Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/9abf490e-12d9-3db2-b661-3e64feafa9e2.roa
File:                     9abf490e-12d9-3db2-b661-3e64feafa9e2.roa (raw, json)
Hash identifier:          UDNOF779XojvhDzTQBZ9sfYpjDib4FOdSvVkz5rhu6M=
Subject key identifier:   DC:A9:03:5F:75:37:C1:D2:ED:A7:4C:0B:3D:C2:29:F1:B5:E1:ED:BE
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F4328584A43DAFA7863EC2B53D725B260
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/9abf490e-12d9-3db2-b661-3e64feafa9e2.roa
Signing time:             Sat 21 Jun 2025 13:01:03 +0000
ROA not before:           Sat 21 Jun 2025 13:01:03 +0000
ROA not after:            Fri 19 Sep 2025 13:01:03 +0000
asID:                     31898
IP address blocks:        2620:123:208c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:43:da:fa:78:63:ec:2b:53:d7:25:b2:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: Jun 21 13:01:03 2025 GMT
            Not After : Sep 19 13:01:03 2025 GMT
        Subject: CN=6958c29d-8d35-43c2-b573-ad21fd4d8079
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:92:7f:f7:a8:55:9a:52:71:d2:c0:b0:3f:42:
                    39:ac:51:4b:6a:3f:ee:49:bb:2d:a8:99:c9:d6:2b:
                    b8:d8:80:7e:c2:b7:53:f9:80:9e:c9:ef:66:db:a3:
                    ec:68:58:2e:11:27:02:2c:3f:f7:b7:e0:66:1e:e8:
                    2b:89:59:af:33:74:ca:ea:58:05:c7:97:96:ea:6b:
                    a4:3d:6f:8c:3c:3e:6a:ad:3e:63:20:25:44:b8:0e:
                    47:c9:81:29:d6:2b:b1:ac:57:92:d5:cf:de:98:50:
                    80:ae:b0:7b:22:78:1d:55:c3:60:22:47:34:c5:91:
                    c5:f8:a4:4e:f3:a9:06:c1:f4:3a:05:9c:68:73:3c:
                    58:c0:e9:77:c4:b4:92:37:88:ca:a8:93:e0:b6:d4:
                    1c:46:4a:ea:13:f5:e5:5e:ac:5a:0c:66:90:2e:4d:
                    f6:a5:b8:0f:b5:e3:ba:fa:68:83:79:a5:36:18:c8:
                    22:cf:47:c7:09:16:05:9d:ed:1f:6a:e0:b9:fb:e0:
                    7f:b6:c9:6d:85:85:1b:aa:f4:0b:dc:0f:33:62:9d:
                    90:83:b9:61:8d:a8:d4:1f:cf:33:6b:a3:7c:35:62:
                    71:32:ed:75:c4:b6:29:79:93:ed:f1:3a:d3:9a:d6:
                    6d:ae:59:46:70:d7:dc:7a:10:d7:d3:95:64:61:b8:
                    3e:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:A9:03:5F:75:37:C1:D2:ED:A7:4C:0B:3D:C2:29:F1:B5:E1:ED:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/9abf490e-12d9-3db2-b661-3e64feafa9e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:123:208c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:7a:cb:1c:cd:42:20:4e:93:11:db:02:60:eb:22:a9:ae:56:
         df:d1:20:b4:47:1e:3e:cf:a9:91:66:2c:54:fd:fd:10:f7:f9:
         9a:78:6c:2f:9e:63:2a:f8:25:0f:0b:95:02:34:35:7e:21:d7:
         dc:72:5b:33:45:6b:4b:0f:6b:85:78:ea:26:7a:40:c1:2e:8c:
         bd:7f:f1:87:7a:d4:78:28:cf:c2:08:9c:0d:3c:a5:42:0e:74:
         5f:e4:cb:6e:fc:0b:3f:66:d7:2c:bc:d5:cc:aa:b0:c6:61:4e:
         18:06:c1:0c:94:87:61:28:f0:fa:d4:c5:73:7f:c5:1c:ee:4f:
         ab:2c:35:b4:7b:d8:21:0d:f4:eb:4d:3f:11:dc:37:a0:7c:c1:
         17:20:9f:a9:a7:67:b8:eb:2d:dc:57:04:5c:7a:3c:9c:55:9e:
         8c:b0:47:ea:20:84:f6:eb:2e:48:48:7d:b5:b1:09:dc:66:74:
         a5:7f:42:5a:7f:1e:d0:3f:3d:12:5d:d9:78:e7:68:f8:14:51:
         88:0c:9d:f3:3e:30:60:4a:9d:df:87:a6:be:85:67:5d:c7:54:
         06:7c:c3:a6:c1:cc:91:dd:86:8f:4c:3a:38:6c:85:e0:4b:ef:
         51:0a:db:3a:7e:7a:87:9b:26:29:51:b1:b3:6a:12:e1:15:d7:
         69:fc:a3:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 13:53:35 2025 by rpki-client