Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/f0ae19ec-f9ec-3575-860f-ba937327c5bd.roa
File:                     f0ae19ec-f9ec-3575-860f-ba937327c5bd.roa (raw, json)
Hash identifier:          TYJ5Bu472iVkgQ4aEIPvJuggqPOBf6nOjMkPBhtSNWg=
Subject key identifier:   49:16:EF:65:AF:4F:E7:55:9E:DD:0E:C7:1F:96:A6:51:8B:E1:4B:15
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F4328584B1AD18D49327F3F3C9288DF00
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/f0ae19ec-f9ec-3575-860f-ba937327c5bd.roa
Signing time:             Sat 06 Sep 2025 13:00:41 +0000
ROA not before:           Sat 06 Sep 2025 13:00:41 +0000
ROA not after:            Fri 05 Dec 2025 14:00:41 +0000
asID:                     30103
IP address blocks:        2620:123:2040::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1a:d1:8d:49:32:7f:3f:3c:92:88:df:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: Sep  6 13:00:41 2025 GMT
            Not After : Dec  5 14:00:41 2025 GMT
        Subject: CN=037edc65-ff19-4cb3-806c-4e40a994caaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:fb:eb:a4:37:c4:d2:27:e4:41:83:5c:7f:82:
                    96:f7:95:37:36:e5:75:9a:4f:07:1d:70:71:99:b4:
                    a6:e6:8f:62:72:37:04:30:b4:1e:0c:98:3e:d5:64:
                    46:9e:ea:e0:78:44:1a:40:10:33:cd:39:bc:a0:bb:
                    55:d0:4a:0f:9e:83:49:9a:d7:75:fb:c1:51:bd:a6:
                    90:41:7c:1e:b4:48:44:54:89:e7:29:bd:19:f1:c3:
                    1f:aa:32:85:19:74:f6:67:f8:dd:cc:e4:0c:30:ed:
                    c3:ce:3f:4f:e5:9f:e6:73:75:ca:a4:b1:29:a0:de:
                    6c:dd:d2:3a:e0:f5:2a:94:d8:ae:46:a8:2f:aa:c6:
                    51:10:99:e3:db:ee:09:00:92:24:3b:f9:7a:e4:79:
                    b8:d9:fe:b4:d2:4b:2b:85:c2:b2:5a:0a:87:49:3a:
                    ad:16:4e:5f:d3:c6:ca:c0:6f:6b:f3:77:65:5e:cd:
                    46:4f:bb:58:e7:3e:d9:2a:c9:87:eb:d9:0e:3d:2a:
                    7f:a0:a2:b5:7b:9f:c1:f8:2c:6f:66:b1:22:a4:08:
                    80:46:1c:e4:39:73:70:11:89:d9:c1:3b:4d:4d:5b:
                    8c:c1:0b:a1:75:fd:c1:f0:b3:d8:aa:d5:d1:ab:92:
                    2e:e1:e0:1d:67:29:d6:d3:81:fc:7d:7c:98:fe:a6:
                    e4:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:16:EF:65:AF:4F:E7:55:9E:DD:0E:C7:1F:96:A6:51:8B:E1:4B:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/f0ae19ec-f9ec-3575-860f-ba937327c5bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:123:2040::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:af:32:9d:49:69:de:30:1b:51:8d:4b:34:1a:57:86:01:dc:
         91:a7:2f:c7:ed:b5:19:e3:ed:91:06:3f:b1:fa:6b:eb:18:2a:
         0c:34:ec:7e:1b:f0:3d:2a:84:a8:be:d4:20:89:eb:14:27:a6:
         76:7b:3a:cc:5d:6f:40:4b:7f:d0:b8:08:12:cf:3e:cf:1b:47:
         30:e3:60:ea:ab:7c:65:20:4c:a6:46:0e:08:b4:6b:34:3f:69:
         8b:6c:39:21:24:66:e6:db:fa:a8:ed:d1:69:a6:00:ba:70:15:
         be:d6:c6:ae:9d:6e:db:1a:92:04:d9:5f:50:fa:44:bd:63:d8:
         03:84:d3:ad:c9:ce:e5:a1:5c:12:25:90:f0:93:6b:bc:ad:54:
         31:a8:35:07:81:0d:ae:88:15:a6:1e:ce:b0:03:2b:d1:bd:f3:
         52:8d:b6:0b:25:9d:56:a6:d7:17:4c:df:cd:03:87:ee:39:ac:
         f1:d3:e1:42:8e:27:b4:8b:f6:d1:ae:63:9f:c6:54:2e:65:17:
         68:60:cf:3f:77:7c:00:84:f4:2d:8e:88:1a:3d:75:68:86:22:
         9e:d2:c1:6d:bd:31:fe:0b:0b:8f:e5:10:88:b6:1f:f0:22:cc:
         9a:d6:78:98:50:5d:ae:01:85:3e:e2:9a:85:58:b2:a4:99:de:
         6d:ab:bf:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:31:25 2025 by rpki-client