Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/96bcf789-6395-3bdd-ae67-4b175293b22a.roa
File:                     96bcf789-6395-3bdd-ae67-4b175293b22a.roa (raw, json)
Hash identifier:          zK5v1qRkfdXiQkZKZPaRO39FXxag2x3S5O0vdq0sZ14=
Subject key identifier:   86:38:9A:2E:41:0A:2D:26:64:49:ED:84:C3:73:9A:51:0A:83:D5:43
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F4328584DBA3AFEE5E73053AF94374A50
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/96bcf789-6395-3bdd-ae67-4b175293b22a.roa
Signing time:             Tue 05 May 2026 01:00:23 +0000
ROA not before:           Tue 05 May 2026 01:00:23 +0000
ROA not after:            Mon 03 Aug 2026 01:00:23 +0000
asID:                     30103
IP address blocks:        2620:123:201c::/48 maxlen: 48
                          2620:123:201d::/48 maxlen: 48
                          2620:123:201e::/48 maxlen: 48
                          2620:123:201f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ba:3a:fe:e5:e7:30:53:af:94:37:4a:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: May  5 01:00:23 2026 GMT
            Not After : Aug  3 01:00:23 2026 GMT
        Subject: CN=0a974ff0-da7e-405a-9c3e-e4e96c48e65a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:75:a2:64:50:bb:d0:b5:5d:bb:e9:03:0c:67:
                    9f:f8:68:a7:13:fe:68:c4:97:11:d2:2a:91:0c:08:
                    81:99:b8:ad:30:87:d8:52:74:14:3c:9e:a2:a9:3d:
                    9a:08:0a:87:42:e9:b3:b7:a8:2a:b4:69:d8:52:18:
                    53:64:ab:cc:25:bd:ac:7f:b4:51:12:14:f6:57:46:
                    0a:d3:fe:51:a9:f4:98:a8:3a:c3:f5:c3:90:21:43:
                    7c:9a:b3:42:a9:1c:f9:b1:83:54:f9:9b:57:42:9c:
                    b0:83:69:fa:61:85:23:64:a4:e1:05:0a:8b:b7:83:
                    8b:34:dc:a9:27:43:3d:89:0d:85:9c:93:d6:aa:1a:
                    15:fb:bb:c3:38:ca:f4:f5:0b:56:61:b0:14:17:f3:
                    92:32:ad:8e:9f:a3:4e:ab:bc:30:29:c5:6e:98:e5:
                    50:18:ae:2d:ce:f0:73:ab:19:14:cb:03:03:c5:2d:
                    2b:2e:8d:43:c4:a5:08:0b:59:89:d5:f0:8e:70:6e:
                    57:32:87:c2:d4:c3:3c:30:3e:ce:fa:94:50:93:c8:
                    74:c9:16:e0:44:a7:59:d9:62:84:db:bd:30:50:c0:
                    4c:e1:7d:6d:56:b6:7a:f2:0a:7b:32:61:cf:71:84:
                    3f:13:7d:11:dd:49:54:b5:37:f3:69:eb:22:98:3f:
                    c0:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:38:9A:2E:41:0A:2D:26:64:49:ED:84:C3:73:9A:51:0A:83:D5:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/96bcf789-6395-3bdd-ae67-4b175293b22a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:123:201c::/46

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:8a:5a:b5:d1:49:04:a9:11:ab:f1:df:10:d1:1a:02:49:39:
         d7:97:a4:7d:dd:e3:86:9a:25:9f:ce:6c:5c:ba:ad:8b:42:db:
         f7:5a:ed:7a:f9:ae:8c:a1:e3:4e:6f:39:77:cb:85:30:b8:6d:
         8f:04:63:f4:bc:c1:e0:67:db:98:ff:ae:3a:23:e6:b4:7a:df:
         7c:95:d8:61:26:66:9a:de:f2:47:f8:40:ea:b3:14:bc:35:47:
         d0:17:2b:18:e6:76:a9:fc:65:20:27:13:43:5f:b7:05:0d:ef:
         15:36:1c:cc:90:67:62:5a:fd:7f:94:39:de:9b:00:84:bd:17:
         78:08:25:83:cc:48:3e:e4:d4:fa:16:a7:94:5f:67:c0:db:ba:
         43:94:97:b0:52:2c:4e:a2:5b:de:5b:8a:75:25:1c:6e:22:58:
         3d:d0:19:9c:21:6d:c9:73:4c:ef:d4:d2:e9:62:f1:70:7d:79:
         b8:cf:32:70:d4:85:31:d1:47:11:f3:83:45:3a:2c:11:43:d8:
         33:7a:7a:1d:f5:37:03:ae:cf:c5:34:9e:d3:3b:a1:5a:c9:a7:
         03:d7:0d:34:3e:26:7a:d4:ef:72:21:a5:7f:c4:2b:1f:fd:83:
         1f:de:9b:7f:3a:f4:9f:eb:61:8f:aa:2c:31:40:2b:69:da:17:
         51:0c:42:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:30:31 2026 by rpki-client