Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/21843564-16de-304e-ab8f-b7cbc4bef4db.roa
File:                     21843564-16de-304e-ab8f-b7cbc4bef4db.roa (raw, json)
Hash identifier:          8jTNPgCQbY29CHYa7TdtkGMXXT9JzSnM1D/xeGMS08Q=
Subject key identifier:   41:75:A7:68:D4:61:16:7A:3B:19:18:7B:E3:88:80:72:16:30:D2:03
Certificate issuer:       /CN=bf1c119f-5c08-4663-b550-1d531c2fe54f
Certificate serial:       010D0C9F4328584EA78F143DEF20C775C265C0C0
Authority key identifier: AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/21843564-16de-304e-ab8f-b7cbc4bef4db.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     14618
IP address blocks:        149.60.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:8f:14:3d:ef:20:c7:75:c2:65:c0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf1c119f-5c08-4663-b550-1d531c2fe54f
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=df607091-eeca-45d2-97b0-f5a78a4bde3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:5f:2d:5e:97:8a:27:c9:eb:b7:b8:68:3a:96:
                    4d:50:22:07:7c:54:4a:ff:cd:14:3d:19:d7:42:45:
                    c1:f4:18:0b:55:7c:72:d1:14:11:74:fa:88:4b:30:
                    15:4f:40:20:06:c9:fa:d0:80:66:ed:8d:d2:f0:ca:
                    46:0d:1a:5c:83:44:c5:03:b6:a5:0e:b9:5f:03:67:
                    40:a4:3c:b1:b4:9d:fc:1d:ea:d2:6a:ae:34:fd:90:
                    07:e0:9e:49:81:5f:4e:7a:da:0a:2b:fb:31:13:99:
                    31:9e:72:c5:7f:b7:67:a7:1e:ec:10:cd:20:68:5c:
                    60:a9:4e:0c:e4:17:11:7a:e7:cd:14:d9:d4:25:e3:
                    cc:ea:02:57:5c:e1:3a:f8:84:22:0b:b9:79:f1:35:
                    e5:52:18:0d:9c:2f:b2:22:06:d7:e9:1a:4b:90:93:
                    05:02:cd:0b:5f:bd:22:7e:44:0a:11:64:90:d2:05:
                    86:94:1d:7c:d7:a9:d7:9d:1f:46:7d:b3:1d:75:47:
                    fa:2f:63:83:03:c9:1b:d9:ee:43:75:1a:ff:7a:ea:
                    a1:a8:f9:0b:0d:8c:b9:0d:44:bb:7b:7c:f4:e8:14:
                    8a:6a:5e:9a:92:62:5f:1c:de:fc:4f:dd:1c:26:ff:
                    ed:ed:f4:90:0a:ce:58:43:e2:9e:4f:c3:20:49:b9:
                    06:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:75:A7:68:D4:61:16:7A:3B:19:18:7B:E3:88:80:72:16:30:D2:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/21843564-16de-304e-ab8f-b7cbc4bef4db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl

            X509v3 Authority Key Identifier:
                keyid:AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.60.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:ce:1d:66:1b:21:20:4f:78:9b:b6:3b:4f:68:00:be:8c:1c:
         e0:81:a1:2b:96:52:30:d6:bd:25:33:97:f3:79:ab:74:a4:14:
         16:b4:5d:ec:1c:9f:22:45:29:77:c0:85:39:51:e0:15:12:be:
         bb:3d:0a:a9:19:86:11:09:62:90:b1:76:c7:23:60:55:7b:d0:
         1f:5c:9b:c9:e2:db:90:51:79:88:4c:d5:45:de:72:0d:1c:9f:
         61:c4:a9:c7:87:7c:93:ce:5e:69:c0:7e:2d:70:20:fb:22:54:
         de:39:11:da:c3:27:48:9d:82:dc:5f:d5:23:f8:94:db:7c:70:
         e5:0a:49:aa:bb:94:2a:4f:f7:37:c2:4d:6e:ec:ea:7a:07:4f:
         a5:63:e7:36:1f:a8:7b:8e:8b:b1:66:39:1a:0c:7c:cc:a6:ad:
         e3:38:29:cd:de:08:41:ad:5b:1f:cf:a3:bd:ed:c2:45:26:12:
         ca:a8:a1:97:23:47:02:1b:3b:c6:de:29:05:d1:ac:f1:1a:4c:
         2a:f0:e4:51:11:1f:9f:e8:6d:5a:bd:6f:69:b1:09:3b:af:67:
         09:87:7b:8c:5e:fc:04:05:ab:4b:09:cc:e7:ea:a9:8a:ef:b8:
         17:64:8d:37:d4:25:cd:b1:39:52:de:8e:4c:4b:5f:bc:b5:26:
         57:be:96:27
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE6njxQ97yDHdcJlwMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmYxYzExOWYtNWMwOC00NjYzLWI1NTAtMWQ1MzFjMmZl
NTRmMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
ZGY2MDcwOTEtZWVjYS00NWQyLTk3YjAtZjVhNzhhNGJkZTNkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj18tXpeKJ8nrt7hoOpZNUCIHfFRK/80UPRnX
QkXB9BgLVXxy0RQRdPqISzAVT0AgBsn60IBm7Y3S8MpGDRpcg0TFA7alDrlfA2dA
pDyxtJ38HerSaq40/ZAH4J5JgV9OetoKK/sxE5kxnnLFf7dnpx7sEM0gaFxgqU4M
5BcReufNFNnUJePM6gJXXOE6+IQiC7l58TXlUhgNnC+yIgbX6RpLkJMFAs0LX70i
fkQKEWSQ0gWGlB1816nXnR9GfbMddUf6L2ODA8kb2e5DdRr/euqhqPkLDYy5DUS7
e3z06BSKal6akmJfHN78T90cJv/t7fSQCs5YQ+KeT8MgSbkGYwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFEF1p2jUYRZ6OxkYe+OIgHIWMNIDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iZjFj
MTE5Zi01YzA4LTQ2NjMtYjU1MC0xZDUzMWMyZmU1NGYvMjE4NDM1NjQtMTZkZS0z
MDRlLWFiOGYtYjdjYmM0YmVmNGRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYmYxYzExOWYtNWMwOC00NjYzLWI1
NTAtMWQ1MzFjMmZlNTRmL2JmMWMxMTlmLTVjMDgtNDY2My1iNTUwLTFkNTMxYzJm
ZTU0Zi5jcmwwHwYDVR0jBBgwFoAUroILstQ6EhavxWJc6GqRtcav22YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iZjFjMTE5Zi01YzA4LTQ2NjMtYjU1MC0xZDUz
MWMyZmU1NGYuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAlTwwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAqc4dZhshIE94m7Y7T2gAvowc4IGhK5ZSMNa9JTOX83mrdKQUFrRd7Byf
IkUpd8CFOVHgFRK+uz0KqRmGEQlikLF2xyNgVXvQH1ybyeLbkFF5iEzVRd5yDRyf
YcSpx4d8k85eacB+LXAg+yJU3jkR2sMnSJ2C3F/VI/iU23xw5QpJqruUKk/3N8JN
buzqegdPpWPnNh+oe46LsWY5Ggx8zKat4zgpzd4IQa1bH8+jve3CRSYSyqihlyNH
Ahs7xt4pBdGs8RpMKvDkUREfn+htWr1vabEJO69nCYd7jF78BAWrSwnM5+qpiu+4
F2SNN9QlzbE5Ut6OTEtfvLUmV76WJw==
-----END CERTIFICATE-----
Generated at Sun Aug 16 00:38:30 2026 by rpki-client