Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/60120f92-ff11-3906-b27c-ac77b20f3c01.roa
File:                     60120f92-ff11-3906-b27c-ac77b20f3c01.roa (raw, json)
Hash identifier:          PIiC4JA7p5xLKJaHOO4hYFRdcLrNz37HnziuCUpDduU=
Subject key identifier:   68:4B:3C:9C:70:AA:93:D1:51:EC:F2:31:CE:74:5C:4A:37:25:26:2B
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584F5CFD5685450ECA2BDBA02210
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/60120f92-ff11-3906-b27c-ac77b20f3c01.roa
Signing time:             Fri 02 Oct 2026 01:00:12 +0000
ROA not before:           Fri 02 Oct 2026 01:00:12 +0000
ROA not after:            Thu 31 Dec 2026 02:00:12 +0000
asID:                     53366
IP address blocks:        149.120.32.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 16 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5c:fd:56:85:45:0e:ca:2b:db:a0:22:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Oct  2 01:00:12 2026 GMT
            Not After : Dec 31 02:00:12 2026 GMT
        Subject: CN=53107d1d-5cd7-4a80-9bed-5e21d83f3cf5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ae:4e:88:53:06:4f:27:b2:56:68:7a:9d:31:
                    da:aa:49:d2:3d:b2:90:5b:f0:1e:9f:8e:91:5e:40:
                    e5:0c:39:bb:41:bd:72:9d:22:49:67:c7:39:89:51:
                    a3:4d:f0:b5:70:1f:0b:6d:99:f4:88:d8:f8:06:17:
                    b5:1e:cc:53:30:e2:49:6e:36:d3:4d:50:75:4f:3a:
                    cd:9b:b4:05:b5:42:2b:6a:63:26:96:10:52:0e:ff:
                    e5:65:c7:a6:34:28:5f:01:57:8d:1d:05:a2:55:a8:
                    a8:1d:45:78:df:48:31:03:c6:33:45:3d:4e:dc:fe:
                    b4:0e:be:82:a5:74:d8:92:f1:ab:94:d3:84:90:76:
                    59:6f:33:1a:31:ea:e8:d2:e3:08:38:ba:f8:5a:96:
                    b8:81:50:b0:74:1d:1a:e5:c2:1e:97:50:1c:e9:26:
                    45:46:37:1c:81:fa:fc:44:6a:2e:56:e0:30:c2:6a:
                    a3:d4:16:01:40:66:5f:55:8d:4c:ea:f2:5b:0b:c8:
                    0c:7e:69:79:cd:06:50:c8:5a:76:bc:b8:42:b0:64:
                    f4:f7:7b:23:33:ad:16:a5:a9:2d:b3:9c:ce:86:35:
                    49:18:23:fc:e7:34:4a:c8:ce:a5:a2:f7:43:31:22:
                    ce:bb:cb:e9:bd:70:33:ad:1c:93:a1:d5:1e:d5:9c:
                    3d:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:4B:3C:9C:70:AA:93:D1:51:EC:F2:31:CE:74:5C:4A:37:25:26:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/60120f92-ff11-3906-b27c-ac77b20f3c01.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.120.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:22:9a:37:e5:ba:9a:af:3c:93:5e:4d:e6:67:87:c1:e0:c7:
         c7:43:6e:78:94:1c:5b:4a:4d:47:5a:5e:31:6b:2e:e5:b8:45:
         c4:bf:4e:29:5f:4f:7c:2f:f7:72:9c:10:70:79:51:53:bc:9c:
         ea:02:28:5b:76:40:44:76:d1:5c:c9:69:89:30:58:89:28:25:
         93:79:89:01:61:0a:7e:cd:f4:bf:b5:54:0a:11:23:4b:dc:3d:
         a0:30:97:b4:29:9d:c0:59:b5:9d:6c:0c:19:d6:ce:e2:c2:2a:
         3c:0a:1d:7d:12:c7:ea:64:56:fd:32:ff:57:39:14:ea:f2:c9:
         73:2d:ff:52:6e:2b:18:5c:f8:bc:33:8a:1f:16:7f:64:9d:6e:
         f6:20:ea:82:c3:78:14:0d:47:45:e6:3b:50:fb:e7:05:7b:9c:
         59:9d:e0:a8:31:51:26:a1:93:96:57:17:cf:2a:2f:2f:93:91:
         79:67:75:0b:28:d4:1c:d8:f6:28:3f:f5:ae:d9:ca:e9:a0:35:
         7f:97:e3:3d:b9:86:a3:3c:8a:88:1b:bf:61:44:09:8b:2f:b3:
         eb:b8:35:10:5f:76:5f:0a:64:16:62:b3:e9:16:36:55:70:c3:
         d1:3b:24:97:0f:70:5f:5a:b4:7a:b8:9f:90:ff:2e:1d:ce:d2:
         64:0d:b7:6b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9c/VaFRQ7KK9ugIhAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0
MDI0MB4XDTI2MTAwMjAxMDAxMloXDTI2MTIzMTAyMDAxMlowLzEtMCsGA1UEAxMk
NTMxMDdkMWQtNWNkNy00YTgwLTliZWQtNWUyMWQ4M2YzY2Y1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuq5OiFMGTyeyVmh6nTHaqknSPbKQW/Aen46R
XkDlDDm7Qb1ynSJJZ8c5iVGjTfC1cB8LbZn0iNj4Bhe1HsxTMOJJbjbTTVB1TzrN
m7QFtUIramMmlhBSDv/lZcemNChfAVeNHQWiVaioHUV430gxA8YzRT1O3P60Dr6C
pXTYkvGrlNOEkHZZbzMaMero0uMIOLr4Wpa4gVCwdB0a5cIel1Ac6SZFRjccgfr8
RGouVuAwwmqj1BYBQGZfVY1M6vJbC8gMfml5zQZQyFp2vLhCsGT093sjM60Wpakt
s5zOhjVJGCP85zRKyM6lovdDMSLOu8vpvXAzrRyTodUe1Zw93QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGhLPJxwqpPRUezyMc50XEo3JSYrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3
YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvNjAxMjBmOTItZmYxMS0z
OTA2LWIyN2MtYWM3N2IyMGYzYzAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm
NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh
NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk
ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFlXggMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI0imjflupqvPJNeTeZnh8Hgx8dDbniUHFtKTUdaXjFrLuW4RcS/Tilf
T3wv93KcEHB5UVO8nOoCKFt2QER20VzJaYkwWIkoJZN5iQFhCn7N9L+1VAoRI0vc
PaAwl7QpncBZtZ1sDBnWzuLCKjwKHX0Sx+pkVv0y/1c5FOryyXMt/1JuKxhc+Lwz
ih8Wf2SdbvYg6oLDeBQNR0XmO1D75wV7nFmd4KgxUSahk5ZXF88qLy+TkXlndQso
1BzY9ig/9a7ZyumgNX+X4z25hqM8iogbv2FECYsvs+u4NRBfdl8KZBZis+kWNlVw
w9E7JJcPcF9atHq4n5D/Lh3O0mQNt2s=
-----END CERTIFICATE-----
Generated at Wed Oct 14 20:39:25 2026 by rpki-client