Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/bb265d72-5451-3383-9899-d78b8a322a33.roa
File:                     bb265d72-5451-3383-9899-d78b8a322a33.roa (raw, json)
Hash identifier:          Q1kU/3DlKu9KvFV4zSD2gQn6vP9r13Czq8H0RW06qw0=
Subject key identifier:   06:17:13:32:13:AB:7C:F4:0B:0F:E0:03:82:5E:5C:1F:72:0B:C7:98
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F4328584A3A1589A131D1DD485FD49BC0
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/bb265d72-5451-3383-9899-d78b8a322a33.roa
Signing time:             Wed 18 Jun 2025 01:00:50 +0000
ROA not before:           Wed 18 Jun 2025 01:00:50 +0000
ROA not after:            Tue 16 Sep 2025 01:00:50 +0000
asID:                     30103
IP address blocks:        2620:123:204c::/48 maxlen: 48
                          2620:123:204d::/48 maxlen: 48
                          2620:123:204e::/48 maxlen: 48
                          2620:123:204f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3a:15:89:a1:31:d1:dd:48:5f:d4:9b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: Jun 18 01:00:50 2025 GMT
            Not After : Sep 16 01:00:50 2025 GMT
        Subject: CN=e66bd578-49bf-480a-9fc2-a0ca47557307
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:bc:18:05:c1:f3:58:3e:10:df:88:05:51:3c:
                    84:3b:f8:97:d6:5e:40:42:5a:26:56:83:3f:8c:64:
                    0a:71:e9:8b:6c:2f:9a:69:79:76:5c:f8:41:76:8b:
                    cf:14:4e:35:aa:0e:b9:c9:a5:02:ed:83:e9:4b:bd:
                    04:16:ee:50:60:2b:eb:9d:3b:3e:b9:82:78:f4:67:
                    11:0a:9f:90:13:89:5d:fe:22:80:69:56:35:75:26:
                    b6:50:07:e7:7c:bf:a4:38:2e:c3:8f:82:ef:0d:85:
                    f2:8b:9e:e5:6e:13:ad:64:5e:e4:a6:55:bf:3f:71:
                    99:08:a3:90:02:25:78:b1:4f:a5:12:6a:d6:be:8a:
                    78:af:da:8d:59:26:a1:dd:38:09:9a:b8:f3:4b:29:
                    67:5b:51:ef:41:8d:44:0d:8e:bf:cb:1b:1a:89:c7:
                    fb:29:fb:f1:cd:ed:ee:c5:54:57:67:46:d1:2b:8d:
                    cb:b9:ac:fd:e6:3c:39:a1:51:a5:6a:4b:3c:31:7b:
                    1b:08:df:59:04:55:50:db:71:34:10:9e:ab:92:dc:
                    8b:30:16:cc:f7:06:c3:40:10:d7:6e:4c:aa:7d:ff:
                    69:16:2a:26:74:d1:cf:ef:73:3d:1f:99:0d:5b:95:
                    a1:06:54:a8:62:7d:0d:ba:b3:58:1f:94:70:fe:3e:
                    7a:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:17:13:32:13:AB:7C:F4:0B:0F:E0:03:82:5E:5C:1F:72:0B:C7:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/bb265d72-5451-3383-9899-d78b8a322a33.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:123:204c::/46

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:3f:dd:44:0e:c5:0c:d4:85:5f:93:da:32:ae:90:38:77:b1:
         c5:3e:e6:2b:73:89:93:55:5f:ac:cc:0c:66:1a:8f:81:8b:5e:
         3d:ed:e2:0b:81:58:91:51:5f:f5:90:92:6a:54:54:6e:c2:c2:
         d1:4c:35:59:65:57:25:d0:4e:14:25:a2:f7:02:88:9b:60:41:
         96:9b:24:3f:78:2e:05:f7:8c:ba:fd:7e:7d:4e:42:30:f2:01:
         41:13:c1:42:66:5b:7e:03:36:64:d5:7b:3b:6e:ea:18:69:fc:
         fe:7b:4c:d5:48:09:14:60:95:0d:3b:5e:3d:ab:73:69:92:89:
         97:6b:1d:a6:13:27:c2:85:9c:e0:f0:c1:18:f0:a8:8f:32:1d:
         24:b4:50:b0:e1:f8:ca:9b:03:d7:8f:da:d3:b7:f3:4f:f6:ac:
         fc:79:d8:6e:bd:0a:82:9f:0d:ee:c7:ff:69:d3:f1:6e:f0:e2:
         e9:11:28:10:85:e7:be:73:3e:ff:9c:93:8a:83:c7:8f:61:a0:
         35:d5:5b:de:f1:b2:3f:5b:2f:4c:e6:11:ab:7d:b3:fe:d2:c7:
         d1:08:de:37:e5:34:00:05:ea:bd:43:64:bd:f3:66:8c:4e:e2:
         2c:64:e8:5b:75:9d:09:81:db:b7:87:28:62:23:a1:a0:c2:fc:
         04:de:7e:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 16:07:47 2025 by rpki-client