Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d87637ed-589b-3719-b2cf-7799ebf79109.roa
File:                     d87637ed-589b-3719-b2cf-7799ebf79109.roa (raw, json)
Hash identifier:          Zp0yC4gWV/Fx6hTbwbUL5Yqu8ImeLoRZDYuM2Huqxfg=
Subject key identifier:   08:61:1B:9D:2D:B3:93:50:F1:9A:A3:0E:29:60:26:09:4F:42:DF:E8
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F4328584F655D7A12C0ACBAFF3DFFAC30
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d87637ed-589b-3719-b2cf-7799ebf79109.roa
Signing time:             Mon 05 Oct 2026 01:00:13 +0000
ROA not before:           Mon 05 Oct 2026 01:00:13 +0000
ROA not after:            Sun 03 Jan 2027 02:00:13 +0000
asID:                     8075
IP address blocks:        149.1.0.0/16 maxlen: 16
                          150.212.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:65:5d:7a:12:c0:ac:ba:ff:3d:ff:ac:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: Oct  5 01:00:13 2026 GMT
            Not After : Jan  3 02:00:13 2027 GMT
        Subject: CN=2f4c66e9-88c3-4d18-8938-131d8f4c0f12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:bd:9d:ee:6c:68:82:fa:cf:25:1f:8a:9c:0d:
                    3b:30:f7:8c:25:17:e3:f5:6c:6c:06:64:aa:57:bf:
                    db:76:e5:a7:51:17:cf:c7:d4:73:ed:1c:b3:67:5c:
                    c3:8a:49:bb:fb:a4:f4:a2:19:c5:93:a5:f2:b7:94:
                    a0:83:c6:59:a5:7a:1c:22:47:71:ff:ba:14:a1:3c:
                    b0:0c:b3:87:1c:f7:2b:7a:28:e0:15:5d:87:33:10:
                    4f:53:ba:98:2c:28:76:ba:fe:8c:72:a2:0b:be:09:
                    37:de:70:d1:4f:0d:c5:1b:f5:24:c0:0b:24:d4:2d:
                    13:cc:b0:ea:97:b8:f4:9c:d3:64:46:86:a8:53:e3:
                    9f:43:b0:47:93:08:f2:8c:d4:c6:ba:b0:9a:5c:e3:
                    11:40:d9:ca:90:37:71:6a:4e:de:86:f4:0a:d0:12:
                    3f:a0:eb:25:36:29:e9:07:2c:5c:fd:61:94:6f:24:
                    24:6f:a2:48:7b:c2:de:f6:c9:28:bf:19:46:50:4b:
                    30:c0:c7:16:ec:20:d8:66:cf:a2:83:73:f4:d8:74:
                    86:3b:48:3a:5e:9b:3a:e5:1d:9c:4e:4a:6b:9d:75:
                    90:73:47:89:86:2d:df:28:9a:55:c6:4d:71:c6:cc:
                    bb:54:ad:71:f8:34:48:4a:16:d5:8f:ad:1e:fb:0e:
                    7a:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:61:1B:9D:2D:B3:93:50:F1:9A:A3:0E:29:60:26:09:4F:42:DF:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d87637ed-589b-3719-b2cf-7799ebf79109.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.1.0.0/16
