Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/31a92fae-c70d-30b0-9665-b798cb94444d.roa
File:                     31a92fae-c70d-30b0-9665-b798cb94444d.roa (raw, json)
Hash identifier:          IrkNYJNaGWsvfYi89RyjjTchFOKZaPLKKOPNlJB2bZo=
Subject key identifier:   72:5C:0E:C7:B3:E5:45:66:D7:44:AB:79:D3:DC:86:40:F8:78:F7:A8
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F4328584DBA3AFEFF6A5F161BF592ED00
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/31a92fae-c70d-30b0-9665-b798cb94444d.roa
Signing time:             Tue 05 May 2026 01:00:23 +0000
ROA not before:           Tue 05 May 2026 01:00:23 +0000
ROA not after:            Mon 03 Aug 2026 01:00:23 +0000
asID:                     30103
IP address blocks:        2620:123:2008::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ba:3a:fe:ff:6a:5f:16:1b:f5:92:ed:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: May  5 01:00:23 2026 GMT
            Not After : Aug  3 01:00:23 2026 GMT
        Subject: CN=be714df0-e560-448d-94cb-dfe83f16c3e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:58:63:d4:f5:21:33:54:ae:07:15:e3:39:f6:
                    e0:e9:99:d5:19:ff:46:12:1c:24:67:d3:f8:7c:30:
                    06:a3:be:ec:cc:09:27:48:1d:56:66:8f:34:d0:a6:
                    a3:c5:85:18:b2:d2:44:98:6f:03:cf:c6:38:4c:c2:
                    06:e6:3c:b5:42:bc:e4:11:90:57:a8:84:a5:30:07:
                    15:99:2f:8f:3d:11:49:33:19:c8:ed:47:0f:e6:3a:
                    eb:d5:ca:75:c4:eb:06:a2:65:86:d7:6f:2f:7d:b4:
                    f4:52:a0:9a:6d:9f:37:d0:c5:d4:90:17:52:68:18:
                    97:d7:a3:72:48:8b:3d:68:b1:34:87:e4:77:27:6a:
                    38:e7:41:71:63:b9:18:c1:11:d5:c9:a7:08:0d:7b:
                    a1:bb:0f:be:00:fb:39:0c:24:c1:ac:24:4a:af:c9:
                    cc:de:d9:a5:65:66:fa:c8:8a:4b:5f:3c:33:36:79:
                    4c:3c:83:97:e4:be:64:bd:ac:8b:22:f9:1e:a6:03:
                    98:c2:60:c9:1b:ce:bd:ed:4d:79:7b:ec:67:bf:85:
                    14:1f:ee:86:55:7c:8e:57:2f:c1:ea:6b:4c:8f:2f:
                    00:82:ad:1a:4d:2c:92:78:c3:b8:42:b1:a9:3d:dc:
                    dc:e6:15:f2:94:86:f6:39:62:4e:2c:17:91:5a:4b:
                    6a:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:5C:0E:C7:B3:E5:45:66:D7:44:AB:79:D3:DC:86:40:F8:78:F7:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/31a92fae-c70d-30b0-9665-b798cb94444d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:123:2008::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:e1:ee:f6:46:db:70:f0:70:01:5c:7c:7d:72:3a:37:45:cf:
         37:17:67:88:0d:42:25:c3:0e:7d:68:2e:04:b7:75:9a:b4:b6:
         5e:d8:c7:cb:76:c3:58:38:e4:84:ac:8d:89:57:41:75:62:76:
         22:ab:56:49:20:92:03:99:7a:ee:42:55:97:ee:b4:cb:56:64:
         20:86:d4:29:d6:45:93:24:f8:0b:fe:80:1b:1d:e9:02:00:5a:
         64:7c:6a:28:3f:43:45:16:e5:37:e7:a1:56:3c:bb:4f:13:3b:
         29:bd:1a:5e:a3:b9:c2:78:b5:89:05:93:48:5c:46:b3:57:fa:
         0a:7d:9f:d1:6e:d1:0a:6a:67:0c:d7:e4:87:36:c1:b8:24:8e:
         bf:ae:6d:24:f8:14:5a:a8:3c:24:11:28:96:17:ec:36:5f:a1:
         c5:ca:13:2c:6c:ff:b0:31:ce:04:c2:89:83:9f:61:47:03:7d:
         b1:25:84:f6:90:de:84:05:58:3d:2b:85:1c:15:5a:95:11:be:
         2d:ca:b4:7d:9c:0f:f5:15:29:f1:00:39:0b:c8:6b:43:b4:70:
         b5:63:49:a0:ec:44:24:e7:a3:e5:9d:50:4a:f0:f3:b0:42:aa:
         4e:2f:0b:25:c5:89:27:b1:29:7d:36:83:0c:15:f2:f1:f4:e1:
         4d:2b:cd:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:08:58 2026 by rpki-client