Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/bea5353d-5913-3974-a797-928dc8618cec.roa
File:                     bea5353d-5913-3974-a797-928dc8618cec.roa (raw, json)
Hash identifier:          Nt8VxdxmMhYmZ4lG4xhEtMFpYT5goSLwJxEQGWqj5rA=
Subject key identifier:   75:42:D6:E6:58:08:06:24:C2:73:46:F2:8E:BB:6B:29:6E:F2:BD:A1
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F4328584B6A61EDADF3C61D1D7F5EE200
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/bea5353d-5913-3974-a797-928dc8618cec.roa
Signing time:             Sun 05 Oct 2025 01:00:32 +0000
ROA not before:           Sun 05 Oct 2025 01:00:32 +0000
ROA not after:            Sat 03 Jan 2026 02:00:32 +0000
asID:                     30103
IP address blocks:        159.124.224.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6a:61:ed:ad:f3:c6:1d:1d:7f:5e:e2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: Oct  5 01:00:32 2025 GMT
            Not After : Jan  3 02:00:32 2026 GMT
        Subject: CN=500bcb7f-fcda-44e3-95b3-5419a9b7a3b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:4d:dc:0e:f4:67:70:66:0d:4d:e9:44:dd:12:
                    d4:fc:49:8a:43:f1:47:23:3f:3e:99:9e:a4:17:e0:
                    98:36:cb:48:3f:46:a7:9a:9f:ca:eb:a9:05:9d:9d:
                    f3:6e:96:9e:c9:2d:5b:34:6d:d0:cd:88:68:66:5c:
                    a0:ce:d2:38:5d:11:33:33:03:05:ff:14:8c:7e:a3:
                    c2:c6:14:f9:04:58:6e:f4:62:e5:b5:8e:0f:61:02:
                    f5:06:12:f3:f0:e3:0c:98:dd:93:3f:99:a7:14:11:
                    f5:3a:de:65:73:5d:07:b2:f7:2c:6a:13:6e:0d:76:
                    02:5d:ad:2a:27:9a:d6:b6:63:92:19:1a:9d:d8:9d:
                    17:07:5d:cb:9a:33:70:2f:37:a4:11:3b:0c:bf:b1:
                    b4:2f:c1:48:ba:a7:ac:eb:5c:72:79:3f:7b:8a:b6:
                    2c:46:1b:54:b0:fb:87:fa:ec:09:f3:74:9d:aa:fe:
                    ca:40:9b:f0:91:a7:23:a5:df:62:84:d8:6f:81:4d:
                    52:ba:07:60:da:7b:61:11:64:74:54:33:6e:da:70:
                    e6:76:68:fb:f9:1a:35:12:86:05:e0:66:de:24:07:
                    b8:3d:62:9a:a4:ce:40:c9:b0:74:82:d6:45:ab:fb:
                    16:a2:d9:f1:a6:cf:50:0f:66:cb:74:74:c8:ca:9f:
                    f8:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:42:D6:E6:58:08:06:24:C2:73:46:F2:8E:BB:6B:29:6E:F2:BD:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/bea5353d-5913-3974-a797-928dc8618cec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.124.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:5c:f9:a4:a7:10:08:37:08:39:f3:90:db:98:53:ec:60:42:
         c5:fd:49:c6:04:90:db:e8:2c:41:0a:a0:03:68:17:97:9b:35:
         12:23:11:78:e5:86:32:d7:bf:a1:2a:c2:a8:13:6a:e8:6c:12:
         b8:f7:4a:bd:a1:01:02:71:fa:c8:b3:cb:4f:27:9f:b0:75:23:
         60:37:b1:23:42:7d:5a:58:18:ea:8b:ea:d0:bb:43:46:39:29:
         4a:b5:a7:87:cc:a4:f3:13:c4:49:2d:cb:d8:70:e3:f6:0e:8c:
         14:38:ad:f8:d3:a0:3c:ce:b9:5e:93:64:1c:9d:e6:b3:c6:b9:
         96:ef:8d:07:38:2c:b2:0f:e8:f8:aa:10:ca:67:70:fb:2d:c9:
         c8:55:c0:8b:94:cd:ba:a8:8c:67:fc:af:5b:69:be:78:e1:28:
         b6:0e:45:db:c8:8f:e5:2d:a3:6e:51:fa:b6:21:27:2b:6d:2f:
         53:e1:3d:64:68:f5:53:1d:52:cd:c8:74:41:e5:a8:aa:c1:eb:
         4d:56:2b:6f:9f:69:64:44:77:94:bb:74:7f:00:dd:06:b4:a9:
         fd:3b:3c:9d:4c:be:fd:c4:a2:3e:b1:85:17:9e:fd:4d:83:e3:
         93:c7:c2:a8:65:50:f1:28:0a:f4:37:50:f0:f2:51:56:3a:65:
         7e:31:84:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:31:29 2025 by rpki-client