Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/cd942d33-d988-3945-ba55-c98341144167.roa
File:                     cd942d33-d988-3945-ba55-c98341144167.roa (raw, json)
Hash identifier:          Fzb60iZJIfGWpui4UTH8p+FTdf8ap27oHEnV4pAh2cw=
Subject key identifier:   DC:CB:59:6A:C9:C3:E0:B9:DC:31:D0:CF:39:22:1F:AE:A9:3D:AB:F3
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F4328584A4C3B1BE9F90EB2A237CCB780
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/cd942d33-d988-3945-ba55-c98341144167.roa
Signing time:             Tue 24 Jun 2025 13:01:03 +0000
ROA not before:           Tue 24 Jun 2025 13:01:03 +0000
ROA not after:            Mon 22 Sep 2025 13:01:03 +0000
asID:                     30103
IP address blocks:        2620:123:2086::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4c:3b:1b:e9:f9:0e:b2:a2:37:cc:b7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: Jun 24 13:01:03 2025 GMT
            Not After : Sep 22 13:01:03 2025 GMT
        Subject: CN=78099d19-4158-4438-9d0e-e310c627e8a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:d6:c3:8d:b2:44:e5:fd:cf:c8:44:4c:eb:48:
                    07:2b:ed:08:3a:de:0c:8e:81:b5:a2:61:b1:e4:02:
                    56:30:9d:aa:44:3c:5b:83:6a:52:39:ca:60:e5:cb:
                    f7:d1:dc:8f:fe:7c:38:1c:41:9f:ed:16:a0:21:60:
                    f0:81:32:63:f1:4f:ba:5c:d8:a1:98:73:cd:3f:a5:
                    1b:8b:7f:37:a9:2b:2d:03:20:72:f9:98:13:d9:2a:
                    6d:14:cd:2e:dd:9d:4b:f5:4b:08:19:f9:71:cf:36:
                    99:69:30:7a:52:60:c5:d6:67:b7:a1:ce:9a:d2:28:
                    6f:5a:37:c5:fc:34:83:36:d3:f9:af:50:2f:21:35:
                    83:65:43:27:98:74:d5:c1:61:6d:77:32:17:7f:05:
                    e9:d6:69:b8:f8:50:84:ab:b1:39:e4:d3:36:52:59:
                    36:e4:b2:b7:cc:65:81:4f:86:91:45:7c:34:03:24:
                    9a:9e:23:ee:70:0d:a3:c1:3f:bc:16:c0:18:63:2f:
                    06:28:a8:08:90:f9:bc:cb:45:00:70:26:62:b7:24:
                    1e:84:fa:34:66:06:6d:67:9d:2f:55:d5:89:08:ec:
                    76:12:52:7d:82:2e:ac:cf:96:d5:95:70:26:a3:27:
                    b3:b4:cf:bf:99:76:10:ce:77:55:36:09:2f:40:b9:
                    22:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:CB:59:6A:C9:C3:E0:B9:DC:31:D0:CF:39:22:1F:AE:A9:3D:AB:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/cd942d33-d988-3945-ba55-c98341144167.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:123:2086::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:39:11:ab:a7:09:44:c9:e5:19:5d:3c:b6:9e:99:3d:30:7e:
         29:f6:51:64:fd:d5:10:9d:fb:fa:32:37:94:61:d0:dd:4e:c5:
         10:2b:c5:55:97:05:fb:4e:1f:50:49:98:55:4c:d8:4b:68:42:
         57:dd:6c:08:08:92:51:64:92:05:84:7c:0e:5c:cb:a6:5e:6a:
         2f:50:c2:3c:1c:d8:ef:1d:27:8f:dd:b1:0d:89:d1:85:d8:36:
         eb:9e:8a:b8:2b:5c:52:93:99:37:f2:9d:68:30:a1:23:68:0e:
         10:90:ff:b5:de:8c:57:70:09:43:fb:64:2b:ce:c2:06:a8:58:
         c5:67:7a:46:c0:f4:86:61:d6:80:54:12:7d:9f:8e:a3:e6:6f:
         7f:c0:d8:73:99:d8:af:9c:95:a7:cb:bc:ed:40:3d:c1:0f:62:
         5f:68:5c:af:02:18:7e:d2:bf:8d:50:97:09:e0:bb:8b:a1:60:
         1b:0b:bd:a6:0f:6d:06:57:eb:d1:c2:a3:44:3b:3d:b2:c1:9c:
         02:c5:28:dc:82:1e:ce:b0:76:c2:43:31:7f:7b:67:08:eb:25:
         e0:6e:b6:fc:69:9b:86:9b:1e:23:95:e2:32:46:30:86:2d:b4:
         ba:ff:6c:bc:d1:e7:f4:63:0f:01:f0:1e:d1:f9:bc:62:95:a6:
         b7:92:99:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 17:17:35 2025 by rpki-client