Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/3264f8c5-4900-37fe-842e-ea295af71609.roa
File:                     3264f8c5-4900-37fe-842e-ea295af71609.roa (raw, json)
Hash identifier:          MRPia5PrLnrlQGOLcLHkSucbN3hds0P84BS8vpi3WUg=
Subject key identifier:   19:C6:91:C0:FC:E4:E7:FF:06:F7:CA:74:EF:DE:C1:D3:06:63:F4:C8
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F4328584E9BE51768C55EA6F688D426A0
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/3264f8c5-4900-37fe-842e-ea295af71609.roa
Signing time:             Fri 24 Jul 2026 21:00:12 +0000
ROA not before:           Fri 24 Jul 2026 21:00:12 +0000
ROA not after:            Thu 22 Oct 2026 21:00:12 +0000
asID:                     30103
IP address blocks:        149.137.56.0/22 maxlen: 24
                          173.231.92.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9b:e5:17:68:c5:5e:a6:f6:88:d4:26:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: Jul 24 21:00:12 2026 GMT
            Not After : Oct 22 21:00:12 2026 GMT
        Subject: CN=c70b0de2-bd5b-410b-a46d-dab586fd145f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:cc:b4:1c:16:fd:06:d5:4b:60:13:d9:55:dc:
                    d3:5b:da:d1:3a:50:d7:a0:a0:a0:cc:bd:f4:52:59:
                    4c:bf:a3:60:be:8e:87:72:a5:06:20:a2:5a:23:9f:
                    d7:9e:07:cf:c4:2b:f2:8e:8e:cf:bb:42:a4:76:ba:
                    00:3c:38:14:b2:f2:e8:64:6c:03:31:69:35:72:09:
                    4d:68:93:43:b6:da:ef:01:d8:03:9e:26:6a:2e:f7:
                    f8:43:d1:00:31:62:93:e3:23:53:0e:c1:42:38:f2:
                    62:64:9f:ad:c4:ea:cc:98:d7:8e:fb:6b:b6:aa:33:
                    9e:24:76:6c:26:4a:a0:cd:a2:83:a3:7b:e3:66:61:
                    9f:76:89:29:a1:b0:c9:14:47:30:42:5f:b3:3a:48:
                    e7:3e:1f:dd:8f:fa:9a:23:2a:a1:75:bb:f6:8f:48:
                    f9:4c:36:4c:a6:57:74:58:58:43:bb:fc:e9:69:58:
                    18:77:0d:77:da:8c:ff:f5:f9:81:b2:9d:dc:92:16:
                    99:7d:75:91:5e:42:a1:40:a8:85:d9:ea:31:02:9d:
                    82:4d:94:de:c5:f2:23:90:b1:b8:13:40:da:e1:fb:
                    f9:bc:f5:d0:51:ed:45:39:2b:fe:ba:9f:0d:e4:b3:
                    4e:d1:50:46:fa:d2:3b:50:dd:b8:8c:6b:42:6b:93:
                    4d:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:C6:91:C0:FC:E4:E7:FF:06:F7:CA:74:EF:DE:C1:D3:06:63:F4:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/3264f8c5-4900-37fe-842e-ea295af71609.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.137.56.0/22
                  173.231.92.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:78:e3:bf:6e:31:b4:27:e1:4a:9a:89:1c:0a:b3:75:4c:e1:
         7a:ad:f3:91:5a:82:a1:31:58:95:49:ad:f2:f1:9d:b4:d6:d7:
         32:8a:ab:d7:54:dc:e7:41:57:04:3b:14:82:51:5b:35:43:36:
         9a:c7:c7:da:67:3e:7a:72:e2:c9:e9:8a:14:e0:54:b3:ac:bd:
         7e:f8:48:30:c0:ce:a4:6b:94:f3:d8:00:56:cf:84:4d:f8:f3:
         c0:d1:79:e7:50:b4:e6:52:64:22:c9:0d:c3:d6:de:ee:a8:4e:
         73:1c:4a:41:70:95:81:21:a9:f8:3c:cc:9a:bf:9f:b8:ec:dd:
         55:5c:ea:ee:d4:c4:7f:b3:a0:f0:1d:62:6f:99:b7:fc:91:3c:
         4e:7d:73:a5:0c:3d:fe:e0:eb:a0:72:92:db:c7:2a:84:b4:93:
         ab:ce:be:37:c6:54:6d:a4:1e:55:1e:a1:ff:0d:56:6f:cd:19:
         5e:0c:87:2f:c8:23:f9:1a:d3:31:76:40:96:3d:7c:6c:20:55:
         23:2a:7d:a9:3e:5b:07:a2:13:bd:d9:81:79:1a:c2:d8:b4:4d:
         d4:ee:d7:ba:71:a4:89:44:ae:b8:77:23:70:ec:71:fc:db:14:
         75:97:6a:36:58:e5:76:e0:af:81:15:8e:c4:e2:37:cc:4f:65:
         30:04:4b:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:32:32 2026 by rpki-client