Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/fac55724-4609-39ef-add8-885a6bda0a0c.roa
File:                     fac55724-4609-39ef-add8-885a6bda0a0c.roa (raw, json)
Hash identifier:          mfX3lLIUjAnmPRxv4CL1V/g/Iy4VKqofV0NDpLiujD0=
Subject key identifier:   EF:10:A9:F1:D7:D0:57:7C:FF:A2:15:B9:A3:96:A9:9C:8B:AF:8C:4C
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F4328584E1319942796F56FD818D62680
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/fac55724-4609-39ef-add8-885a6bda0a0c.roa
Signing time:             Fri 05 Jun 2026 21:00:12 +0000
ROA not before:           Fri 05 Jun 2026 21:00:12 +0000
ROA not after:            Thu 03 Sep 2026 21:00:12 +0000
asID:                     16509
IP address blocks:        134.224.96.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:13:19:94:27:96:f5:6f:d8:18:d6:26:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: Jun  5 21:00:12 2026 GMT
            Not After : Sep  3 21:00:12 2026 GMT
        Subject: CN=fc06aba5-e383-4ba0-b331-93aad7a48d22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:e1:77:b0:6d:37:85:6a:fc:c2:91:05:6f:52:
                    40:50:4e:1d:d2:b8:e5:bc:05:8f:55:e8:dd:f8:e0:
                    59:5f:99:0f:3f:c6:3c:a7:5c:f0:65:15:3e:61:2a:
                    9e:e4:73:9b:ed:bf:17:50:59:01:37:4c:78:f4:d2:
                    df:03:f4:8c:4c:90:8d:82:e2:c9:b0:ca:f0:7f:dd:
                    e6:77:79:5b:8b:1e:09:df:87:0c:d6:ee:00:14:eb:
                    1e:ab:ae:ab:7e:d1:c9:33:59:cd:9a:a7:56:15:ff:
                    82:52:f5:88:19:c9:f9:5f:24:7e:6e:b1:4c:0b:2e:
                    94:ba:35:58:b6:fe:45:38:c6:5e:48:1f:64:26:c6:
                    bf:f2:83:e9:0e:64:b7:02:61:5b:e4:ba:f4:01:9c:
                    68:6a:c1:01:fd:60:bc:06:b8:c9:68:60:bc:93:e5:
                    e4:13:92:5c:68:a1:6b:2d:a0:bd:7b:0b:f3:82:7d:
                    61:4c:48:68:cd:23:39:9d:56:8b:82:5b:95:59:05:
                    34:95:48:33:12:46:50:1b:47:81:05:45:7f:d9:6b:
                    db:68:da:b6:0a:2f:71:c4:fc:ce:d5:e5:96:c7:ea:
                    d9:bd:9a:4f:30:44:0e:29:ab:7d:fa:73:01:26:12:
                    b2:a6:2e:b4:14:af:0a:2f:aa:56:47:ce:25:25:d6:
                    84:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:10:A9:F1:D7:D0:57:7C:FF:A2:15:B9:A3:96:A9:9C:8B:AF:8C:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/fac55724-4609-39ef-add8-885a6bda0a0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.224.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:21:b2:6c:52:c8:83:f7:76:6e:eb:dc:d5:7d:d7:93:7f:bb:
