Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/693a4fbd-d359-3720-8a51-b2ed5627c25f.roa
File:                     693a4fbd-d359-3720-8a51-b2ed5627c25f.roa (raw, json)
Hash identifier:          TCc7s0eiHVAvHJT/fnvU4tbdGUqrxjJnsusd2r6HMGU=
Subject key identifier:   DC:1B:01:67:AF:DB:AA:9A:31:81:1E:8F:93:96:5D:BF:B2:FB:F5:1D
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F43285849CE9A5D55E3F27A2704A5E400
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/693a4fbd-d359-3720-8a51-b2ed5627c25f.roa
Signing time:             Sat 10 May 2025 13:01:00 +0000
ROA not before:           Sat 10 May 2025 13:01:00 +0000
ROA not after:            Fri 08 Aug 2025 13:01:00 +0000
asID:                     30103
IP address blocks:        2620:123:2028::/48 maxlen: 48
                          2620:123:2029::/48 maxlen: 48
                          2620:123:202a::/48 maxlen: 48
                          2620:123:202b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ce:9a:5d:55:e3:f2:7a:27:04:a5:e4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: May 10 13:01:00 2025 GMT
            Not After : Aug  8 13:01:00 2025 GMT
        Subject: CN=8eb1cc89-8eef-49be-85c8-c698a6ebe96e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:7d:8d:a8:d1:cd:a6:1e:83:e6:38:e3:14:cd:
                    d9:c8:d2:7a:e4:48:da:7a:7d:5c:da:1e:69:5a:00:
                    0e:d0:5c:ad:31:f8:ec:2a:41:55:60:5a:8e:44:04:
                    9a:04:23:8b:f4:25:b9:55:da:5e:1a:71:d5:2e:09:
                    4f:57:73:ee:9b:30:92:8d:1c:e9:e3:bf:eb:20:9d:
                    52:7e:92:93:5a:24:2a:32:18:ff:49:66:97:8f:8c:
                    de:01:35:39:a7:a5:e9:69:0d:49:b9:b4:e0:89:89:
                    1d:d9:0a:18:ff:32:13:34:53:62:38:d3:b6:63:ad:
                    3e:98:05:43:52:77:ac:3f:3b:1f:4f:bb:aa:a3:6f:
                    85:ac:73:10:99:41:3a:ff:90:98:6d:d8:fe:b0:a4:
                    17:e8:ee:17:94:a8:db:84:8d:a4:f7:34:4f:4c:1c:
                    81:a2:34:4c:58:2f:25:07:dd:2d:b3:d7:9c:5b:75:
                    28:db:b0:b2:94:07:ca:ee:75:8d:4f:03:ca:d1:e2:
                    be:80:77:f6:2b:66:be:31:5f:24:9b:a8:52:8f:f5:
                    e2:3b:98:ec:bc:52:f5:73:b2:94:88:ab:5e:04:be:
                    e6:63:5b:5d:2a:d2:cb:0d:86:fc:79:cc:a1:7a:94:
                    4e:a7:21:7b:40:27:26:eb:0e:a5:3b:12:9c:86:f4:
                    ad:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:1B:01:67:AF:DB:AA:9A:31:81:1E:8F:93:96:5D:BF:B2:FB:F5:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/693a4fbd-d359-3720-8a51-b2ed5627c25f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:123:2028::/46

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:cf:c6:22:71:43:66:f2:f5:d6:ff:7e:3a:e0:fe:16:f3:a0:
         3f:6f:52:d1:73:6a:c5:02:04:a0:c4:dd:a5:40:1d:a6:08:a7:
         ce:a7:b0:34:b2:b1:c9:1b:6b:1c:5c:3b:aa:9a:a9:79:4c:ef:
         db:94:48:01:65:59:74:38:ce:e4:75:64:5b:07:5f:b7:cb:90:
         7b:fc:97:af:00:5d:31:22:52:d1:73:0f:5f:b8:64:5e:2b:d5:
         6a:b9:14:de:13:f7:fb:2d:24:45:65:bd:a9:06:01:ff:99:5a:
         09:ee:0c:f6:c5:88:26:41:3c:d0:ac:2f:8b:3d:ad:a4:dd:b6:
         04:ea:1c:6a:5c:cd:c1:7f:7c:f0:a0:e4:8a:88:2e:3e:6e:4a:
         a1:41:12:49:f4:3f:6a:ac:1b:2d:6e:39:25:ce:28:b2:a5:08:
         06:3f:db:54:45:4f:a6:b1:2b:90:5d:d7:36:b0:11:4f:76:5c:
         c3:94:88:25:d8:d0:e6:54:fa:17:1b:a0:f7:01:e8:64:00:1f:
         71:b0:fb:e9:39:e1:de:55:14:63:f0:88:bf:0f:21:56:16:1e:
         2d:c2:ef:7f:e3:8e:cd:6b:80:22:82:1f:c7:c1:d7:c2:f5:0d:
         25:a5:89:24:44:28:1d:02:38:43:b6:60:88:af:77:ef:59:6c:
         e0:ee:ae:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 09:08:38 2025 by rpki-client