Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/3e8425e0-92ba-3fb4-b953-7e657f8c6e6f.roa
File:                     3e8425e0-92ba-3fb4-b953-7e657f8c6e6f.roa (raw, json)
Hash identifier:          SSJwQhCvUn1U8t/Aa+vAGPx1YtgHjJKDewroClYVBZM=
Subject key identifier:   03:5F:43:16:74:9C:89:6C:DD:00:1C:65:54:EB:6D:00:59:47:CB:A4
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F4328584F46A7E67671FD0FB500FC1680
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/3e8425e0-92ba-3fb4-b953-7e657f8c6e6f.roa
Signing time:             Thu 24 Sep 2026 01:00:12 +0000
ROA not before:           Thu 24 Sep 2026 01:00:12 +0000
ROA not after:            Wed 23 Dec 2026 02:00:12 +0000
asID:                     30103
IP address blocks:        2620:123:20a4::/46 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 04 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:46:a7:e6:76:71:fd:0f:b5:00:fc:16:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: Sep 24 01:00:12 2026 GMT
            Not After : Dec 23 02:00:12 2026 GMT
        Subject: CN=516dbf9e-548e-4c13-8ac0-a4d70ec0981c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:68:7a:23:05:62:55:1e:b2:68:68:3d:78:fe:
                    f2:dc:5e:10:00:03:91:e5:04:9e:f3:01:ed:5a:f7:
                    e3:12:88:18:4b:6d:1a:a0:2d:96:60:87:8f:1f:8f:
                    df:85:88:a0:f8:87:63:f4:ad:5e:2e:86:86:dc:e7:
                    78:42:eb:36:00:fb:4a:9b:22:69:fe:a8:2d:49:8d:
                    57:31:3a:d7:f0:0d:b4:90:de:11:e7:8e:f4:17:69:
                    83:71:c0:ba:94:0c:3e:a2:86:cb:d6:60:ea:e2:68:
                    db:2a:99:21:e1:8b:20:58:7d:e0:b8:8c:fb:e7:a5:
                    5a:83:2c:ec:28:55:fd:71:08:9a:6b:0d:3d:ad:6f:
                    13:43:1b:f3:d8:6f:d9:dc:70:33:bd:02:b2:57:0f:
                    2d:bc:79:48:5c:7d:1a:93:0d:e6:60:b8:1c:81:f8:
                    34:13:bb:21:85:ba:14:0e:ad:00:5a:f6:ac:5d:03:
                    a5:f4:cc:40:47:34:fd:3c:f1:a6:b0:a0:95:62:95:
                    2b:bc:9a:46:20:b8:d6:bb:af:8c:1a:52:65:f2:50:
                    3e:1e:01:84:65:3f:b9:99:e7:f4:0e:10:c1:15:c8:
                    66:93:e0:e9:bc:bc:33:6e:05:fd:a6:8f:52:9e:29:
                    8f:56:30:4b:25:c0:f2:25:3d:8f:71:77:c6:bd:f4:
                    ef:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:5F:43:16:74:9C:89:6C:DD:00:1C:65:54:EB:6D:00:59:47:CB:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/3e8425e0-92ba-3fb4-b953-7e657f8c6e6f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:123:20a4::/46

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:ae:ff:cd:4e:f8:89:f7:86:0d:da:8f:5f:ad:86:af:b3:32:
         1d:b1:79:11:2c:03:80:cb:e2:87:b1:0c:08:2d:65:18:c6:59:
         47:c7:03:70:31:d0:93:cd:1c:f8:96:7d:1d:4c:f6:57:f5:49:
         93:f6:97:50:d7:86:25:0b:2a:1d:70:e5:16:d4:5a:fc:0c:c0:
         fe:73:45:33:c4:73:46:66:9e:97:ab:82:fa:9b:93:98:d5:fe:
         dc:d4:73:f3:a1:36:f7:83:36:e3:d1:ec:fa:aa:db:8e:98:31:
         26:1b:33:6f:22:08:e5:cc:06:c5:f3:fb:d2:90:fa:d4:0e:42:
         2d:7d:eb:52:ba:11:63:a5:f9:3a:7f:75:1b:ef:85:19:a8:99:
         c2:97:75:75:f0:c1:bd:7f:2b:6a:72:88:4d:67:26:d8:27:37:
         38:06:bb:95:bc:b6:7c:b1:7b:bc:78:cf:b5:9f:e7:9a:da:72:
         26:9d:43:98:ca:a6:2d:05:74:d6:53:4a:ed:cd:9d:ab:cd:ca:
         25:b8:aa:1f:33:8a:a5:ea:d3:2e:4b:42:ef:55:a2:f2:f1:93:
         26:2d:31:f8:a6:70:ac:86:46:28:00:e1:27:6b:1d:db:b2:bb:
         2f:dc:dd:39:ad:2c:24:a9:31:70:82:f3:98:9c:28:88:ac:00:
         f0:51:8b:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 12:56:55 2026 by rpki-client