Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/cd942d33-d988-3945-ba55-c98341144167.roa
File:                     cd942d33-d988-3945-ba55-c98341144167.roa (raw, json)
Hash identifier:          ANo90nUAskqFIEKE/ccKFkFuS+NJg6otlMlQNLAh7/U=
Subject key identifier:   AB:8E:4D:39:E1:D1:F2:BC:03:55:E5:71:8A:8A:D1:EE:2F:F4:C0:22
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F4328584B2CF6EA78404BF3C0A3469F00
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/cd942d33-d988-3945-ba55-c98341144167.roa
Signing time:             Sat 13 Sep 2025 01:00:33 +0000
ROA not before:           Sat 13 Sep 2025 01:00:33 +0000
ROA not after:            Fri 12 Dec 2025 02:00:33 +0000
asID:                     30103
IP address blocks:        2620:123:2086::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2c:f6:ea:78:40:4b:f3:c0:a3:46:9f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: Sep 13 01:00:33 2025 GMT
            Not After : Dec 12 02:00:33 2025 GMT
        Subject: CN=f8ec1f97-3378-4005-a346-7dc25073a4d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:b1:47:d1:43:27:d7:ea:7d:1a:48:18:64:61:
                    b8:e2:5f:11:eb:b4:01:88:dd:5c:ef:05:72:5c:70:
                    a7:4f:8e:0e:0b:c3:e8:25:f9:3d:79:6d:93:af:cf:
                    e2:ab:92:3f:19:db:d5:fb:49:91:df:89:61:63:f2:
                    fb:a1:f2:82:67:62:6f:15:61:78:e9:6c:15:e1:21:
                    70:ba:6b:2d:b2:59:2c:69:06:a7:07:16:92:81:ca:
                    9e:66:74:53:37:07:d4:b9:51:e8:be:8a:46:da:09:
                    27:9c:9a:71:dd:93:51:a3:f3:47:ec:66:52:30:f5:
                    1f:b6:be:b4:bc:ed:2b:9e:bc:40:16:bd:05:bd:0f:
                    58:2a:16:6f:84:6a:01:7c:06:39:76:92:93:5e:0e:
                    39:97:2a:b4:b5:d7:52:b2:40:39:f0:f6:60:98:8d:
                    31:08:cc:48:63:f0:3e:e1:74:8e:fb:32:de:af:9c:
                    da:13:26:54:f0:69:65:81:a8:2a:dd:dc:d2:93:4f:
                    01:6a:7e:fb:b9:12:a0:80:ff:24:e8:80:90:cd:dc:
                    38:5b:ef:0e:67:25:bc:c3:dd:d7:48:06:10:01:f9:
                    5a:29:7d:4a:77:df:43:ed:74:69:11:f7:40:e7:b1:
                    41:e9:65:20:4d:3c:69:f2:45:1a:90:71:fa:5c:1c:
                    fb:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:8E:4D:39:E1:D1:F2:BC:03:55:E5:71:8A:8A:D1:EE:2F:F4:C0:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/cd942d33-d988-3945-ba55-c98341144167.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:123:2086::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:a6:7d:bc:2b:00:35:13:1e:5b:a0:75:df:da:b9:f1:1e:1c:
         87:65:8c:8d:50:6a:61:6e:da:27:32:70:75:78:6b:5d:bb:12:
         5d:17:cc:d0:89:7a:94:1c:99:15:3a:84:24:31:8c:60:be:dc:
         66:39:a4:2c:ad:79:11:4d:53:9f:10:25:fd:db:85:61:28:de:
         e2:d1:16:3d:9c:e9:d6:a3:de:d6:24:32:fa:09:26:c1:a7:d5:
         72:9b:07:88:c2:64:78:8f:a5:37:eb:16:51:0b:60:46:0f:c2:
         48:8c:f9:01:1b:84:b9:84:68:41:2a:81:6f:c6:70:b8:8c:83:
         91:db:62:45:01:86:58:e7:81:3b:71:e4:c0:02:c1:f0:de:c2:
         30:ce:84:01:c3:61:8b:29:7c:fc:8f:ea:50:b5:71:86:e4:f6:
         67:19:b4:89:f6:54:4f:1b:f0:18:22:14:d9:b6:73:11:45:e6:
         4b:f7:5d:f1:bc:74:30:42:4d:ae:3e:ac:ea:00:f3:80:48:9c:
         3b:7b:65:ae:db:6e:dc:4f:a1:d1:ac:00:1a:9e:e4:39:50:3d:
         51:77:80:d6:9b:bc:24:be:f8:a9:d1:6c:84:a9:b2:81:24:db:
         3e:83:84:6c:e1:bf:cd:67:ac:0c:21:3d:74:a3:d5:d1:36:38:
         7f:73:d9:5f
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEss9up4QEvzwKNGnwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGM0NTVlNTgtNjE4OS00ZjI4LWI4MDMtNjFhOTY1YTIx
YzY1MB4XDTI1MDkxMzAxMDAzM1oXDTI1MTIxMjAyMDAzM1owLzEtMCsGA1UEAxMk
ZjhlYzFmOTctMzM3OC00MDA1LWEzNDYtN2RjMjUwNzNhNGQ3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnbFH0UMn1+p9GkgYZGG44l8R67QBiN1c7wVy
XHCnT44OC8PoJfk9eW2Tr8/iq5I/GdvV+0mR34lhY/L7ofKCZ2JvFWF46WwV4SFw
umstslksaQanBxaSgcqeZnRTNwfUuVHovopG2gknnJpx3ZNRo/NH7GZSMPUftr60
vO0rnrxAFr0FvQ9YKhZvhGoBfAY5dpKTXg45lyq0tddSskA58PZgmI0xCMxIY/A+
4XSO+zLer5zaEyZU8Gllgagq3dzSk08Ban77uRKggP8k6ICQzdw4W+8OZyW8w93X
SAYQAflaKX1Kd99D7XRpEfdA57FB6WUgTTxp8kUakHH6XBz7ewIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFKuOTTnh0fK8A1XlcYqK0e4v9MAiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1
NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5NjVhMjFjNjUvY2Q5NDJkMzMtZDk4OC0z
OTQ1LWJhNTUtYzk4MzQxMTQ0MTY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGM0NTVlNTgtNjE4OS00ZjI4LWI4
MDMtNjFhOTY1YTIxYzY1L2RjNDU1ZTU4LTYxODktNGYyOC1iODAzLTYxYTk2NWEy
MWM2NS5jcmwwHwYDVR0jBBgwFoAUZka/BM8QPkyukKDmzSU2ULZFvD8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5
NjVhMjFjNjUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABIyCG
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACWmfbwrADUTHlugdd/aufEeHIdljI1QamFu2icycHV4a127El0X
zNCJepQcmRU6hCQxjGC+3GY5pCyteRFNU58QJf3bhWEo3uLRFj2c6daj3tYkMvoJ
JsGn1XKbB4jCZHiPpTfrFlELYEYPwkiM+QEbhLmEaEEqgW/GcLiMg5HbYkUBhljn
gTtx5MACwfDewjDOhAHDYYspfPyP6lC1cYbk9mcZtIn2VE8b8BgiFNm2cxFF5kv3
XfG8dDBCTa4+rOoA84BInDt7Za7bbtxPodGsABqe5DlQPVF3gNabvCS++KnRbISp
soEk2z6DhGzhv81nrAwhPXSj1dE2OH9z2V8=
-----END CERTIFICATE-----
Generated at Mon Oct 20 16:31:25 2025 by rpki-client