Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/d74ad7f3-7ec6-31d9-a26f-d46a9822a490.roa
File:                     d74ad7f3-7ec6-31d9-a26f-d46a9822a490.roa (raw, json)
Hash identifier:          Gi2ABh//kyX5dot5C5FBeqkWndxM1AMOw+U7VJ6GzIU=
Subject key identifier:   75:52:7B:1A:6D:03:8E:BA:5B:7C:3F:97:A9:8E:91:AA:71:29:0E:73
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F4328584DBBA05330630896EEC4BCBF80
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/d74ad7f3-7ec6-31d9-a26f-d46a9822a490.roa
Signing time:             Tue 05 May 2026 13:00:31 +0000
ROA not before:           Tue 05 May 2026 13:00:31 +0000
ROA not after:            Mon 03 Aug 2026 13:00:31 +0000
asID:                     30103
IP address blocks:        2620:123:2041::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:bb:a0:53:30:63:08:96:ee:c4:bc:bf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: May  5 13:00:31 2026 GMT
            Not After : Aug  3 13:00:31 2026 GMT
        Subject: CN=16af0e57-7fef-407a-a0e8-a3d913d7497e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:29:7b:24:db:3c:8a:b5:2a:fc:43:d9:ad:a1:
                    ce:d1:c6:22:62:80:3f:9c:a0:72:a1:f4:e5:f2:bb:
                    33:cc:84:20:06:6c:0d:68:42:50:46:7c:2f:c2:ea:
                    4a:11:55:88:22:21:35:c0:7f:bc:7b:ac:b6:25:3f:
                    a5:9c:7e:32:db:c8:05:a3:f3:98:2f:14:99:37:97:
                    97:5c:9f:9c:47:7b:72:ea:0f:73:0a:cd:d1:ce:3d:
                    dc:1a:84:a2:30:91:36:df:7c:87:30:8a:b4:57:b0:
                    42:d0:0a:16:30:a2:d0:15:37:d2:fc:4a:7c:a3:cc:
                    da:13:5c:ba:90:ac:38:05:ce:f9:38:44:73:de:01:
                    06:5b:72:3d:ed:11:5f:ba:23:bf:9a:15:3a:c4:cc:
                    bd:1d:99:27:77:3f:7d:e7:f2:07:1b:61:4b:b5:a8:
                    28:01:f0:6d:4c:4c:23:b7:d9:b5:7b:c2:0d:d6:2a:
                    2c:43:00:5b:d1:15:ce:2c:62:6c:f5:f6:4d:ef:ac:
                    7b:c0:eb:14:a5:6c:f9:05:f8:0f:75:26:19:0d:47:
                    9e:b1:ae:f8:4f:a7:bc:11:8b:19:a4:c8:19:86:ec:
                    40:9f:f2:02:83:94:96:71:aa:c0:3d:47:91:5c:8b:
                    b7:34:a6:9b:d1:75:c3:2c:71:4b:8e:f4:d4:3d:c6:
                    6c:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:52:7B:1A:6D:03:8E:BA:5B:7C:3F:97:A9:8E:91:AA:71:29:0E:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/d74ad7f3-7ec6-31d9-a26f-d46a9822a490.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:123:2041::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:8b:cf:d9:ff:7e:c5:3f:65:0c:30:0d:65:4b:c8:06:1e:0f:
         a2:30:8f:5f:8f:cc:a8:1c:e0:c2:3d:c5:93:be:b3:e6:2a:54:
         07:67:82:c7:0f:6f:86:14:5d:39:1b:9e:74:4f:18:fa:9a:4c:
         b6:12:d7:cd:8b:cf:e6:e4:95:c5:19:47:45:e4:49:44:cf:1c:
         55:42:e2:53:63:e2:18:8d:41:1a:ac:9e:f6:cb:6a:5e:be:37:
         dc:34:6b:4c:25:9d:5c:9c:ed:f5:a9:ca:af:84:18:8f:4d:ea:
         c7:fe:3f:a9:dc:88:f6:ec:b1:49:de:cf:b7:94:54:a9:01:65:
         a5:91:6a:70:e0:ef:c2:38:bb:53:08:f5:b2:a1:22:07:80:6d:
         27:7d:41:5d:4a:3c:f6:6f:72:ab:fd:dc:22:ea:48:3b:9d:9b:
         20:38:9a:92:b1:8f:03:13:18:9d:55:f6:b3:1c:67:76:29:7b:
         8b:68:30:62:e3:cd:65:24:5d:21:dc:4b:86:59:66:f3:65:1f:
         2f:c1:69:ad:83:9c:0c:0e:77:55:31:cf:b6:bb:1f:84:16:2f:
         ec:2b:fb:9b:f8:0c:cd:c8:7d:35:56:ec:09:5b:7e:70:bd:40:
         e4:61:0c:bd:3d:9c:a6:b4:ed:d6:34:3c:57:c3:71:58:b1:2c:
         86:76:da:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:38:21 2026 by rpki-client