Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/ddd2caf6-14f6-3651-81eb-76090d5a2bf2.roa
File:                     ddd2caf6-14f6-3651-81eb-76090d5a2bf2.roa (raw, json)
Hash identifier:          Ff0/+RWshcnVwZb8vBDYD5JQK/Xr0XaWRTQsyAAAqgE=
Subject key identifier:   9F:61:A3:1D:D4:42:1A:01:C8:C1:EC:98:B8:8F:A6:1D:85:E4:9B:9C
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F4328584E3069ABE0BECF033866DF1B00
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/ddd2caf6-14f6-3651-81eb-76090d5a2bf2.roa
Signing time:             Tue 16 Jun 2026 09:00:12 +0000
ROA not before:           Tue 16 Jun 2026 09:00:12 +0000
ROA not after:            Mon 14 Sep 2026 09:00:12 +0000
asID:                     14618
IP address blocks:        134.224.208.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:30:69:ab:e0:be:cf:03:38:66:df:1b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: Jun 16 09:00:12 2026 GMT
            Not After : Sep 14 09:00:12 2026 GMT
        Subject: CN=ad325ada-2d5e-4ee6-b546-de569f671b97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:77:36:ea:70:d5:5f:30:41:90:e0:48:b9:9c:
                    e6:4a:5f:52:a2:8f:bd:89:52:25:09:b8:78:fd:1a:
                    0e:fd:8f:41:34:2c:ac:f1:26:81:fe:3e:7f:d9:de:
                    1c:49:21:50:92:06:59:42:af:5f:17:48:2f:78:8a:
                    2e:35:0e:f4:30:9d:96:a6:fc:9f:cb:ee:d6:30:57:
                    0f:f5:86:71:19:67:72:d3:1d:3d:37:b7:f6:74:fe:
                    b5:17:6a:46:3f:99:a5:95:dd:d5:0d:84:f0:b7:82:
                    9a:53:61:db:88:a1:25:cb:8f:e8:2e:31:2d:ba:b7:
                    85:56:15:f8:f4:f9:56:80:5d:9e:bb:9e:57:9a:ca:
                    1b:29:9e:ce:6b:af:17:bb:49:9a:eb:2a:bf:36:18:
                    a2:ad:f7:40:a7:d7:9e:3d:76:95:c5:40:d1:dd:93:
                    cd:8c:44:04:46:82:63:89:ca:bb:ba:a3:3d:3c:15:
                    6d:84:d6:d2:30:bc:69:ca:ec:cc:c5:09:9e:58:92:
                    8c:35:40:9d:87:00:ed:c1:e1:24:20:0d:80:cf:38:
                    f6:13:d8:8c:14:dc:75:1d:9b:08:6e:36:ef:86:40:
                    0c:39:f8:39:fe:89:33:85:e8:27:bc:e5:01:6e:b7:
                    3d:86:92:7d:8b:9c:32:41:b3:f5:1c:b6:6c:e2:3c:
                    72:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:61:A3:1D:D4:42:1A:01:C8:C1:EC:98:B8:8F:A6:1D:85:E4:9B:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/ddd2caf6-14f6-3651-81eb-76090d5a2bf2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.224.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:ed:42:58:6c:96:9c:fc:2f:1b:e0:7a:3e:0b:cb:9a:d5:b5:
