Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/7cd69072-498b-39e0-bc3c-bf2d85113252.roa
File:                     7cd69072-498b-39e0-bc3c-bf2d85113252.roa (raw, json)
Hash identifier:          UmzsJm1T7eEy0mBFMuywGra47zFS3Hr7fcpIKRwyyxw=
Subject key identifier:   66:95:C2:9B:03:F1:B2:93:8C:76:C6:85:B7:EB:6A:F7:2C:E4:FD:C1
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F4328584DBBA0526C2255D7FD5A9507C0
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/7cd69072-498b-39e0-bc3c-bf2d85113252.roa
Signing time:             Tue 05 May 2026 13:00:31 +0000
ROA not before:           Tue 05 May 2026 13:00:31 +0000
ROA not after:            Mon 03 Aug 2026 13:00:31 +0000
asID:                     30103
IP address blocks:        2620:123:20c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:bb:a0:52:6c:22:55:d7:fd:5a:95:07:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: May  5 13:00:31 2026 GMT
            Not After : Aug  3 13:00:31 2026 GMT
        Subject: CN=a3a5cdf7-a885-4b3f-b2e7-8a47f0c5d2a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:d8:9a:02:32:fe:eb:96:2d:e9:a4:26:aa:31:
                    8f:be:2c:58:fd:2e:cf:0c:6e:1c:8e:44:db:5d:cd:
                    ed:67:7e:b5:70:77:b3:e7:bc:bc:af:dc:0a:48:7d:
                    e6:fa:bd:c0:cc:5b:49:fc:ae:37:80:7a:2e:c5:d5:
                    c2:d8:9a:2a:39:7c:35:df:b8:d4:d2:18:e3:c4:d6:
                    a6:e5:2d:54:db:f2:dc:11:17:58:66:a2:68:50:ac:
                    dc:80:3f:a2:49:88:32:36:6d:63:7f:46:63:22:73:
                    47:25:e6:82:83:70:c0:5a:5d:16:aa:51:d8:21:fa:
                    ec:bc:87:e1:5d:7a:c7:8b:53:e9:ac:e7:c6:60:b5:
                    a8:0a:6e:2c:e2:74:4a:37:d8:4b:85:f9:c8:15:00:
                    40:79:7b:d4:bd:82:af:36:67:2a:65:17:cf:1d:72:
                    dc:0d:ea:3b:38:ad:b9:76:d1:03:b1:6c:e2:a7:8c:
                    d8:2f:80:4d:12:e9:c2:8a:9c:31:85:de:09:cb:66:
                    3e:db:b1:91:df:20:c1:9d:de:d7:4d:eb:5c:99:c8:
                    13:6a:a0:ee:48:97:21:f2:3b:3d:68:e1:0f:e3:ae:
                    00:8d:c9:44:11:50:45:03:6f:4c:14:7d:d4:91:f6:
                    50:a9:b7:2f:14:14:0c:5a:ba:e3:b3:f8:cd:09:ec:
                    25:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:95:C2:9B:03:F1:B2:93:8C:76:C6:85:B7:EB:6A:F7:2C:E4:FD:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/7cd69072-498b-39e0-bc3c-bf2d85113252.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:123:20c0::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:b1:09:a9:80:6e:c2:25:ba:3d:d9:f1:af:c0:c3:73:45:a6:
         cd:32:11:b9:97:88:81:61:15:3f:ef:64:15:34:8a:a2:5e:4f:
         aa:78:b6:20:b7:b4:0b:01:18:9d:e6:3f:52:67:fc:d0:8b:72:
         2d:cc:3c:6b:2c:98:de:0a:f5:4f:e9:db:73:69:d3:c6:33:49:
         7c:9a:03:92:cb:69:3c:8c:86:2b:79:bc:a5:67:89:a9:9f:27:
         6d:a2:99:a4:82:5e:05:b0:bb:0d:15:01:1c:24:ed:95:c8:cd:
         41:db:60:9d:ec:41:66:0a:cd:24:dd:30:7a:88:7c:81:08:f1:
         73:6a:13:8c:da:8a:98:37:95:84:73:7b:18:62:14:58:aa:16:
         aa:9f:b0:d6:b6:03:a6:a0:b1:e0:e5:14:7e:9f:e7:d2:f7:fc:
         ee:2d:2a:5b:02:a0:b6:5b:53:ee:90:d3:41:7c:c9:00:f5:fb:
         6c:fb:86:62:a6:20:b7:1b:1a:87:d6:04:ef:bf:71:5a:b8:79:
         4d:af:2f:62:34:09:71:1f:d4:0b:21:54:d6:b8:92:43:fa:bf:
         7c:41:a3:22:f4:63:4e:3a:7f:00:a3:c9:88:72:2e:9e:63:41:
         e6:0f:9b:36:52:a5:20:1a:94:57:80:3d:85:70:88:cd:24:4d:
         2f:29:ad:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:37:51 2026 by rpki-client