Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/1cb8d4fc-0bcf-3192-8716-b9886e1a18fc.roa
File:                     1cb8d4fc-0bcf-3192-8716-b9886e1a18fc.roa (raw, json)
Hash identifier:          aL9HeNOWXdqbjd7dS/s5kv+Y7M7T1w1dRDIi9PjIjQY=
Subject key identifier:   5A:A9:3A:C5:79:F1:66:6C:05:7C:77:74:9F:30:F8:7E:F2:EE:EF:9D
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584E69A23CF19B8260266B693C00
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/1cb8d4fc-0bcf-3192-8716-b9886e1a18fc.roa
Signing time:             Mon 06 Jul 2026 20:55:17 +0000
ROA not before:           Mon 06 Jul 2026 20:55:17 +0000
ROA not after:            Mon 28 Sep 2026 14:45:05 +0000
asID:                     30058
IP address blocks:        149.18.104.0/24 maxlen: 24
                          149.57.29.0/24 maxlen: 24
                          149.57.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:69:a2:3c:f1:9b:82:60:26:6b:69:3c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Jul  6 20:55:17 2026 GMT
            Not After : Sep 28 14:45:05 2026 GMT
        Subject: CN=757b7e31-087b-4260-a86f-3355469c5065
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:a8:62:15:1c:6b:8f:86:09:41:f2:5e:47:a8:
                    97:ec:ff:1c:66:bf:4e:ff:5d:2e:61:2a:d9:c4:9a:
                    3a:16:39:86:21:1c:b4:13:2d:53:24:a1:37:8f:92:
                    1b:68:0a:49:49:cd:fa:09:6f:c2:c0:42:b8:97:52:
                    5a:93:ce:8c:8b:ba:6d:44:40:d3:0e:ba:0c:6f:e5:
                    98:46:7b:18:10:f7:2b:6b:db:40:78:fa:72:af:79:
                    c6:e8:79:de:47:33:40:b5:b8:86:2c:65:23:21:4a:
                    4f:03:d0:fa:2a:61:86:eb:5f:0e:1d:b5:ba:d2:e2:
                    48:8c:ff:07:24:3f:11:c6:e4:08:4a:a2:61:63:78:
                    a3:1c:a6:12:19:85:d1:cc:45:18:31:a1:50:78:5a:
                    b6:e9:90:0b:76:dc:84:30:ca:e8:0a:58:52:4e:c6:
                    9c:62:cf:db:2c:a5:4e:df:35:0d:80:b5:fc:df:f5:
                    5b:39:96:38:73:02:99:3c:4d:64:4f:94:8c:93:30:
                    16:8d:07:74:0a:8c:b6:f1:d7:89:46:b2:21:b5:b2:
                    fc:03:8f:41:7e:33:c0:38:54:35:09:c3:48:68:d8:
                    ad:a6:5c:f3:9c:b4:0b:2d:17:3e:25:4c:bb:28:29:
                    6f:a2:f7:75:f0:a5:91:7f:19:f5:27:32:f3:bc:f7:
                    d6:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:A9:3A:C5:79:F1:66:6C:05:7C:77:74:9F:30:F8:7E:F2:EE:EF:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/1cb8d4fc-0bcf-3192-8716-b9886e1a18fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.18.104.0/24
                  149.57.29.0/24
                  149.57.80.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:95:de:35:28:8f:de:4a:3c:6f:7b:b2:e8:dc:78:56:aa:f8:
         ca:81:ce:02:92:5f:46:6c:18:de:aa:fa:fa:32:09:a2:af:35:
         81:ae:19:a1:a0:9f:ce:8b:70:d1:32:e9:a7:be:0c:22:bc:41:
         22:d6:10:34:b2:87:2a:c3:4c:80:50:2a:5c:4b:90:98:65:3c:
         df:c9:e9:ae:ee:89:2f:47:16:86:bc:db:96:b7:d9:fa:2f:1b:
         4e:88:95:56:3f:6b:be:f2:42:33:68:00:8a:ec:03:39:89:85:
         e9:b9:98:88:4e:af:05:c1:73:21:74:bf:9f:f4:09:58:40:ce:
         44:d5:fd:1d:73:17:19:c9:b4:9f:b6:c8:4f:fa:3a:df:32:9d:
         47:3f:03:a3:5d:ba:ca:f1:94:15:41:b0:4c:fd:08:e3:cb:a4:
         dc:e7:1f:b3:09:e0:88:22:13:15:f4:d0:70:68:45:c0:73:07:
         b3:fd:a2:f5:83:3e:5c:d2:11:39:f6:01:80:f1:72:a4:54:85:
         06:5d:17:74:08:10:46:60:7b:1c:71:9d:95:22:46:71:af:e9:
         7a:7a:fc:a9:6d:d7:44:bb:99:89:a6:b4:e6:d0:41:8f:82:c8:
         69:6f:84:bc:21:29:7e:f0:8b:4c:8f:5d:8f:fe:ab:17:ff:42:
         ff:24:34:b8
-----BEGIN CERTIFICATE-----
MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWE5pojzxm4JgJmtpPAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0
MDI0MB4XDTI2MDcwNjIwNTUxN1oXDTI2MDkyODE0NDUwNVowLzEtMCsGA1UEAxMk
NzU3YjdlMzEtMDg3Yi00MjYwLWE4NmYtMzM1NTQ2OWM1MDY1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhahiFRxrj4YJQfJeR6iX7P8cZr9O/10uYSrZ
xJo6FjmGIRy0Ey1TJKE3j5IbaApJSc36CW/CwEK4l1Jak86Mi7ptREDTDroMb+WY
RnsYEPcra9tAePpyr3nG6HneRzNAtbiGLGUjIUpPA9D6KmGG618OHbW60uJIjP8H
JD8RxuQISqJhY3ijHKYSGYXRzEUYMaFQeFq26ZALdtyEMMroClhSTsacYs/bLKVO
3zUNgLX83/VbOZY4cwKZPE1kT5SMkzAWjQd0Coy28deJRrIhtbL8A49BfjPAOFQ1
CcNIaNitplzznLQLLRc+JUy7KClvovd18KWRfxn1JzLzvPfW/QIDAQABo4IDYTCC
A10wHQYDVR0OBBYEFFqpOsV58WZsBXx3dJ8w+H7y7u+dMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3
YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvMWNiOGQ0ZmMtMGJjZi0z
MTkyLTg3MTYtYjk4ODZlMWExOGZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm
NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh
NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk
ZDBlYTQwMjQuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAlRJoAwQA
lTkdAwQAlTlQMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC
ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww
DQYJKoZIhvcNAQELBQADggEBABqV3jUoj95KPG97sujceFaq+MqBzgKSX0ZsGN6q
+voyCaKvNYGuGaGgn86LcNEy6ae+DCK8QSLWEDSyhyrDTIBQKlxLkJhlPN/J6a7u
iS9HFoa825a32fovG06IlVY/a77yQjNoAIrsAzmJhem5mIhOrwXBcyF0v5/0CVhA
zkTV/R1zFxnJtJ+2yE/6Ot8ynUc/A6NdusrxlBVBsEz9COPLpNznH7MJ4IgiExX0
0HBoRcBzB7P9ovWDPlzSETn2AYDxcqRUhQZdF3QIEEZgexxxnZUiRnGv6Xp6/Klt
10S7mYmmtObQQY+CyGlvhLwhKX7wi0yPXY/+qxf/Qv8kNLg=
-----END CERTIFICATE-----
Generated at Tue Jul 21 13:52:15 2026 by rpki-client