Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/ee59bebf-617f-3e37-a938-9a81583fa157.roa
File:                     ee59bebf-617f-3e37-a938-9a81583fa157.roa (raw, json)
Hash identifier:          3QB1vr9yqBTnXAj8zzUbED5KextVX0Ie/bOCFaz9oSI=
Subject key identifier:   F9:43:37:E8:C5:C1:81:3C:CE:43:D6:09:89:BF:57:67:BC:A5:4F:F3
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F4328584F49752789975B67321BD8C440
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/ee59bebf-617f-3e37-a938-9a81583fa157.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     30103
IP address blocks:        149.137.32.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:75:27:89:97:5b:67:32:1b:d8:c4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=111918a3-3260-44e7-aead-da3d29fa690d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:34:03:1e:40:c5:a8:87:0a:7d:e1:30:ca:a4:
                    ac:04:6e:47:84:c8:13:f0:93:fd:8b:d3:69:ed:45:
                    cf:69:35:0d:4e:c9:e4:b9:e4:ac:ad:e2:71:2f:2e:
                    20:c1:d6:9d:bf:60:9b:a4:e2:ae:94:80:f3:89:de:
                    b9:2f:ab:bd:a8:2a:63:ad:68:f5:5b:aa:44:8a:61:
                    cc:1d:d3:e5:cf:c0:8a:ea:25:f0:db:23:98:8e:dc:
                    72:70:ff:44:84:71:70:ec:10:3e:f0:7b:8e:78:3a:
                    01:af:50:eb:88:06:ab:c8:00:6f:f1:8e:7f:0c:e1:
                    44:4c:a8:e7:c0:9f:9b:1b:e0:20:ec:a8:79:b2:b7:
                    9d:87:98:19:2a:30:88:d7:67:0c:97:8f:e1:62:80:
                    9b:d4:cf:37:c6:a5:63:46:1b:46:4d:6b:ed:e6:85:
                    f9:ed:8e:9a:d0:9a:26:bd:67:0f:e7:52:94:89:4c:
                    57:06:71:d6:80:2a:d3:ff:31:e5:e0:a7:d1:24:38:
                    a8:df:bc:e2:f2:e0:3e:df:58:0d:0b:18:0c:92:64:
                    2c:6a:c3:81:e2:9a:b7:32:28:5d:62:88:b7:ee:2c:
                    e6:65:c9:70:78:a6:f0:92:5d:0b:06:95:f8:9f:2a:
                    46:c2:6d:c0:e9:e4:32:c0:81:dc:78:49:53:36:dc:
                    29:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:43:37:E8:C5:C1:81:3C:CE:43:D6:09:89:BF:57:67:BC:A5:4F:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/ee59bebf-617f-3e37-a938-9a81583fa157.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.137.32.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:c8:c7:63:b8:ca:b3:50:da:da:36:25:d6:73:df:f1:21:ab:
         1f:95:3f:63:2c:69:b7:92:31:da:89:ea:ea:c5:95:37:63:62:
         6a:93:b8:63:bd:38:25:b3:eb:09:9e:91:ff:b5:e0:17:f5:68:
         d9:2e:46:c9:5c:f0:47:b0:84:dd:2a:2d:ed:77:0e:1d:dc:63:
         de:d2:c0:b8:f8:cc:0e:2f:f5:1c:09:a7:00:37:89:64:a3:1c:
         20:85:13:fd:61:45:ba:c4:1f:36:87:d4:57:85:6c:20:89:14:
         45:2f:25:f4:82:27:be:7e:8d:91:a6:75:79:ed:3a:b7:52:0f:
         1a:80:35:1a:48:b3:3a:c9:42:ae:66:94:0a:02:8a:19:de:82:
         46:9e:94:3e:fc:17:a0:5c:b7:f5:0a:5b:9c:1f:fe:1b:ad:2b:
         3a:5b:f7:c0:99:dc:78:b0:81:59:8f:11:0e:f0:85:2e:4c:19:
         77:de:af:58:24:40:b0:c0:b8:72:c5:49:dd:8f:15:fd:8d:4d:
         71:11:49:29:b2:a8:fb:f3:e2:94:1c:4f:c4:bc:5d:83:9b:83:
         ba:a6:f9:5e:b2:1e:fd:1c:3e:cd:ae:43:09:d1:1a:42:57:cf:
         29:59:85:3a:35:7b:42:b1:16:e8:7c:83:6d:5d:6b:bd:11:ca:
         d9:14:bd:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 20:01:24 2026 by rpki-client