Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/eca12f89-04b2-3504-a940-6dd9edca63b4.roa
File:                     eca12f89-04b2-3504-a940-6dd9edca63b4.roa (raw, json)
Hash identifier:          P3OF7fDdsE1dtbp5ntQDQIQk3TLxSg8EI/Iv5OcVEig=
Subject key identifier:   0F:98:71:DB:3F:59:0C:81:B2:DD:22:B5:23:0A:74:76:69:E1:FA:F4
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F4328584DCDC5AA01E146FCD70373F3C0
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/eca12f89-04b2-3504-a940-6dd9edca63b4.roa
Signing time:             Tue 12 May 2026 01:00:24 +0000
ROA not before:           Tue 12 May 2026 01:00:24 +0000
ROA not after:            Mon 10 Aug 2026 01:00:24 +0000
asID:                     30103
IP address blocks:        149.137.40.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cd:c5:aa:01:e1:46:fc:d7:03:73:f3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: May 12 01:00:24 2026 GMT
            Not After : Aug 10 01:00:24 2026 GMT
        Subject: CN=a529dccf-4430-485f-8d91-ba53e3b18fca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:7e:17:c1:6a:f1:7c:a5:a7:40:1b:b8:e1:b0:
                    dd:8d:95:3b:07:4c:62:4a:bb:bb:e7:dc:1e:e1:d8:
                    09:b4:b9:31:1f:a8:6b:b6:04:15:84:57:d4:ab:59:
                    78:b9:e5:0a:9f:60:52:4c:b5:6e:1b:84:9d:80:b5:
                    01:df:59:16:6c:01:b1:35:e4:84:02:b9:61:d7:a0:
                    be:cd:98:7a:0e:8d:31:b2:97:9c:ac:e8:15:de:a3:
                    9c:93:86:f1:63:1b:73:dc:34:11:05:20:e3:44:ec:
                    76:a3:09:0b:08:d0:9b:3a:a7:34:2d:a4:80:44:e9:
                    79:e7:2f:9b:7b:6b:83:4b:66:a9:27:ea:b6:d4:c3:
                    99:31:ad:17:6c:a8:da:08:e1:72:3e:68:93:5a:7e:
                    42:2c:5a:7d:61:e9:13:cd:7a:2a:ac:b4:92:a3:98:
                    b7:43:a8:99:a5:80:37:38:10:39:a8:99:5e:51:22:
                    7e:54:6c:ce:db:34:8f:77:e4:2a:10:fb:6f:b9:a9:
                    f2:2c:2c:c0:11:c8:43:c3:93:4f:3f:1f:51:d1:61:
                    96:15:41:2c:2d:02:58:d0:a2:7c:13:3f:a5:c0:31:
                    97:82:9e:f2:a6:38:e1:73:92:56:25:45:d8:c1:a6:
                    aa:b9:55:83:e0:bd:df:0c:0f:aa:cc:62:a9:a1:41:
                    90:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:98:71:DB:3F:59:0C:81:B2:DD:22:B5:23:0A:74:76:69:E1:FA:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/eca12f89-04b2-3504-a940-6dd9edca63b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.137.40.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:3d:e4:93:a6:c5:53:94:a1:d7:0f:94:50:f4:a5:79:70:ee:
         da:af:b9:d4:d3:7c:36:b0:8a:48:40:a7:f8:cf:43:19:0c:30:
         16:d9:10:36:00:3a:ea:1f:2e:90:d8:60:a3:d4:a5:d8:63:2f:
         33:27:4e:46:84:cd:77:82:91:64:49:4f:fc:3c:2e:ca:df:3f:
         6b:d1:71:ef:94:8d:ed:d8:28:74:52:78:f3:c8:b6:80:0f:70:
         99:88:f5:c4:e2:9b:8a:9e:e2:dd:8b:45:27:1b:b9:36:8c:be:
         7d:55:98:af:a0:8e:d1:8d:b6:b2:ed:92:3b:75:31:32:22:9c:
         ec:57:c6:32:9e:5c:ee:e6:8e:36:00:0d:8d:91:dc:64:de:d2:
         1c:3a:0d:15:e9:19:98:7e:7d:d9:19:7b:2f:82:0f:92:30:90:
         e5:76:44:97:69:c4:65:6c:d9:77:f1:a2:34:85:be:37:64:58:
         bb:21:76:3c:ab:c7:47:d2:37:f1:b5:b4:da:65:ef:d6:ce:e6:
         f9:fe:de:2b:2a:88:83:df:ba:c9:f7:78:c1:d0:26:30:8d:f1:
         4a:65:27:49:fc:78:d3:dd:eb:fb:f7:98:67:86:cf:e9:69:ce:
         2f:3c:ad:32:e6:c4:8e:db:d9:2b:6a:09:3d:e2:e6:66:bd:f2:
         28:b7:61:b3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3NxaoB4Ub81wNz88AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGM0NTVlNTgtNjE4OS00ZjI4LWI4MDMtNjFhOTY1YTIx
YzY1MB4XDTI2MDUxMjAxMDAyNFoXDTI2MDgxMDAxMDAyNFowLzEtMCsGA1UEAxMk
YTUyOWRjY2YtNDQzMC00ODVmLThkOTEtYmE1M2UzYjE4ZmNhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi34XwWrxfKWnQBu44bDdjZU7B0xiSru759we
4dgJtLkxH6hrtgQVhFfUq1l4ueUKn2BSTLVuG4SdgLUB31kWbAGxNeSEArlh16C+
zZh6Do0xspecrOgV3qOck4bxYxtz3DQRBSDjROx2owkLCNCbOqc0LaSAROl55y+b
e2uDS2apJ+q21MOZMa0XbKjaCOFyPmiTWn5CLFp9YekTzXoqrLSSo5i3Q6iZpYA3
OBA5qJleUSJ+VGzO2zSPd+QqEPtvuanyLCzAEchDw5NPPx9R0WGWFUEsLQJY0KJ8
Ez+lwDGXgp7ypjjhc5JWJUXYwaaquVWD4L3fDA+qzGKpoUGQ2QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFA+Ycds/WQyBst0itSMKdHZp4fr0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1
NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5NjVhMjFjNjUvZWNhMTJmODktMDRiMi0z
NTA0LWE5NDAtNmRkOWVkY2E2M2I0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGM0NTVlNTgtNjE4OS00ZjI4LWI4
MDMtNjFhOTY1YTIxYzY1L2RjNDU1ZTU4LTYxODktNGYyOC1iODAzLTYxYTk2NWEy
MWM2NS5jcmwwHwYDVR0jBBgwFoAUZka/BM8QPkyukKDmzSU2ULZFvD8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5
NjVhMjFjNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDlYkoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKY95JOmxVOUodcPlFD0pXlw7tqvudTTfDawikhAp/jPQxkMMBbZEDYA
OuofLpDYYKPUpdhjLzMnTkaEzXeCkWRJT/w8LsrfP2vRce+Uje3YKHRSePPItoAP
cJmI9cTim4qe4t2LRScbuTaMvn1VmK+gjtGNtrLtkjt1MTIinOxXxjKeXO7mjjYA
DY2R3GTe0hw6DRXpGZh+fdkZey+CD5IwkOV2RJdpxGVs2XfxojSFvjdkWLshdjyr
x0fSN/G1tNpl79bO5vn+3isqiIPfusn3eMHQJjCN8UplJ0n8eNPd6/v3mGeGz+lp
zi88rTLmxI7b2StqCT3i5ma98ii3YbM=
-----END CERTIFICATE-----
Generated at Wed May 13 12:23:24 2026 by rpki-client