Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/c846aec1-c1c4-31df-9606-f6ad9cd6ea80.roa
File:                     c846aec1-c1c4-31df-9606-f6ad9cd6ea80.roa (raw, json)
Hash identifier:          esQOOZ5Wd6FDJmItGWDFJKBn5IwKnQu/vqG7GpqFvO4=
Subject key identifier:   51:BB:91:63:F2:A0:31:AF:CF:8D:3C:23:8D:A8:13:A0:58:BF:33:A2
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F4328584CDB0218B38875DBEADB3D0700
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/c846aec1-c1c4-31df-9606-f6ad9cd6ea80.roa
Signing time:             Sat 14 Feb 2026 02:00:32 +0000
ROA not before:           Sat 14 Feb 2026 02:00:32 +0000
ROA not after:            Fri 15 May 2026 01:00:32 +0000
asID:                     30103
IP address blocks:        149.137.0.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:db:02:18:b3:88:75:db:ea:db:3d:07:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: Feb 14 02:00:32 2026 GMT
            Not After : May 15 01:00:32 2026 GMT
        Subject: CN=e3b7b81e-727c-41f2-9173-230536ea99a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:4f:66:6d:21:ca:6b:62:0c:9c:cb:48:9c:5b:
                    8f:75:ff:9d:96:88:b1:0c:70:43:49:9b:61:8d:a2:
                    38:b6:c1:55:67:b8:01:58:99:f3:17:94:a9:b6:19:
                    58:f6:af:c7:44:9f:77:10:ee:11:b4:58:e0:b6:09:
                    0a:e3:f6:83:62:46:5b:a1:68:c9:06:a2:52:b5:bb:
                    57:af:9a:ef:c1:ce:17:dc:64:2c:95:32:11:08:23:
                    76:8a:ff:52:3c:a1:31:77:73:c8:7b:9c:57:9e:a7:
                    5e:4d:5a:73:de:54:48:2d:e7:64:ba:f8:a8:a5:12:
                    90:80:a3:95:2b:f1:64:22:6a:f6:ec:b0:5f:a5:4e:
                    a1:5e:0a:c8:b8:5e:fc:29:94:c2:5d:86:b9:24:db:
                    de:dd:3f:2a:f2:50:30:51:39:7d:7d:b2:35:eb:7d:
                    a3:a7:f1:94:a1:e2:f7:15:5c:f1:51:36:05:ff:b8:
                    81:6e:dd:7c:d8:d2:f7:66:b7:88:33:9d:73:49:6c:
                    12:85:72:04:95:fc:22:5a:77:06:cf:89:13:c5:33:
                    4e:26:1a:c9:0d:a1:48:ff:44:2a:19:0a:cf:66:1d:
                    82:52:ee:8c:7d:88:e7:24:5a:8c:b9:11:3b:67:ce:
                    1c:a7:6c:b6:d1:66:4e:83:a9:f1:23:43:1d:f9:7a:
                    ba:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:BB:91:63:F2:A0:31:AF:CF:8D:3C:23:8D:A8:13:A0:58:BF:33:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/c846aec1-c1c4-31df-9606-f6ad9cd6ea80.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.137.0.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:c9:b9:df:9d:62:21:7e:68:dc:30:de:fa:00:d4:c1:a0:b1:
         34:c7:33:77:a5:8a:8b:fe:4c:9b:b5:89:79:b2:c4:89:28:c5:
         13:a1:61:bd:15:ed:14:49:9b:23:c7:78:c3:69:80:25:f2:d4:
         b2:6f:08:cb:a4:b2:2b:7c:f4:85:c9:8e:1e:00:b2:3a:ea:8b:
         33:49:7e:5c:f8:b8:2a:51:40:99:c2:93:47:52:3a:97:e4:2c:
         45:46:d0:f0:c1:f0:fa:8e:f4:5b:7d:01:4d:de:21:07:14:8f:
         3e:e0:33:f0:be:39:c7:65:b3:25:60:d0:ad:24:61:15:90:c7:
         af:f4:00:b2:b8:2a:45:04:b4:9b:86:d7:f2:a2:ae:b0:4f:48:
         51:33:b4:5a:ab:ac:65:14:6e:31:40:3f:17:88:96:48:31:e4:
         71:02:40:be:70:fc:fb:85:5e:1f:f6:71:27:c7:ec:9e:28:c6:
         1a:54:7f:27:53:68:c9:45:f9:08:05:01:f6:79:86:1b:67:87:
         d3:5d:5d:4c:7c:a1:75:78:a3:0d:eb:e9:7a:e1:39:38:32:d9:
         e0:4e:40:f2:a7:72:33:30:dd:a3:ff:75:4f:ad:bc:d1:1a:0d:
         95:39:42:8b:86:35:32:16:9d:2b:56:77:6e:e4:75:61:b2:ed:
         3d:0c:da:1b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzbAhiziHXb6ts9BwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGM0NTVlNTgtNjE4OS00ZjI4LWI4MDMtNjFhOTY1YTIx
YzY1MB4XDTI2MDIxNDAyMDAzMloXDTI2MDUxNTAxMDAzMlowLzEtMCsGA1UEAxMk
ZTNiN2I4MWUtNzI3Yy00MWYyLTkxNzMtMjMwNTM2ZWE5OWEwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyE9mbSHKa2IMnMtInFuPdf+dloixDHBDSZth
jaI4tsFVZ7gBWJnzF5SpthlY9q/HRJ93EO4RtFjgtgkK4/aDYkZboWjJBqJStbtX
r5rvwc4X3GQslTIRCCN2iv9SPKExd3PIe5xXnqdeTVpz3lRILedkuviopRKQgKOV
K/FkImr27LBfpU6hXgrIuF78KZTCXYa5JNve3T8q8lAwUTl9fbI1632jp/GUoeL3
FVzxUTYF/7iBbt182NL3ZreIM51zSWwShXIElfwiWncGz4kTxTNOJhrJDaFI/0Qq
GQrPZh2CUu6MfYjnJFqMuRE7Z84cp2y20WZOg6nxI0Md+Xq6VwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFG7kWPyoDGvz408I42oE6BYvzOiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1
NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5NjVhMjFjNjUvYzg0NmFlYzEtYzFjNC0z
MWRmLTk2MDYtZjZhZDljZDZlYTgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGM0NTVlNTgtNjE4OS00ZjI4LWI4
MDMtNjFhOTY1YTIxYzY1L2RjNDU1ZTU4LTYxODktNGYyOC1iODAzLTYxYTk2NWEy
MWM2NS5jcmwwHwYDVR0jBBgwFoAUZka/BM8QPkyukKDmzSU2ULZFvD8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5
NjVhMjFjNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDlYkAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIPJud+dYiF+aNww3voA1MGgsTTHM3eliov+TJu1iXmyxIkoxROhYb0V
7RRJmyPHeMNpgCXy1LJvCMuksit89IXJjh4AsjrqizNJflz4uCpRQJnCk0dSOpfk
LEVG0PDB8PqO9Ft9AU3eIQcUjz7gM/C+OcdlsyVg0K0kYRWQx6/0ALK4KkUEtJuG
1/KirrBPSFEztFqrrGUUbjFAPxeIlkgx5HECQL5w/PuFXh/2cSfH7J4oxhpUfydT
aMlF+QgFAfZ5hhtnh9NdXUx8oXV4ow3r6XrhOTgy2eBOQPKncjMw3aP/dU+tvNEa
DZU5QouGNTIWnStWd27kdWGy7T0M2hs=
-----END CERTIFICATE-----
Generated at Sun Mar 1 19:17:39 2026 by rpki-client