         4d:57:aa:5d:eb:52:0c:70:0d:eb:eb:9e:61:03:8f:15:6d:8c:
         9d:0f:98:f2:0a:99:bb:58:fa:8d:42:5d:2c:54:f5:b9:48:de:
         64:4d:83:78:35:bf:c8:b4:66:4b:28:20:c2:c0:ff:1f:8a:b7:
         9b:5b:18:14:2a:71:b7:69:4c:be:4d:ea:b9:3b:c0:98:6f:79:
         15:0d:ba:af:e0:87:ef:94:87:5c:8d:2f:c3:bf:16:c8:45:48:
         c7:55:90:92:cb:9b:fa:8f:d1:f5:12:19:df:4b:86:fc:0c:09:
         1e:5d:fe:74:8c:9d:7f:69:bf:70:0b:95:b0:3c:03:bf:18:93:
         01:f5:44:fd:3a:2d:ee:db:13:f5:80:4f:00:3e:68:45:98:34:
         d7:2d:08:c0:a5:52:be:b9:f1:48:99:9f:50:30:32:14:5e:a7:
         54:b2:f9:d7:0c:46:8e:96:69:91:fa:df:8c:ed:1d:35:93:d3:
         f3:eb:18:cc:0c:b8:ce:cc:78:a8:0f:46:ec:95:ff:fe:a2:bf:
         86:93:ed:ca:0f:94:5a:0e:85:be:db:38:69:f2:61:f7:d0:81:
         a4:45:2c:f0:13:92:9b:da:a8:a6:fc:9e:f8:82:ef:1f:2d:1b:
         3f:81:a8:59
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4waavgvs8DOGbfGwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGM0NTVlNTgtNjE4OS00ZjI4LWI4MDMtNjFhOTY1YTIx
YzY1MB4XDTI2MDYxNjA5MDAxMloXDTI2MDkxNDA5MDAxMlowLzEtMCsGA1UEAxMk
YWQzMjVhZGEtMmQ1ZS00ZWU2LWI1NDYtZGU1NjlmNjcxYjk3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkHc26nDVXzBBkOBIuZzmSl9Soo+9iVIlCbh4
/RoO/Y9BNCys8SaB/j5/2d4cSSFQkgZZQq9fF0gveIouNQ70MJ2Wpvyfy+7WMFcP
9YZxGWdy0x09N7f2dP61F2pGP5mlld3VDYTwt4KaU2HbiKEly4/oLjEtureFVhX4
9PlWgF2eu55XmsobKZ7Oa68Xu0ma6yq/NhiirfdAp9eePXaVxUDR3ZPNjEQERoJj
icq7uqM9PBVthNbSMLxpyuzMxQmeWJKMNUCdhwDtweEkIA2Azzj2E9iMFNx1HZsI
bjbvhkAMOfg5/okzhegnvOUBbrc9hpJ9i5wyQbP1HLZs4jxy7QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJ9hox3UQhoByMHsmLiPph2F5JucMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1
NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5NjVhMjFjNjUvZGRkMmNhZjYtMTRmNi0z
NjUxLTgxZWItNzYwOTBkNWEyYmYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGM0NTVlNTgtNjE4OS00ZjI4LWI4
MDMtNjFhOTY1YTIxYzY1L2RjNDU1ZTU4LTYxODktNGYyOC1iODAzLTYxYTk2NWEy
MWM2NS5jcmwwHwYDVR0jBBgwFoAUZka/BM8QPkyukKDmzSU2ULZFvD8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5
NjVhMjFjNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEhuDQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFntQlhslpz8Lxvgej4Ly5rVtU1Xql3rUgxwDevrnmEDjxVtjJ0PmPIK
mbtY+o1CXSxU9blI3mRNg3g1v8i0ZksoIMLA/x+Kt5tbGBQqcbdpTL5N6rk7wJhv
eRUNuq/gh++Uh1yNL8O/FshFSMdVkJLLm/qP0fUSGd9LhvwMCR5d/nSMnX9pv3AL
lbA8A78YkwH1RP06Le7bE/WATwA+aEWYNNctCMClUr658UiZn1AwMhRep1Sy+dcM
Ro6WaZH634ztHTWT0/PrGMwMuM7MeKgPRuyV//6iv4aT7coPlFoOhb7bOGnyYffQ
gaRFLPATkpvaqKb8nviC7x8tGz+BqFk=
-----END CERTIFICATE-----
Generated at Wed Jul 22 00:11:07 2026 by rpki-client