Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/f0ae19ec-f9ec-3575-860f-ba937327c5bd.roa
File:                     f0ae19ec-f9ec-3575-860f-ba937327c5bd.roa (raw, json)
Hash identifier:          rnO20XOsyX1YAPHR6yXBeJp/Qnh+XVPU46xmu6d3Q5g=
Subject key identifier:   0B:BF:EE:B6:8D:D1:E1:42:56:B5:BB:60:34:8A:05:64:3A:86:12:D4
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F4328584A3A15896FD8D20A23456EF720
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/f0ae19ec-f9ec-3575-860f-ba937327c5bd.roa
Signing time:             Wed 18 Jun 2025 01:00:50 +0000
ROA not before:           Wed 18 Jun 2025 01:00:50 +0000
ROA not after:            Tue 16 Sep 2025 01:00:50 +0000
asID:                     30103
IP address blocks:        2620:123:2040::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3a:15:89:6f:d8:d2:0a:23:45:6e:f7:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: Jun 18 01:00:50 2025 GMT
            Not After : Sep 16 01:00:50 2025 GMT
        Subject: CN=797fc7b1-bdbd-40ff-a189-cf7c4b8a0085
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:f3:ac:85:09:a0:c7:15:11:5a:dc:7d:96:db:
                    81:f0:a1:d5:29:72:a4:f3:f3:7b:75:bf:0b:76:b8:
                    a2:1c:a7:51:68:9a:12:7d:07:4c:ec:1f:d0:29:e9:
                    49:d5:62:c7:49:63:8f:2b:8b:24:59:3e:dc:69:08:
                    67:9e:41:4e:c6:f2:da:b9:1c:11:3d:b7:36:cf:88:
                    b4:31:fc:88:36:8f:a4:6c:cd:dd:59:c2:48:e7:73:
                    a5:02:33:e3:5e:73:29:83:6a:0c:14:9c:bd:66:6b:
                    8e:ac:31:61:8b:c7:6f:ef:4d:e9:d9:6e:2f:fb:ff:
                    21:d2:93:eb:2f:bf:94:04:3b:12:d4:9e:7d:ed:da:
                    55:38:91:7a:85:62:20:c9:12:29:5c:cb:ce:15:bc:
                    2d:ec:16:00:d7:d8:44:74:d1:30:84:67:89:be:66:
                    c5:ec:9c:c8:7e:9b:4a:95:63:a9:00:96:37:8b:84:
                    92:94:50:76:d8:14:b2:6e:7e:bc:45:98:ed:54:76:
                    0a:b4:68:3c:fd:5f:6f:b3:4c:43:0c:5e:29:9e:e7:
                    53:54:5d:82:1e:e9:56:87:6c:f8:47:91:9b:96:6b:
                    3a:f3:de:c1:e8:2f:49:dd:1f:ef:a9:5e:98:1a:f4:
                    5e:1c:3a:1a:8a:1f:00:46:28:91:32:87:8d:11:c4:
                    a9:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:BF:EE:B6:8D:D1:E1:42:56:B5:BB:60:34:8A:05:64:3A:86:12:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/f0ae19ec-f9ec-3575-860f-ba937327c5bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:123:2040::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:f3:2f:94:45:4b:61:b9:38:75:96:e6:e7:ee:52:ab:e3:31:
         9a:bb:21:51:b5:5a:5e:c9:1f:57:ff:0f:56:d2:c3:53:fc:12:
         ff:f5:a3:5b:a2:3e:0c:73:0d:e8:36:bf:6e:f9:91:e9:90:8b:
         a7:c6:aa:5b:dc:59:44:11:d7:be:3e:3e:56:68:5a:c6:9e:f2:
         fe:2f:f5:36:d8:32:be:86:4e:5f:7b:02:b6:a6:ae:7a:ed:ee:
         a6:84:6a:36:d4:55:01:d0:e0:39:79:c0:5f:16:01:90:4f:09:
         a9:0b:e5:e5:64:03:78:9b:99:30:2b:6f:be:19:d5:32:6d:c4:
         b7:bb:ea:12:a4:65:88:6c:95:5c:01:6e:98:c2:cf:8f:e3:94:
         07:f5:ff:7a:9c:29:07:6e:7c:5e:04:fd:07:a2:20:ec:dd:6e:
         1e:7d:b4:86:0a:cd:3b:f6:e8:5f:66:58:3f:8b:eb:08:7d:81:
         1a:5f:01:fb:14:8e:8e:2d:2b:d3:72:91:b7:47:bc:db:46:c9:
         a1:19:bb:5d:57:00:9b:7e:f6:f1:20:3e:51:3d:c4:c0:a0:e6:
         07:26:ae:90:1b:90:73:d4:35:3f:de:7e:70:e5:6c:13:69:a2:
         19:e0:77:fc:f0:73:79:48:b7:96:f0:0a:ae:c2:8c:67:09:17:
         17:18:8d:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 20:51:35 2025 by rpki-client