Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/9c6c3dcf-7e8f-3ee7-bcca-e9363f66db3b.roa
File:                     9c6c3dcf-7e8f-3ee7-bcca-e9363f66db3b.roa (raw, json)
Hash identifier:          4AlMoa2XVWtRoip5MGla+D8jhNqwU0urAWIXvOxHYBA=
Subject key identifier:   0A:BE:04:CD:EC:39:A9:99:D0:54:6D:41:DF:CC:E2:53:AE:B1:67:40
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F4328584F497645693D2B62E110952AC0
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/9c6c3dcf-7e8f-3ee7-bcca-e9363f66db3b.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     30103
IP address blocks:        2620:123:2009::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 25 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:76:45:69:3d:2b:62:e1:10:95:2a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=fdebd96c-8c32-48a6-9a25-64eb5aa60ae7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:66:fc:96:f5:62:2f:2b:b6:b4:da:f1:99:08:
                    b1:1f:f5:93:47:6d:87:9e:ad:06:74:f3:27:13:55:
                    a4:3f:4e:c2:b9:d4:45:6b:08:b8:7b:dd:42:18:e7:
                    81:de:8e:cd:fb:71:9e:31:55:fa:60:49:12:76:7d:
                    86:69:7f:ee:bc:3d:0f:31:49:0a:62:4f:32:52:fd:
                    14:1e:9b:6c:9e:e9:aa:88:c2:32:ee:d3:9e:3b:e3:
                    72:6f:2a:15:c2:cb:ee:16:14:ad:ed:97:0f:7a:4c:
                    e0:6f:bc:1c:f2:9d:90:f3:fa:5d:09:ec:a7:31:5f:
                    e8:a4:b6:43:c8:55:86:73:87:ec:5d:37:40:24:9c:
                    a0:dd:80:a5:ae:e1:db:ab:95:72:1e:32:77:ed:a2:
                    c5:84:c7:f7:2d:b2:50:dd:a5:b0:7f:78:89:e4:7c:
                    08:1d:94:41:b2:28:50:09:5e:08:f4:3f:3e:30:a7:
                    c0:2b:44:8a:ab:bf:29:0c:94:e2:ba:5c:61:36:c9:
                    ba:59:1f:d9:24:da:89:59:21:fc:20:45:17:74:ed:
                    1c:8b:4b:1c:92:44:38:fe:2e:cd:25:e5:b8:09:0c:
                    fd:69:c9:67:01:c0:95:71:76:05:46:77:b8:02:6b:
                    63:e5:98:bb:dd:e8:77:64:2f:f8:28:55:66:fc:54:
                    d2:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:BE:04:CD:EC:39:A9:99:D0:54:6D:41:DF:CC:E2:53:AE:B1:67:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/9c6c3dcf-7e8f-3ee7-bcca-e9363f66db3b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:123:2009::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:e8:39:bb:ff:1b:45:77:3e:95:59:14:16:23:39:c4:8a:ba:
         e4:9c:c9:ab:06:24:19:f3:9b:87:d5:58:e0:0f:a9:4c:52:9a:
         16:da:89:38:c7:42:b8:75:3f:32:e3:5f:48:79:f2:6e:00:45:
         94:65:6d:8d:ae:69:f7:9c:40:b9:a3:bc:f6:83:f9:50:8b:f0:
         57:d1:27:89:d7:e5:e8:cd:cd:ee:e1:03:0a:df:25:ac:59:b6:
         98:f4:c8:c8:93:99:0e:bb:5c:65:ff:e3:d8:99:c3:cd:9d:e0:
         fb:6f:7f:32:59:81:13:10:37:4f:7f:e9:3c:bd:f4:e7:75:71:
         0b:21:98:c8:aa:ae:99:5b:7e:be:e3:a8:63:7b:09:5f:50:e3:
         fc:5e:01:4f:ae:38:bf:c2:f8:f0:42:76:3d:70:86:70:32:46:
         4b:66:c1:74:86:65:5a:72:cb:92:bd:f1:05:03:90:af:7a:76:
         99:fd:dd:53:7b:4e:15:27:47:1b:bb:86:a1:65:5b:20:20:a8:
         42:a0:16:45:71:b9:21:37:92:2a:36:33:8c:37:d0:66:06:3c:
         09:40:63:2a:27:83:53:50:b9:a7:7f:4f:ae:e0:d0:5a:43:72:
         dc:05:89:e6:88:9c:c6:7a:e6:0d:4f:99:df:02:b4:6d:df:4f:
         ba:6f:51:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 10:19:34 2026 by rpki-client