Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/0a33127e-3c29-3430-b3d0-50a8aaf8e7b9.roa
File:                     0a33127e-3c29-3430-b3d0-50a8aaf8e7b9.roa (raw, json)
Hash identifier:          lBYtPxzP8knw12COs5Giqvq8GEAmsrpZ07Enu2hFAyA=
Subject key identifier:   E1:66:B1:B1:EA:2A:89:AC:3A:C7:C3:15:6A:2D:00:9F:1F:87:2D:F6
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F4328584B7DECA26EA27443DA7D426D80
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/0a33127e-3c29-3430-b3d0-50a8aaf8e7b9.roa
Signing time:             Sun 12 Oct 2025 01:00:30 +0000
ROA not before:           Sun 12 Oct 2025 01:00:30 +0000
ROA not after:            Sat 10 Jan 2026 02:00:30 +0000
asID:                     30103
IP address blocks:        159.124.64.0/23 maxlen: 24
                          159.124.66.0/23 maxlen: 24
                          159.124.68.0/23 maxlen: 24
                          159.124.70.0/23 maxlen: 24
                          159.124.72.0/23 maxlen: 24
                          159.124.74.0/23 maxlen: 24
                          159.124.76.0/23 maxlen: 24
                          159.124.78.0/23 maxlen: 24
                          159.124.80.0/23 maxlen: 24
                          159.124.82.0/23 maxlen: 24
                          159.124.84.0/23 maxlen: 24
                          159.124.86.0/23 maxlen: 24
                          159.124.88.0/23 maxlen: 24
                          159.124.90.0/23 maxlen: 24
                          159.124.92.0/23 maxlen: 24
                          159.124.94.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7d:ec:a2:6e:a2:74:43:da:7d:42:6d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: Oct 12 01:00:30 2025 GMT
            Not After : Jan 10 02:00:30 2026 GMT
        Subject: CN=73212892-2a73-405d-92a7-0593e5f63534
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:7a:18:66:73:0c:5e:29:68:97:05:41:4d:8e:
                    dc:34:e4:e2:30:62:d3:ca:17:5a:65:79:70:0c:52:
                    de:df:b0:b0:e6:08:02:9b:26:cc:03:af:ce:b8:59:
                    5e:30:a8:a5:ad:2c:39:93:c9:da:72:07:eb:f0:3c:
                    9a:b1:27:7f:72:f4:cf:83:1d:92:12:7e:3d:1b:ce:
                    82:3b:00:59:d2:29:18:0c:8f:5b:11:11:a1:8a:ad:
                    99:ef:dc:c1:e6:93:20:15:07:9d:68:45:92:a1:8c:
                    f2:5b:bb:9d:f4:9e:46:39:93:a7:1c:ff:09:2c:6c:
                    f8:71:fd:85:20:b5:7c:10:32:16:bc:87:59:d9:96:
                    06:72:21:07:14:55:63:8c:a5:ba:ed:12:9c:12:9f:
                    ea:99:78:0a:ad:4e:11:3c:58:90:1e:51:e6:0a:c5:
                    8d:4e:5c:f8:df:72:df:23:47:5e:d4:ba:04:2e:88:
                    8f:b4:1e:af:08:d5:84:fb:1c:d7:36:23:bd:90:60:
                    76:ca:44:99:e6:1f:49:a8:66:fd:84:1d:f4:47:2a:
                    f1:59:25:c1:3a:07:0d:29:dc:79:6a:3b:fe:26:dd:
                    dd:15:72:2d:53:1b:33:c8:dd:5e:1a:6c:65:9b:db:
                    fc:8a:64:ec:60:6a:b6:29:a7:a4:34:93:e6:27:6f:
