Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/5a53f2cd-c81d-3f82-9ab1-b4a1708bdeb0.roa
File:                     5a53f2cd-c81d-3f82-9ab1-b4a1708bdeb0.roa (raw, json)
Hash identifier:          RZcK7+LqJONbFEum0Myv6HEjbPf8Y6dT/45xYCAmZyQ=
Subject key identifier:   76:42:ED:91:0E:E6:1D:45:80:25:48:45:00:B6:B9:24:5C:CC:BA:EA
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F4328584A374ADABBB6B7FF912A691D80
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/5a53f2cd-c81d-3f82-9ab1-b4a1708bdeb0.roa
Signing time:             Tue 17 Jun 2025 01:00:48 +0000
ROA not before:           Tue 17 Jun 2025 01:00:48 +0000
ROA not after:            Mon 15 Sep 2025 01:00:48 +0000
asID:                     30103
IP address blocks:        2620:123:2020::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:37:4a:da:bb:b6:b7:ff:91:2a:69:1d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: Jun 17 01:00:48 2025 GMT
            Not After : Sep 15 01:00:48 2025 GMT
        Subject: CN=ef9cdc56-1fbb-4d2d-bb4a-fa22b82750d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:d2:6c:57:99:85:45:41:5a:29:cb:7d:35:8d:
                    bf:40:7f:f4:a5:d6:a8:5f:fd:91:2f:69:14:5f:fc:
                    82:db:88:e7:df:4c:b5:e1:08:cc:c2:28:b2:96:98:
                    d9:17:0d:ba:87:7f:98:ad:55:bf:4b:7c:6f:9d:68:
                    02:3e:82:ed:3e:40:63:6c:8d:1a:46:f3:ca:0e:10:
                    a5:6d:c0:df:bb:6d:f9:93:37:73:9f:2c:07:bd:30:
                    1c:0a:51:e1:73:50:a6:81:f2:bb:84:e0:c8:b0:1d:
                    8b:78:d5:6c:12:2d:d7:f3:6a:01:17:67:c4:ab:fe:
                    f9:36:0b:87:11:1e:5e:fc:29:dd:6a:ec:3d:ce:2a:
                    e3:66:51:32:d0:af:37:2b:82:c4:fc:78:b3:17:97:
                    ff:1b:6b:af:e4:29:9b:be:1b:60:fc:61:46:6c:de:
                    80:8a:20:c7:57:11:b5:87:3b:9d:58:e3:26:f1:af:
                    1a:67:f1:c8:27:9c:2f:e4:e3:23:c5:d1:a5:29:46:
                    ad:bb:4d:a9:b1:83:15:38:cc:b3:12:83:93:fa:70:
                    bf:30:84:d9:cc:37:95:8d:3b:d9:2e:78:d3:0a:de:
                    c4:c9:36:68:7d:d9:0b:f3:19:90:60:13:b8:a7:db:
                    e9:9e:de:0c:ca:83:be:fa:9e:26:35:ae:7f:90:2a:
                    60:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:42:ED:91:0E:E6:1D:45:80:25:48:45:00:B6:B9:24:5C:CC:BA:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/5a53f2cd-c81d-3f82-9ab1-b4a1708bdeb0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:123:2020::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:46:ba:e5:1e:45:79:50:9f:f4:13:84:aa:47:03:e0:ff:13:
         f1:3a:b3:5f:0f:0c:a5:ec:ae:11:ce:dd:ae:50:91:e0:dc:d8:
         d1:d1:a8:c7:c7:d4:c8:a7:55:f0:70:8a:0e:40:6a:7f:cf:d5:
         09:43:9c:7d:b8:d2:25:46:ee:12:e3:65:34:52:30:0b:e4:e2:
         16:e4:06:9d:81:20:d2:95:ee:49:13:c2:85:04:d2:9b:87:c9:
         d9:c3:40:53:d7:bf:75:fd:9d:d4:c5:50:36:e2:20:7c:2e:52:
         0b:21:0e:a3:cb:10:fc:20:bf:6f:32:dc:c1:e7:39:44:9b:0c:
         ed:53:a0:ae:32:40:c8:00:7e:67:c2:94:f7:e0:82:7c:1b:d4:
         95:0e:93:c0:7b:37:4b:e2:27:cf:ed:2c:d0:fd:41:9e:c3:8c:
         31:3c:1b:9a:d9:9d:5c:eb:8e:51:10:b0:1d:1a:42:32:f4:c8:
         5e:1e:48:14:01:8e:56:be:6d:75:35:60:c4:72:0e:cc:ba:52:
         3a:1c:c6:49:3b:d1:77:1c:c5:48:4d:09:14:76:89:96:71:aa:
         66:3c:87:88:44:fa:66:e0:03:6b:9a:19:7c:6f:72:f5:49:ca:
         8f:f7:3c:8f:6c:48:53:51:15:62:2d:b8:03:04:e9:e4:eb:fc:
         1c:8b:45:85
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEo3Stq7trf/kSppHYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGM0NTVlNTgtNjE4OS00ZjI4LWI4MDMtNjFhOTY1YTIx
YzY1MB4XDTI1MDYxNzAxMDA0OFoXDTI1MDkxNTAxMDA0OFowLzEtMCsGA1UEAxMk
ZWY5Y2RjNTYtMWZiYi00ZDJkLWJiNGEtZmEyMmI4Mjc1MGQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAitJsV5mFRUFaKct9NY2/QH/0pdaoX/2RL2kU
X/yC24jn30y14QjMwiiylpjZFw26h3+YrVW/S3xvnWgCPoLtPkBjbI0aRvPKDhCl
bcDfu235kzdznywHvTAcClHhc1CmgfK7hODIsB2LeNVsEi3X82oBF2fEq/75NguH
ER5e/Cndauw9zirjZlEy0K83K4LE/HizF5f/G2uv5Cmbvhtg/GFGbN6AiiDHVxG1
hzudWOMm8a8aZ/HIJ5wv5OMjxdGlKUatu02psYMVOMyzEoOT+nC/MITZzDeVjTvZ
LnjTCt7EyTZofdkL8xmQYBO4p9vpnt4MyoO++p4mNa5/kCpgrQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFHZC7ZEO5h1FgCVIRQC2uSRczLrqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1
NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5NjVhMjFjNjUvNWE1M2YyY2QtYzgxZC0z
ZjgyLTlhYjEtYjRhMTcwOGJkZWIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGM0NTVlNTgtNjE4OS00ZjI4LWI4
MDMtNjFhOTY1YTIxYzY1L2RjNDU1ZTU4LTYxODktNGYyOC1iODAzLTYxYTk2NWEy
MWM2NS5jcmwwHwYDVR0jBBgwFoAUZka/BM8QPkyukKDmzSU2ULZFvD8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5
NjVhMjFjNjUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABIyAg
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAEhGuuUeRXlQn/QThKpHA+D/E/E6s18PDKXsrhHO3a5QkeDc2NHR
qMfH1MinVfBwig5Aan/P1QlDnH240iVG7hLjZTRSMAvk4hbkBp2BINKV7kkTwoUE
0puHydnDQFPXv3X9ndTFUDbiIHwuUgshDqPLEPwgv28y3MHnOUSbDO1ToK4yQMgA
fmfClPfggnwb1JUOk8B7N0viJ8/tLND9QZ7DjDE8G5rZnVzrjlEQsB0aQjL0yF4e
SBQBjla+bXU1YMRyDsy6Ujocxkk70XccxUhNCRR2iZZxqmY8h4hE+mbgA2uaGXxv
cvVJyo/3PI9sSFNRFWItuAME6eTr/ByLRYU=
-----END CERTIFICATE-----
Generated at Mon Jun 30 10:25:45 2025 by rpki-client