                  150.212.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:dd:ce:87:c0:a9:7f:31:7d:f3:4c:5d:ef:a3:dd:4e:91:54:
         7d:c4:87:c0:00:9f:6a:de:98:3e:58:5c:db:d3:0f:94:8b:d4:
         c0:a9:72:ec:9f:ce:95:43:6a:9a:6d:cd:e8:06:e3:18:87:fe:
         bd:e8:4a:4f:0c:17:02:9e:72:16:d5:8b:ab:8d:29:3d:19:ca:
         6c:11:0e:32:9c:bb:a1:d9:6b:6b:62:a8:24:b8:d1:8b:08:e2:
         f8:f6:6a:54:ab:3e:fe:28:0d:5c:f1:0a:a2:10:24:43:6f:48:
         59:52:0b:27:35:39:b5:0e:9f:63:61:81:4b:02:21:73:fa:6d:
         b7:ba:c0:4d:1e:18:13:2b:ee:4a:33:b7:90:b5:c0:c9:3b:2e:
         3e:b7:03:5b:5c:25:68:75:df:fc:63:59:fb:71:06:2a:43:1e:
         35:c0:98:99:b2:a7:18:0c:dd:ac:14:2c:16:4c:7c:96:ef:05:
         76:8f:5f:4e:dd:66:5a:5c:72:f4:ce:39:e4:33:e4:dc:4b:8d:
         c8:41:49:db:a9:44:57:d9:0c:d9:9e:0b:7c:4b:97:5f:b6:40:
         fe:89:6b:e1:1e:92:35:ec:87:69:76:b5:6f:1b:89:b5:4a:04:
         16:e8:6a:41:43:73:a1:cc:69:20:94:97:58:13:f3:e0:2d:3c:
         63:2a:ba:6f
-----BEGIN CERTIFICATE-----
MIIGRzCCBS+gAwIBAgIUAQ0Mn0MoWE9lXXoSwKy6/z3/rDAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1
ZWVhMB4XDTI2MTAwNTAxMDAxM1oXDTI3MDEwMzAyMDAxM1owLzEtMCsGA1UEAxMk
MmY0YzY2ZTktODhjMy00ZDE4LTg5MzgtMTMxZDhmNGMwZjEyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1L2d7mxogvrPJR+KnA07MPeMJRfj9WxsBmSq
V7/bduWnURfPx9Rz7RyzZ1zDikm7+6T0ohnFk6Xyt5Sgg8ZZpXocIkdx/7oUoTyw
DLOHHPcreijgFV2HMxBPU7qYLCh2uv6McqILvgk33nDRTw3FG/UkwAsk1C0TzLDq
l7j0nNNkRoaoU+OfQ7BHkwjyjNTGurCaXOMRQNnKkDdxak7ehvQK0BI/oOslNinp
Byxc/WGUbyQkb6JIe8Le9skovxlGUEswwMcW7CDYZs+ig3P02HSGO0g6Xps65R2c
TkprnXWQc0eJhi3fKJpVxk1xxsy7VK1x+DRIShbVj60e+w56kQIDAQABo4IDWTCC
A1UwHQYDVR0OBBYEFAhhG50ts5NQ8ZqjDilgJglPQt/oMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy
ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZDg3NjM3ZWQtNTg5Yi0z
NzE5LWIyY2YtNzc5OWViZjc5MTA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky
M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl
NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz
ODRkZTVlZWEuY2VyMCMGCCsGAQUFBwEHAQH/BBQwEjAQBAIAATAKAwMAlQEDAwCW
1DBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBz
Oi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3
DQEBCwUAA4IBAQA+3c6HwKl/MX3zTF3vo91OkVR9xIfAAJ9q3pg+WFzb0w+Ui9TA
qXLsn86VQ2qabc3oBuMYh/696EpPDBcCnnIW1YurjSk9GcpsEQ4ynLuh2WtrYqgk
uNGLCOL49mpUqz7+KA1c8QqiECRDb0hZUgsnNTm1Dp9jYYFLAiFz+m23usBNHhgT
K+5KM7eQtcDJOy4+twNbXCVodd/8Y1n7cQYqQx41wJiZsqcYDN2sFCwWTHyW7wV2
j19O3WZaXHL0zjnkM+TcS43IQUnbqURX2QzZngt8S5dftkD+iWvhHpI17IdpdrVv
G4m1SgQW6GpBQ3OhzGkglJdYE/PgLTxjKrpv
-----END CERTIFICATE-----
Generated at Thu Oct 8 15:53:08 2026 by rpki-client