Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/4782f967-96fb-31d3-a39c-697cd171883c.roa
File:                     4782f967-96fb-31d3-a39c-697cd171883c.roa (raw, json)
Hash identifier:          0+TGHgLKNcdWxZJ3E0O9T19NhS6Lejql4Auqzp7BU40=
Subject key identifier:   06:FF:96:9A:67:99:C3:BE:16:AD:B1:A4:F0:67:4B:7F:2C:42:6C:5D
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F4328584D4D5A6A4BA79EF3BE7D08E460
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/4782f967-96fb-31d3-a39c-697cd171883c.roa
Signing time:             Fri 27 Mar 2026 01:00:31 +0000
ROA not before:           Fri 27 Mar 2026 01:00:31 +0000
ROA not after:            Thu 25 Jun 2026 01:00:31 +0000
asID:                     30103
IP address blocks:        147.124.96.0/23 maxlen: 24
                          147.124.98.0/23 maxlen: 24
                          147.124.100.0/23 maxlen: 24
                          147.124.102.0/23 maxlen: 24
                          147.124.104.0/23 maxlen: 24
                          147.124.106.0/23 maxlen: 24
                          147.124.108.0/23 maxlen: 24
                          147.124.110.0/23 maxlen: 24
                          147.124.112.0/23 maxlen: 24
                          147.124.114.0/23 maxlen: 24
                          147.124.116.0/23 maxlen: 24
                          147.124.118.0/23 maxlen: 24
                          147.124.120.0/23 maxlen: 24
                          147.124.122.0/23 maxlen: 24
                          147.124.124.0/23 maxlen: 24
                          147.124.126.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:4d:5a:6a:4b:a7:9e:f3:be:7d:08:e4:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: Mar 27 01:00:31 2026 GMT
            Not After : Jun 25 01:00:31 2026 GMT
        Subject: CN=69e04405-3013-40a4-a347-d37af4cb6b2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:ed:7b:23:34:f3:88:4d:18:29:6a:1a:bb:35:
                    46:32:58:ce:0c:05:f6:05:75:86:40:ff:96:14:9c:
                    df:a1:2d:6f:fa:8b:aa:65:72:e6:50:1f:27:7d:ea:
                    5b:16:50:b4:c3:a9:fb:b7:ce:38:20:97:49:06:82:
                    05:45:03:3f:5a:79:c3:17:92:51:92:9e:29:a5:2b:
                    08:b0:cc:4d:06:3a:e2:fa:9f:aa:f4:62:55:89:da:
                    0b:1c:b2:3e:2b:69:34:de:90:0c:65:86:22:4d:94:
                    e9:3e:14:13:b1:57:47:83:61:b2:52:f8:a4:6f:72:
                    be:c4:4d:29:93:1d:dd:67:37:f4:c8:28:f7:bf:21:
                    00:21:5e:92:cc:82:50:b9:f0:12:11:8d:21:88:19:
                    53:d1:3f:8c:01:89:c9:8d:b1:ff:b8:e0:f3:b2:3b:
                    60:13:d4:45:cb:b2:4e:df:2b:fc:54:c9:eb:a0:6c:
                    97:26:85:58:11:6f:32:88:51:3f:f5:61:95:a9:d1:
                    70:cb:0a:3f:d6:56:e1:97:87:fd:51:df:75:bb:2b:
                    c0:e4:d4:0b:51:b2:86:52:57:5e:c0:07:aa:19:51:
                    6b:e5:b4:f6:9d:28:5c:0f:6c:b4:89:32:18:89:72:
                    65:43:0b:4d:e2:3e:b7:b2:ff:bd:47:6b:ee:6d:76:
                    50:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:FF:96:9A:67:99:C3:BE:16:AD:B1:A4:F0:67:4B:7F:2C:42:6C:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/4782f967-96fb-31d3-a39c-697cd171883c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.124.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:9a:f7:9c:87:23:e9:06:eb:aa:ed:ca:6b:89:16:11:4e:3d:
         36:b2:e8:59:70:7b:0c:38:2c:1a:0a:db:b0:3a:1e:6b:5d:e6:
         68:44:6e:7c:4d:dd:e5:18:9c:c8:31:c2:24:c6:67:69:8f:eb:
         2d:b3:4d:58:18:5e:3b:ff:88:61:aa:5e:7b:73:62:3f:1b:7c:
         da:32:63:e3:96:b5:c1:4c:31:5d:a0:03:58:8d:01:6b:08:65:
         bf:a7:b8:80:57:21:15:3a:e3:03:0b:7b:51:13:e5:8a:cf:ef:
         4c:22:a4:c5:ed:5b:45:75:dc:53:80:ba:45:3f:78:02:39:a6:
         4c:ec:a1:d7:4e:97:e3:94:cf:d5:7a:16:03:31:f8:cd:2f:76:
         5e:4a:96:68:63:53:28:de:de:27:07:e6:57:fd:f0:9e:6f:5e:
         c4:bb:92:fa:64:86:cd:a5:a1:44:64:11:29:1d:60:d6:d5:f5:
         0d:db:4d:b9:99:c5:20:f6:a8:20:c7:aa:c4:5b:82:29:19:2a:
         af:cd:82:b7:02:27:2c:f5:fa:a0:06:c6:c8:16:bf:45:27:fb:
         51:5f:d1:45:e0:fc:73:1b:d0:d0:69:d2:67:4d:cc:af:f2:e9:
         43:00:a0:e6:1e:a1:a3:c5:3a:8c:b5:95:9e:1b:31:26:47:52:
         6e:54:2e:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:02:57 2026 by rpki-client