                    f9:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:66:B1:B1:EA:2A:89:AC:3A:C7:C3:15:6A:2D:00:9F:1F:87:2D:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/0a33127e-3c29-3430-b3d0-50a8aaf8e7b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.124.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:c7:39:25:9b:c0:59:8f:2b:39:9c:f3:30:f4:61:22:ff:0c:
         ef:f5:6b:34:f7:04:7a:c0:03:9e:29:c6:6d:04:25:0d:ff:1b:
         0c:4a:b7:14:25:bd:d3:ca:31:57:d4:71:07:1b:ff:87:62:49:
         d0:ef:c6:40:12:16:6b:bd:4d:06:c3:8c:b4:a2:c1:57:75:96:
         3c:62:1e:69:0f:40:26:c0:02:a3:73:73:b4:47:16:72:98:92:
         7c:c8:56:0e:86:10:02:b3:5e:d9:27:d1:b6:5a:e2:80:6d:56:
         e5:83:33:63:a4:bb:c6:ed:29:4a:ea:c5:29:6d:82:d6:c3:e9:
         54:17:46:42:ee:57:ff:54:0c:c4:ef:71:16:63:4d:19:44:d5:
         ef:e8:34:9c:1f:ed:ac:4a:97:6e:1c:39:5a:19:19:c5:4c:ae:
         c4:cb:75:48:46:f5:bb:79:7b:a4:04:4c:24:dd:19:e5:e4:74:
         88:a6:fc:e3:02:38:79:cd:29:8e:7c:91:b8:27:46:aa:4f:69:
         32:02:c0:2e:4e:e7:2e:76:2c:d3:bf:4d:c8:83:90:04:92:8d:
         0d:e7:d5:1c:78:f9:04:06:38:fc:ab:ff:1e:af:45:23:4e:70:
         bd:13:2a:64:dd:76:55:ab:48:6f:06:d1:da:64:fa:3d:90:9c:
         d4:c1:65:c9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt97KJuonRD2n1CbYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGM0NTVlNTgtNjE4OS00ZjI4LWI4MDMtNjFhOTY1YTIx
YzY1MB4XDTI1MTAxMjAxMDAzMFoXDTI2MDExMDAyMDAzMFowLzEtMCsGA1UEAxMk
NzMyMTI4OTItMmE3My00MDVkLTkyYTctMDU5M2U1ZjYzNTM0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAunoYZnMMXilolwVBTY7cNOTiMGLTyhdaZXlw
DFLe37Cw5ggCmybMA6/OuFleMKilrSw5k8nacgfr8DyasSd/cvTPgx2SEn49G86C
OwBZ0ikYDI9bERGhiq2Z79zB5pMgFQedaEWSoYzyW7ud9J5GOZOnHP8JLGz4cf2F
ILV8EDIWvIdZ2ZYGciEHFFVjjKW67RKcEp/qmXgKrU4RPFiQHlHmCsWNTlz433Lf
I0de1LoELoiPtB6vCNWE+xzXNiO9kGB2ykSZ5h9JqGb9hB30RyrxWSXBOgcNKdx5
ajv+Jt3dFXItUxszyN1eGmxlm9v8imTsYGq2KaekNJPmJ2/5+wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOFmsbHqKomsOsfDFWotAJ8fhy32MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1
NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5NjVhMjFjNjUvMGEzMzEyN2UtM2MyOS0z
NDMwLWIzZDAtNTBhOGFhZjhlN2I5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGM0NTVlNTgtNjE4OS00ZjI4LWI4
MDMtNjFhOTY1YTIxYzY1L2RjNDU1ZTU4LTYxODktNGYyOC1iODAzLTYxYTk2NWEy
MWM2NS5jcmwwHwYDVR0jBBgwFoAUZka/BM8QPkyukKDmzSU2ULZFvD8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5
NjVhMjFjNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFn3xAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFPHOSWbwFmPKzmc8zD0YSL/DO/1azT3BHrAA54pxm0EJQ3/GwxKtxQl
vdPKMVfUcQcb/4diSdDvxkASFmu9TQbDjLSiwVd1ljxiHmkPQCbAAqNzc7RHFnKY
knzIVg6GEAKzXtkn0bZa4oBtVuWDM2Oku8btKUrqxSltgtbD6VQXRkLuV/9UDMTv
cRZjTRlE1e/oNJwf7axKl24cOVoZGcVMrsTLdUhG9bt5e6QETCTdGeXkdIim/OMC
OHnNKY58kbgnRqpPaTICwC5O5y52LNO/TciDkASSjQ3n1Rx4+QQGOPyr/x6vRSNO
cL0TKmTddlWrSG8G0dpk+j2QnNTBZck=
-----END CERTIFICATE-----
Generated at Mon Oct 20 16:31:35 2025 by rpki-client