Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/e47916dd-7960-3c02-b36a-657e4095a6f4.roa
File:                     e47916dd-7960-3c02-b36a-657e4095a6f4.roa (raw, json)
Hash identifier:          BmLY4W0T86SXFQITOzjY8MG5RKRFPObhwV9sDVfLY28=
Subject key identifier:   9F:17:12:D9:94:A3:65:0A:62:C9:45:23:B6:99:97:02:46:B6:3F:6D
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F4328584B0746A89F7195C5AAF02D6930
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/e47916dd-7960-3c02-b36a-657e4095a6f4.roa
Signing time:             Sat 30 Aug 2025 13:00:42 +0000
ROA not before:           Sat 30 Aug 2025 13:00:42 +0000
ROA not after:            Fri 28 Nov 2025 14:00:42 +0000
asID:                     16509
IP address blocks:        2620:123:20f9::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 06 Sep 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:07:46:a8:9f:71:95:c5:aa:f0:2d:69:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: Aug 30 13:00:42 2025 GMT
            Not After : Nov 28 14:00:42 2025 GMT
        Subject: CN=21692dab-3a6b-434c-b3e9-399d4158e23f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:44:07:29:32:50:c1:70:b7:09:2a:87:a3:b5:
                    1a:8a:3c:7f:46:21:b9:83:b7:2b:e4:56:8d:36:6c:
                    72:72:f0:27:e7:8d:a1:80:4f:b8:e3:6d:23:ab:24:
                    fd:97:08:f1:a8:76:e9:48:7f:72:68:a8:92:9c:d0:
                    1e:8b:a3:8b:17:b5:4a:70:18:12:cc:e7:f7:7c:8c:
                    79:40:af:b0:45:80:2b:0d:d2:7f:3f:8b:f9:b1:85:
                    81:65:e3:12:53:0c:f7:50:42:6b:2e:17:0a:80:d9:
                    ac:9d:55:b4:ff:f3:8f:e7:9a:ef:d1:6e:6c:06:5d:
                    64:c4:2d:b2:1f:21:69:67:fc:85:9c:76:93:c1:4d:
                    32:46:84:af:ed:bf:96:d4:f2:09:64:74:dd:f1:f0:
                    d9:2b:d7:52:c5:e2:19:33:a0:5d:f5:6c:c4:f0:21:
                    b8:68:3f:7f:2f:c2:49:91:83:72:a0:22:32:58:d2:
                    a5:d4:16:f7:02:f6:95:bb:30:26:a5:2e:db:ef:b6:
                    d2:91:dd:5a:8e:3a:1c:98:1b:1e:ee:3a:76:f4:8b:
                    55:51:21:ec:f1:be:24:40:d3:44:0c:cf:c0:9a:d5:
                    5c:5c:95:5a:d8:0f:f9:f1:9d:a8:ba:71:3b:cc:58:
                    97:67:1b:70:6d:f5:b4:d8:36:31:ee:79:f9:0a:50:
                    06:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:17:12:D9:94:A3:65:0A:62:C9:45:23:B6:99:97:02:46:B6:3F:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/e47916dd-7960-3c02-b36a-657e4095a6f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:123:20f9::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:41:1d:25:17:90:ab:41:3c:34:7f:cc:2c:23:ea:16:7c:02:
         e6:1f:07:06:00:a6:ef:79:b6:38:a3:2b:ed:e1:55:94:ff:52:
         ab:6e:01:e4:92:88:db:ee:87:e1:c3:74:75:e4:04:dc:cf:aa:
         30:91:34:52:14:47:68:1d:63:4e:48:f5:14:05:d7:84:47:a3:
         0d:1a:54:ae:f4:f1:8a:56:eb:8f:cd:dd:6c:a4:e6:a5:55:a4:
         ca:0a:8a:dc:50:65:4d:0d:da:53:54:26:01:93:ce:a4:75:66:
         f0:33:f5:bc:88:57:1c:d6:71:22:e1:41:3e:4c:ef:27:6b:ea:
         c1:ba:25:e8:ee:1a:a8:6a:9a:31:c3:96:5b:bf:30:f5:1c:b6:
         62:ff:cc:ad:b0:b1:59:7c:6c:91:f2:a8:32:d1:82:67:bc:7b:
         99:27:3f:a5:2f:2e:60:a9:60:36:53:26:84:76:6e:64:79:f8:
         67:54:ef:54:c6:86:35:1f:d7:0a:df:04:5f:fc:2d:ea:39:e4:
         85:c5:af:51:40:f1:cd:69:a6:ab:e1:c7:b9:b7:05:ba:a8:74:
         be:04:d6:b9:6b:b0:5c:29:0e:0e:74:e6:a5:8b:92:cf:53:d7:
         a0:d6:34:f4:23:b7:1f:1c:ca:e8:a3:1b:b1:02:b2:7f:59:3a:
         ed:44:25:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 13:23:56 2025 by rpki-client