Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/e576a059-202b-33e2-83f7-bbfc48679982.roa
File:                     e576a059-202b-33e2-83f7-bbfc48679982.roa (raw, json)
Hash identifier:          qcBXEgurvblbG7ow/CSt6h2DWUfjkkVGhbIAaTg1Lq8=
Subject key identifier:   35:72:56:07:B0:F5:5E:5E:45:9A:4A:64:90:0A:81:DE:77:02:41:DC
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F4328584E8F54EB14BEDC3E00C1BEEA00
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/e576a059-202b-33e2-83f7-bbfc48679982.roa
Signing time:             Mon 20 Jul 2026 09:00:11 +0000
ROA not before:           Mon 20 Jul 2026 09:00:11 +0000
ROA not after:            Sun 18 Oct 2026 09:00:11 +0000
asID:                     30103
IP address blocks:        149.137.80.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:8f:54:eb:14:be:dc:3e:00:c1:be:ea:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: Jul 20 09:00:11 2026 GMT
            Not After : Oct 18 09:00:11 2026 GMT
        Subject: CN=df2f0373-90b8-4e8d-87bb-d0ca120a1276
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:f5:ff:fa:82:87:a3:32:12:6f:cb:09:97:3b:
                    67:f3:49:3d:3c:a8:7a:02:d8:d4:aa:e8:4d:6d:89:
                    09:00:3e:48:3d:cb:d1:f1:34:a2:aa:14:4f:d6:fa:
                    ca:02:cd:b3:82:fe:70:43:e8:cf:3a:58:55:fb:54:
                    ea:38:f3:4e:ec:7e:ce:e6:4c:66:6f:c5:24:eb:d7:
                    5c:c0:91:71:23:b5:f4:03:7d:e5:50:1f:4e:05:19:
                    7f:e6:e7:68:a9:a6:16:1d:e1:13:00:d0:2b:cb:c9:
                    b1:8e:a6:f9:fd:bb:73:23:36:b7:79:ba:66:ca:c1:
                    1b:67:1d:2b:4f:ac:41:03:9a:e9:c3:bb:fe:79:12:
                    16:68:00:3e:a3:ca:f4:32:f4:cc:81:ad:12:60:96:
                    f2:e8:26:ce:35:a7:06:f6:b6:5e:bb:a5:dd:9f:a8:
                    da:dd:fa:55:12:04:cd:0c:25:0f:cf:88:d2:76:d8:
                    50:a1:2d:b9:61:d8:b6:f7:73:c6:3f:f0:ea:c0:d9:
                    b3:63:e4:6d:43:64:32:39:de:b0:34:bb:39:4d:6a:
                    79:d4:75:da:68:b1:cb:39:f9:ad:a0:4b:fd:1f:43:
                    c7:e0:bf:b7:20:ef:89:32:f8:70:d4:8e:16:bd:b0:
                    32:d3:33:f2:b5:11:c4:f9:92:ad:d4:3b:9a:b2:6b:
                    1b:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:72:56:07:B0:F5:5E:5E:45:9A:4A:64:90:0A:81:DE:77:02:41:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/e576a059-202b-33e2-83f7-bbfc48679982.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.137.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:4c:91:82:07:f1:41:6c:7a:40:2c:0f:60:b3:74:47:69:ec:
         e1:bd:82:ea:c3:98:c3:3b:53:01:f4:38:ca:a7:f3:48:0a:7e:
         d2:86:a4:58:3f:5b:f2:75:de:f4:b2:e2:6e:14:45:ec:6e:b5:
         1b:db:bc:f8:00:f2:49:65:98:72:75:01:ff:30:f2:2d:86:27:
         d0:87:ab:4a:27:26:0a:38:d9:19:32:6e:4a:ff:e9:c1:14:92:
         b8:a3:73:73:9a:b7:a9:39:09:fd:0a:11:49:30:f1:08:6d:fe:
         3d:cf:b3:fb:7f:d3:28:a7:3e:7e:90:98:92:84:5c:ef:26:30:
         aa:d0:6b:a2:1a:52:6a:51:b8:c1:e2:54:a7:fe:81:eb:59:31:
         b9:97:99:0e:f8:bd:f4:27:d4:4d:78:5c:e4:04:7b:88:29:c9:
         58:40:02:1e:08:43:e2:35:1e:fa:da:bf:74:5f:03:4f:f7:4a:
         e5:42:ae:6c:ce:d7:dd:a0:93:f8:f8:81:de:7d:16:15:6f:e2:
         bd:f4:f0:05:ef:7b:54:92:91:e9:cb:84:4a:66:33:84:ea:d1:
         59:ea:97:62:b0:43:f8:46:5a:77:33:62:73:7f:af:4c:40:96:
         8e:86:84:3c:58:2a:86:ca:2c:42:75:de:5c:30:72:d8:80:cf:
         5f:5c:ed:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:22:22 2026 by rpki-client