         e2:6f:f3:cc:d5:56:24:fc:17:39:ed:54:78:b5:11:de:62:cc:
         d5:9b:a5:a4:92:c6:05:69:81:56:19:e4:52:e3:5b:1f:0b:d3:
         7c:b0:cf:99:7e:58:c2:38:e9:02:c5:c0:a5:ab:05:92:d7:df:
         ea:24:4d:b2:4b:94:8e:6c:6d:0c:6b:11:52:a5:56:f5:1d:a3:
         b1:df:f7:02:3d:cd:6f:d5:72:df:05:50:d7:57:f5:f5:4e:86:
         41:f2:c5:0e:88:d9:32:03:08:59:76:98:67:17:d5:6b:92:cb:
         e5:ac:30:c6:c9:ee:9c:20:c2:08:26:18:da:29:c4:71:b9:b4:
         84:3d:b8:31:87:f3:c4:de:a6:64:68:c4:3d:2d:13:f8:c2:8e:
         c9:fa:a6:4b:68:5f:47:37:f2:d7:a7:f5:ea:9f:0f:c6:ee:9f:
         33:8f:8e:68:a5:37:db:61:b5:07:86:b2:c8:3d:d3:d9:f2:52:
         d2:32:a9:84:6d:1a:66:de:1b:1c:2b:d6:4f:14:a0:88:ae:4b:
         4f:69:f2:0f:8d:6e:f0:1b:39:71:3b:8d:d2:65:76:9b:20:37:
         35:c1:f9:46:e8:a1:66:86:f2:c3:7b:ec:79:44:c9:56:48:f7:
         6b:90:35:4e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4TGZQnlvVv2BjWJoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGM0NTVlNTgtNjE4OS00ZjI4LWI4MDMtNjFhOTY1YTIx
YzY1MB4XDTI2MDYwNTIxMDAxMloXDTI2MDkwMzIxMDAxMlowLzEtMCsGA1UEAxMk
ZmMwNmFiYTUtZTM4My00YmEwLWIzMzEtOTNhYWQ3YTQ4ZDIyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgeF3sG03hWr8wpEFb1JAUE4d0rjlvAWPVejd
+OBZX5kPP8Y8p1zwZRU+YSqe5HOb7b8XUFkBN0x49NLfA/SMTJCNguLJsMrwf93m
d3lbix4J34cM1u4AFOseq66rftHJM1nNmqdWFf+CUvWIGcn5XyR+brFMCy6UujVY
tv5FOMZeSB9kJsa/8oPpDmS3AmFb5Lr0AZxoasEB/WC8BrjJaGC8k+XkE5JcaKFr
LaC9ewvzgn1hTEhozSM5nVaLgluVWQU0lUgzEkZQG0eBBUV/2WvbaNq2Ci9xxPzO
1eWWx+rZvZpPMEQOKat9+nMBJhKypi60FK8KL6pWR84lJdaEuQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFO8QqfHX0Fd8/6IVuaOWqZyLr4xMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1
NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5NjVhMjFjNjUvZmFjNTU3MjQtNDYwOS0z
OWVmLWFkZDgtODg1YTZiZGEwYTBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGM0NTVlNTgtNjE4OS00ZjI4LWI4
MDMtNjFhOTY1YTIxYzY1L2RjNDU1ZTU4LTYxODktNGYyOC1iODAzLTYxYTk2NWEy
MWM2NS5jcmwwHwYDVR0jBBgwFoAUZka/BM8QPkyukKDmzSU2ULZFvD8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5
NjVhMjFjNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFhuBgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEkhsmxSyIP3dm7r3NV915N/u+Jv88zVViT8FzntVHi1Ed5izNWbpaSS
xgVpgVYZ5FLjWx8L03ywz5l+WMI46QLFwKWrBZLX3+okTbJLlI5sbQxrEVKlVvUd
o7Hf9wI9zW/Vct8FUNdX9fVOhkHyxQ6I2TIDCFl2mGcX1WuSy+WsMMbJ7pwgwggm
GNopxHG5tIQ9uDGH88TepmRoxD0tE/jCjsn6pktoX0c38ten9eqfD8bunzOPjmil
N9thtQeGssg909nyUtIyqYRtGmbeGxwr1k8UoIiuS09p8g+NbvAbOXE7jdJldpsg
NzXB+UbooWaG8sN77HlEyVZI92uQNU4=
-----END CERTIFICATE-----
Generated at Sun Jun 14 00:31:25 2026 by rpki-client