Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/d274a1a4-4284-3ce0-a276-785c1add14e8.roa
File:                     d274a1a4-4284-3ce0-a276-785c1add14e8.roa (raw, json)
Hash identifier:          To7uMqFLr8ZiWlEgkZKjNBrurKHYVBdhVFLih1/WkN4=
Subject key identifier:   FA:A1:18:3D:48:35:AA:15:C4:C6:17:6B:23:A4:A8:7F:43:7E:FC:A1
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F4328584F4542827C116FBD0811B29300
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/d274a1a4-4284-3ce0-a276-785c1add14e8.roa
Signing time:             Wed 23 Sep 2026 13:00:11 +0000
ROA not before:           Wed 23 Sep 2026 13:00:11 +0000
ROA not after:            Tue 22 Dec 2026 14:00:11 +0000
asID:                     31898
IP address blocks:        170.114.102.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 15 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:45:42:82:7c:11:6f:bd:08:11:b2:93:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: Sep 23 13:00:11 2026 GMT
            Not After : Dec 22 14:00:11 2026 GMT
        Subject: CN=9ca12c3a-1070-47c5-ab33-1743548f7f1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:80:7d:c3:77:64:8e:f6:23:2c:7f:ec:80:63:
                    d4:ec:ac:2f:23:2a:64:f2:53:e0:78:89:d4:74:7a:
                    cb:87:ea:0b:0c:ab:10:9a:33:de:94:ce:e3:48:b4:
                    58:cd:3b:48:a5:27:f6:23:f5:cd:d4:22:a3:45:c9:
                    7f:9a:a2:22:aa:0e:89:73:e8:e0:07:a0:17:12:0a:
                    c3:f8:27:c8:ea:71:d0:f1:d1:de:45:f6:84:aa:f9:
                    af:0f:88:ab:1b:fd:07:62:28:34:92:f0:03:0a:1c:
                    f7:ca:be:9b:7f:89:6a:8a:7e:48:9a:9d:51:0b:48:
                    2f:0e:ba:28:e9:90:00:ca:7b:12:bc:db:7d:19:4e:
                    64:9b:5f:cd:75:4e:49:79:ad:46:e0:49:ca:84:35:
                    c4:f7:74:ef:f4:48:03:25:df:92:f1:ec:74:bc:bc:
                    f5:97:b5:6b:1f:cc:b4:4b:54:9d:84:1c:39:71:61:
                    06:2a:5b:9b:f1:2a:60:b9:40:00:83:79:2a:f2:3f:
                    f9:c3:c3:35:87:08:0d:a9:10:b5:2e:ad:a8:fe:e5:
                    52:8a:06:05:b6:bc:e3:00:1c:9b:1a:c7:31:d2:84:
                    04:43:d4:cd:cd:3f:8a:b9:3a:61:57:9c:7d:a2:65:
                    e3:8b:05:d4:12:79:e0:a8:0c:2f:ec:d1:50:0a:39:
                    45:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:A1:18:3D:48:35:AA:15:C4:C6:17:6B:23:A4:A8:7F:43:7E:FC:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/d274a1a4-4284-3ce0-a276-785c1add14e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.114.102.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:9b:f0:77:6f:ae:f4:87:c4:db:47:78:1f:55:45:b6:bd:94:
         60:ea:af:00:b9:19:c8:f7:bf:fd:0e:21:87:ce:f3:f9:26:6a:
         cf:03:2f:58:c4:a5:ea:84:a1:ac:b2:ba:6b:ae:49:00:ed:07:
         5c:25:f5:e9:c9:6d:53:fb:99:a7:f3:28:db:a8:38:d9:72:13:
         ec:17:4b:a0:8a:9f:59:92:c6:88:29:78:e8:c0:d1:df:4d:50:
         58:18:05:08:9b:dd:e6:b2:48:2a:4b:1b:d6:b3:38:e1:15:2a:
         6b:10:a8:11:fb:f4:c3:9b:bb:0b:73:29:74:1a:db:4d:a4:95:
         6e:5f:df:8f:02:98:31:0f:29:70:d7:f6:56:f6:0b:16:3b:b0:
         84:d8:a6:93:83:67:f1:85:5e:1f:42:d5:a2:f5:70:30:79:48:
         29:58:ff:7a:c2:5e:03:8b:18:db:06:49:c5:aa:c5:a2:f2:76:
         6e:a6:ab:51:25:3e:18:9d:a3:d1:8e:68:a9:57:64:7a:a3:12:
         67:54:54:0e:f9:22:39:52:0b:56:e5:cf:cc:dc:c4:58:cc:77:
         79:81:1c:40:76:0c:38:35:3f:63:97:b7:94:db:50:df:cb:83:
         a9:f1:38:04:fb:1b:39:97:f5:e9:b8:87:43:bc:e7:b9:e8:ed:
         83:43:41:30
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9FQoJ8EW+9CBGykwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGM0NTVlNTgtNjE4OS00ZjI4LWI4MDMtNjFhOTY1YTIx
YzY1MB4XDTI2MDkyMzEzMDAxMVoXDTI2MTIyMjE0MDAxMVowLzEtMCsGA1UEAxMk
OWNhMTJjM2EtMTA3MC00N2M1LWFiMzMtMTc0MzU0OGY3ZjFkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0IB9w3dkjvYjLH/sgGPU7KwvIypk8lPgeInU
dHrLh+oLDKsQmjPelM7jSLRYzTtIpSf2I/XN1CKjRcl/mqIiqg6Jc+jgB6AXEgrD
+CfI6nHQ8dHeRfaEqvmvD4irG/0HYig0kvADChz3yr6bf4lqin5Imp1RC0gvDroo
6ZAAynsSvNt9GU5km1/NdU5Jea1G4EnKhDXE93Tv9EgDJd+S8ex0vLz1l7VrH8y0
S1SdhBw5cWEGKlub8SpguUAAg3kq8j/5w8M1hwgNqRC1Lq2o/uVSigYFtrzjAByb
Gscx0oQEQ9TNzT+KuTphV5x9omXjiwXUEnngqAwv7NFQCjlFfQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPqhGD1INaoVxMYXayOkqH9DfvyhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1
NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5NjVhMjFjNjUvZDI3NGExYTQtNDI4NC0z
Y2UwLWEyNzYtNzg1YzFhZGQxNGU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGM0NTVlNTgtNjE4OS00ZjI4LWI4
MDMtNjFhOTY1YTIxYzY1L2RjNDU1ZTU4LTYxODktNGYyOC1iODAzLTYxYTk2NWEy
MWM2NS5jcmwwHwYDVR0jBBgwFoAUZka/BM8QPkyukKDmzSU2ULZFvD8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5
NjVhMjFjNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqnJmMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAKb8HdvrvSHxNtHeB9VRba9lGDqrwC5Gcj3v/0OIYfO8/kmas8DL1jE
peqEoayyumuuSQDtB1wl9enJbVP7mafzKNuoONlyE+wXS6CKn1mSxogpeOjA0d9N
UFgYBQib3eaySCpLG9azOOEVKmsQqBH79MObuwtzKXQa202klW5f348CmDEPKXDX
9lb2CxY7sITYppODZ/GFXh9C1aL1cDB5SClY/3rCXgOLGNsGScWqxaLydm6mq1El
Phido9GOaKlXZHqjEmdUVA75IjlSC1blz8zcxFjMd3mBHEB2DDg1P2OXt5TbUN/L
g6nxOAT7GzmX9em4h0O857no7YNDQTA=
-----END CERTIFICATE-----
Generated at Wed Oct 14 03:49:38 2026 by rpki-client