:FE:A5:0E:44:E4:B1:9C:08:19:E6:D0:14:DA:72:49:9E:FB:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/8b9ff0c7-d69b-3250-964d-135ee9dd2454.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:123:2024::/46

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:af:9a:27:5d:06:6c:58:f9:38:99:18:43:02:0e:11:48:75:
         30:06:5d:97:15:40:ef:bb:af:7e:0b:9a:3b:c5:7d:53:df:78:
         97:b5:f5:ca:32:33:c4:64:af:6c:a4:54:06:4a:a5:4a:bf:9c:
         29:30:70:58:d1:ac:de:c1:e1:08:6a:34:25:89:29:54:43:f9:
         5a:cd:13:ee:ed:89:b5:78:76:d8:8d:55:41:bb:33:e3:3a:49:
         c0:37:f3:86:64:bc:47:ec:bf:02:5f:aa:c0:47:bc:27:ee:eb:
         55:ff:81:d4:a8:e9:2d:96:cb:26:e2:13:c0:d3:e2:7f:b7:99:
         b5:76:a7:c2:7d:3a:d0:84:d8:ec:c7:3f:bb:51:2c:08:7d:85:
         59:1f:24:8e:f3:4b:d5:96:85:40:53:4c:67:2f:f5:4a:14:50:
         44:ac:e2:f8:7e:fe:a4:71:b6:50:59:d3:ad:c9:08:e9:e4:bf:
         38:a9:af:2c:7f:27:9e:bc:14:68:a0:9d:50:17:89:57:c8:21:
         65:14:86:a9:2f:85:7f:98:7e:f7:3a:63:4f:c3:5b:3f:77:86:
         d5:e0:4f:bb:78:cf:50:a2:f6:fa:c4:c5:02:21:f3:93:57:6b:
         c6:1b:c3:02:ac:5d:f0:ab:c2:eb:eb:2d:5b:a8:68:f7:a6:ca:
         09:ca:2d:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:28:46 2025 by rpki-client