Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/f8a5f063-8203-3462-8409-e7da53c7ee9a.roa
File:                     f8a5f063-8203-3462-8409-e7da53c7ee9a.roa (raw, json)
Hash identifier:          4ZhXL6g4L4yokwxkMQHYYk3qx7+Gyre6t9vd3LMJV50=
Subject key identifier:   E4:8D:05:45:98:D2:E6:37:F4:60:34:36:DA:60:0C:A4:62:4C:85:7E
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F4328584F497526408BD7B93FD5A7ED80
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/f8a5f063-8203-3462-8409-e7da53c7ee9a.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     30103
IP address blocks:        149.137.64.0/24 maxlen: 24
                          162.12.234.0/23 maxlen: 24
                          162.255.38.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:75:26:40:8b:d7:b9:3f:d5:a7:ed:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=89aa19ce-9e3f-4ede-a1a2-2710751cc0df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:ce:f9:5c:89:36:92:73:1e:73:1a:be:a9:df:
                    26:d3:fa:5c:ce:f0:b3:b9:3b:53:ca:29:95:22:74:
                    de:3a:84:5a:bb:7a:c7:64:1f:9d:85:67:cd:5d:6a:
                    54:15:e1:b0:74:59:54:02:3a:25:f7:c9:e3:72:ca:
                    08:a7:39:72:a8:e4:a7:1f:dc:50:a4:e1:e9:a0:2f:
                    85:e0:46:60:48:79:e2:63:1b:ce:3d:71:ad:d3:d6:
                    f8:91:00:24:02:31:f5:fe:82:47:65:5f:24:80:8c:
                    be:28:61:d3:48:8b:b8:c7:9d:90:ba:c0:2f:98:4e:
                    86:67:fb:e5:cc:71:87:dd:0f:8a:8a:e4:92:b9:9c:
                    89:07:64:ac:73:ae:8d:de:01:7b:32:96:2f:c2:d5:
                    1e:2b:65:db:b9:36:37:5b:ea:84:ac:36:b9:1b:19:
                    92:a7:72:59:9c:db:f8:26:01:c8:bc:70:83:43:89:
                    5d:e1:44:f2:22:df:75:c5:70:ad:33:6f:4b:da:2d:
                    37:47:f5:8a:fa:57:16:c1:ae:2f:d5:97:47:8e:aa:
                    ef:4c:79:fa:4c:15:1b:3b:e8:51:b0:4b:a1:98:1b:
                    b7:5b:4b:87:da:7f:72:ff:c7:cd:61:32:e0:d2:cf:
                    c4:e5:53:8f:18:e5:b0:f8:32:6a:31:2d:18:7a:92:
                    e0:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:8D:05:45:98:D2:E6:37:F4:60:34:36:DA:60:0C:A4:62:4C:85:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/f8a5f063-8203-3462-8409-e7da53c7ee9a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.137.64.0/24
                  162.12.234.0/23
                  162.255.38.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:ea:4d:50:78:b9:d8:e1:87:aa:26:3b:97:91:12:00:bd:2f:
         b9:d9:d2:67:db:60:fa:91:45:79:25:5d:32:7a:88:df:f8:4e:
         34:fc:78:ad:12:63:ae:ef:89:99:e5:cd:60:20:4e:ac:20:ed:
         a5:f4:11:14:13:fc:32:ed:ac:52:28:7e:8a:09:73:a2:bc:e5:
         e2:9b:65:3e:81:34:0f:4a:ef:db:d9:d9:c5:de:d1:5d:ef:be:
         4c:08:fb:db:f7:21:2b:89:61:2d:e0:d8:d0:2b:7e:0f:ee:43:
         44:5b:cf:17:d8:98:ea:9a:38:57:7f:66:45:91:30:05:1c:91:
         bd:1e:0f:bb:28:58:cb:6a:e2:53:93:04:a0:ab:0e:7f:6a:32:
         e0:b8:68:03:34:b0:ca:d1:57:92:b5:d3:c2:35:64:23:6e:a2:
         b6:4d:4f:84:7c:87:fc:a6:8f:1a:4d:3b:65:2c:b6:c1:ce:b7:
         a3:7a:82:82:49:49:92:e1:11:d2:15:ab:7a:80:1b:3b:dd:8e:
         f2:04:b0:62:bf:21:bc:c5:17:45:ed:19:bf:ca:5c:37:b3:40:
         d5:3d:40:7e:57:c5:bf:ab:52:4b:f6:1b:c1:11:73:3f:2f:d1:
         3f:8d:c0:04:48:66:f2:72:22:09:84:3a:56:21:48:42:1c:05:
         93:76:a3:e3
-----BEGIN CERTIFICATE-----
MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWE9JdSZAi9e5P9Wn7YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGM0NTVlNTgtNjE4OS00ZjI4LWI4MDMtNjFhOTY1YTIx
YzY1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
ODlhYTE5Y2UtOWUzZi00ZWRlLWExYTItMjcxMDc1MWNjMGRmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm875XIk2knMecxq+qd8m0/pczvCzuTtTyimV
InTeOoRau3rHZB+dhWfNXWpUFeGwdFlUAjol98njcsoIpzlyqOSnH9xQpOHpoC+F
4EZgSHniYxvOPXGt09b4kQAkAjH1/oJHZV8kgIy+KGHTSIu4x52QusAvmE6GZ/vl
zHGH3Q+KiuSSuZyJB2Ssc66N3gF7MpYvwtUeK2XbuTY3W+qErDa5GxmSp3JZnNv4
JgHIvHCDQ4ld4UTyIt91xXCtM29L2i03R/WK+lcWwa4v1ZdHjqrvTHn6TBUbO+hR
sEuhmBu3W0uH2n9y/8fNYTLg0s/E5VOPGOWw+DJqMS0YepLg9QIDAQABo4IDYTCC
A10wHQYDVR0OBBYEFOSNBUWY0uY39GA0NtpgDKRiTIV+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1
NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5NjVhMjFjNjUvZjhhNWYwNjMtODIwMy0z
NDYyLTg0MDktZTdkYTUzYzdlZTlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGM0NTVlNTgtNjE4OS00ZjI4LWI4
MDMtNjFhOTY1YTIxYzY1L2RjNDU1ZTU4LTYxODktNGYyOC1iODAzLTYxYTk2NWEy
MWM2NS5jcmwwHwYDVR0jBBgwFoAUZka/BM8QPkyukKDmzSU2ULZFvD8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5
NjVhMjFjNjUuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAlYlAAwQB
ogzqAwQAov8mMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC
ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww
DQYJKoZIhvcNAQELBQADggEBAFXqTVB4udjhh6omO5eREgC9L7nZ0mfbYPqRRXkl
XTJ6iN/4TjT8eK0SY67viZnlzWAgTqwg7aX0ERQT/DLtrFIofooJc6K85eKbZT6B
NA9K79vZ2cXe0V3vvkwI+9v3ISuJYS3g2NArfg/uQ0RbzxfYmOqaOFd/ZkWRMAUc
kb0eD7soWMtq4lOTBKCrDn9qMuC4aAM0sMrRV5K108I1ZCNuorZNT4R8h/ymjxpN
O2UstsHOt6N6goJJSZLhEdIVq3qAGzvdjvIEsGK/IbzFF0XtGb/KXDezQNU9QH5X
xb+rUkv2G8ERcz8v0T+NwARIZvJyIgmEOlYhSEIcBZN2o+M=
-----END CERTIFICATE-----
Generated at Fri Sep 25 17:18:08 2026 by rpki-client