Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/5a53f2cd-c81d-3f82-9ab1-b4a1708bdeb0.roa
File:                     5a53f2cd-c81d-3f82-9ab1-b4a1708bdeb0.roa (raw, json)
Hash identifier:          HyuAjExeq29I7lNSRYRtpCaVccGKhdXzxqpIyz657vE=
Subject key identifier:   C9:40:13:6B:BE:E8:91:AA:F2:E9:F9:03:38:A0:67:59:1A:B2:F2:5E
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F4328584DBA3AFF17CD84DB9E4356A880
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/5a53f2cd-c81d-3f82-9ab1-b4a1708bdeb0.roa
Signing time:             Tue 05 May 2026 01:00:23 +0000
ROA not before:           Tue 05 May 2026 01:00:23 +0000
ROA not after:            Mon 03 Aug 2026 01:00:23 +0000
asID:                     30103
IP address blocks:        2620:123:2020::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ba:3a:ff:17:cd:84:db:9e:43:56:a8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: May  5 01:00:23 2026 GMT
            Not After : Aug  3 01:00:23 2026 GMT
        Subject: CN=c98cfcb0-5f43-46ce-b3df-0035567f896f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:60:02:1a:c7:52:b7:6f:a4:f7:9f:d3:85:b8:
                    a6:18:d0:3a:9f:0a:78:19:d9:87:b0:63:2f:d9:3b:
                    e2:f2:5b:71:fd:5d:bb:67:63:c1:06:ba:93:1e:d3:
                    8d:50:d8:65:be:56:0a:02:86:ea:b6:7d:c8:b2:c5:
                    16:6f:46:67:91:7f:c2:15:f5:3e:92:b9:8f:b9:ec:
                    91:85:d1:f9:2d:20:96:2f:f3:7e:54:91:c9:50:cc:
                    a7:b4:42:b2:52:5b:01:6e:57:d9:7c:f4:74:6b:7e:
                    4e:44:16:5d:d9:21:7c:fb:7d:df:3f:41:4f:7e:79:
                    b0:fa:6d:4c:35:44:bb:35:e4:a8:4b:c1:04:54:ab:
                    32:79:34:3d:ce:cf:38:ca:ca:0a:83:9a:5a:f8:b3:
                    2b:01:77:3e:d5:33:65:a5:14:50:cc:ca:6f:29:66:
                    d9:97:d5:4d:41:d4:e6:4a:6a:5f:36:ac:20:43:21:
                    67:07:78:84:c0:fc:df:8e:a4:d3:0e:db:4c:63:ea:
                    da:53:75:de:6c:ca:d3:f9:ca:9f:6b:ca:33:a5:00:
                    5f:63:80:58:8a:e6:9a:14:f2:9d:c1:e5:3c:a4:c9:
                    b2:e8:99:b9:71:8b:00:69:2f:a8:9f:d8:39:ab:49:
                    c4:21:58:91:c0:08:56:73:a0:00:61:2e:fc:21:1b:
                    05:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:40:13:6B:BE:E8:91:AA:F2:E9:F9:03:38:A0:67:59:1A:B2:F2:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/5a53f2cd-c81d-3f82-9ab1-b4a1708bdeb0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:123:2020::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:9b:af:61:52:bd:e8:f5:03:25:04:d9:ac:51:a7:1c:1f:c7:
         56:7f:13:49:97:32:4a:d5:57:17:b3:ed:fa:da:0f:67:65:20:
         d4:13:1e:50:5f:48:b6:69:77:68:8e:b5:e2:d3:24:cc:0a:23:
         69:9b:1e:5a:cb:0b:5f:94:73:2d:c2:47:49:b2:40:5e:5b:b2:
         3c:10:43:35:a8:3e:8e:9e:20:bb:a5:3a:89:3d:d3:47:3b:d5:
         49:61:f6:b8:fd:d0:67:5d:e2:5f:43:7b:32:b6:7e:f3:ca:c4:
         db:b8:1f:ad:cf:b4:69:90:98:98:54:b7:ad:18:da:31:5e:f0:
         31:72:95:80:d8:a0:94:68:9a:f3:7a:81:a4:57:5c:f6:71:12:
         e2:4b:aa:c5:4c:5e:07:5b:7d:e5:14:b4:b9:48:5d:6e:bc:26:
         a3:f6:0a:fa:f8:4b:9b:e1:36:0f:f4:8b:47:db:f7:55:97:e9:
         d0:e9:6a:b3:25:61:65:88:d5:3d:8e:9d:32:48:ea:77:d1:f0:
         9b:84:12:7a:ce:15:7e:a0:f7:f1:7a:2f:27:42:ac:35:89:fb:
         de:6e:00:ed:f9:ac:50:ba:38:f4:10:73:96:72:77:0a:49:3d:
         92:e8:fc:48:6b:d8:b5:f9:e9:f7:93:9b:1c:a0:77:fc:85:d0:
         11:a4:c2:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:35:44 2026 by rpki-client