Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc350fc7-bb26-3a08-9711-e34e4e9fed0e.roa
File:                     dc350fc7-bb26-3a08-9711-e34e4e9fed0e.roa (raw, json)
Hash identifier:          daesur7HnAOvgW2BfsedF+zCVdWZ99mDAFFFQhVYVvs=
Subject key identifier:   CF:4D:F5:C7:EC:B8:EA:A0:BB:5B:FF:37:D5:37:BB:79:84:FA:C6:2A
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F4328584F698D814B703E065034896480
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc350fc7-bb26-3a08-9711-e34e4e9fed0e.roa
Signing time:             Tue 06 Oct 2026 13:00:13 +0000
ROA not before:           Tue 06 Oct 2026 13:00:13 +0000
ROA not after:            Mon 04 Jan 2027 14:00:13 +0000
asID:                     31898
IP address blocks:        170.114.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 29 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:69:8d:81:4b:70:3e:06:50:34:89:64:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: Oct  6 13:00:13 2026 GMT
            Not After : Jan  4 14:00:13 2027 GMT
        Subject: CN=9de6ad6a-98da-4958-8460-0e8693209e2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:9a:4d:6a:26:c2:28:c0:8e:a5:0c:2e:de:06:
                    7b:5a:39:a9:6f:32:7f:b3:cd:e4:dd:d1:ca:13:ca:
                    3d:38:04:eb:9b:d1:94:97:e3:c9:3e:dc:cf:3a:27:
                    9b:c5:bf:50:a0:77:2f:7e:ef:80:c1:2e:6f:5a:de:
                    4b:8b:dc:10:ac:fe:6b:5a:17:a5:20:04:0f:ca:9e:
                    10:f9:e9:8d:ba:bc:cb:08:81:17:dd:69:b6:48:23:
                    c7:14:a5:fe:83:8a:ae:aa:10:be:37:33:96:92:0d:
                    a8:49:46:cf:12:68:48:30:ed:bd:04:14:33:27:98:
                    e9:1f:26:d6:0c:f5:09:fa:38:dd:54:b1:8e:25:7f:
                    17:72:5b:61:dd:38:33:bf:57:87:76:48:cc:00:5a:
                    6f:7b:ea:3f:0f:48:0f:26:10:35:bf:ef:d7:77:6c:
                    d2:79:d3:56:c1:a3:a7:b4:97:fd:a2:1a:d3:a6:71:
                    10:85:a9:e4:59:e7:59:17:cc:1a:56:50:40:8c:71:
                    8b:94:18:25:2c:ea:b5:a3:c3:c9:85:b3:e5:b5:35:
                    b9:e2:3d:c5:66:f3:ee:00:42:d3:18:dc:11:79:d6:
                    3d:30:1a:0b:8f:4f:30:95:fd:89:02:d9:55:4c:2c:
                    27:c8:35:af:3d:cf:b1:d3:15:4c:cc:67:8f:91:e9:
                    ec:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:4D:F5:C7:EC:B8:EA:A0:BB:5B:FF:37:D5:37:BB:79:84:FA:C6:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc350fc7-bb26-3a08-9711-e34e4e9fed0e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.114.68.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:b4:61:2a:9c:e8:65:fb:02:9b:10:6b:bd:90:ea:ad:9b:04:
         99:fe:6d:9c:2c:ee:ce:48:c5:72:40:bb:2b:31:4a:39:02:a4:
         29:d1:3d:12:0f:84:fe:3f:c2:c6:69:60:30:d9:e1:9a:46:41:
         84:29:1e:21:44:70:be:90:af:96:37:45:ef:10:fc:08:1e:9c:
         b1:7f:f8:bd:32:04:d3:eb:2d:7a:cc:9c:c6:02:05:00:98:0d:
         3b:04:60:c0:f7:bd:d0:8f:fa:f7:9e:19:55:ab:6e:02:f9:1c:
         ad:9f:74:f2:c6:6b:ef:71:bf:fc:3f:c5:04:69:3b:ce:37:85:
         c3:5d:e1:1e:41:80:94:f6:39:be:8d:8d:5b:48:22:5c:22:fd:
         46:f0:0a:e7:68:e5:37:0e:b1:6e:09:ea:09:d7:d2:f3:e2:8d:
         98:9a:4e:be:38:07:1e:4c:7b:d3:ac:46:ba:fa:4a:86:a4:45:
         8e:c4:72:f3:a1:26:bb:05:1d:28:2c:d9:eb:62:43:65:d2:51:
         b9:29:9b:67:65:67:e0:3e:f2:ae:f4:72:62:4e:45:0f:fd:68:
         5a:2f:ef:54:8c:35:a2:0a:2c:49:a1:cf:9c:cc:41:26:93:37:
         94:1b:7b:b8:6a:5c:98:12:1a:8f:06:8e:38:db:ca:00:d6:de:
         a7:86:9c:c3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9pjYFLcD4GUDSJZIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGM0NTVlNTgtNjE4OS00ZjI4LWI4MDMtNjFhOTY1YTIx
YzY1MB4XDTI2MTAwNjEzMDAxM1oXDTI3MDEwNDE0MDAxM1owLzEtMCsGA1UEAxMk
OWRlNmFkNmEtOThkYS00OTU4LTg0NjAtMGU4NjkzMjA5ZTJhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhppNaibCKMCOpQwu3gZ7WjmpbzJ/s83k3dHK
E8o9OATrm9GUl+PJPtzPOiebxb9QoHcvfu+AwS5vWt5Li9wQrP5rWhelIAQPyp4Q
+emNurzLCIEX3Wm2SCPHFKX+g4quqhC+NzOWkg2oSUbPEmhIMO29BBQzJ5jpHybW
DPUJ+jjdVLGOJX8Xclth3Tgzv1eHdkjMAFpve+o/D0gPJhA1v+/Xd2zSedNWwaOn
tJf9ohrTpnEQhankWedZF8waVlBAjHGLlBglLOq1o8PJhbPltTW54j3FZvPuAELT
GNwRedY9MBoLj08wlf2JAtlVTCwnyDWvPc+x0xVMzGePkensUQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFM9N9cfsuOqgu1v/N9U3u3mE+sYqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1
NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5NjVhMjFjNjUvZGMzNTBmYzctYmIyNi0z
YTA4LTk3MTEtZTM0ZTRlOWZlZDBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGM0NTVlNTgtNjE4OS00ZjI4LWI4
MDMtNjFhOTY1YTIxYzY1L2RjNDU1ZTU4LTYxODktNGYyOC1iODAzLTYxYTk2NWEy
MWM2NS5jcmwwHwYDVR0jBBgwFoAUZka/BM8QPkyukKDmzSU2ULZFvD8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5
NjVhMjFjNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqnJEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKu0YSqc6GX7ApsQa72Q6q2bBJn+bZws7s5IxXJAuysxSjkCpCnRPRIP
hP4/wsZpYDDZ4ZpGQYQpHiFEcL6Qr5Y3Re8Q/AgenLF/+L0yBNPrLXrMnMYCBQCY
DTsEYMD3vdCP+veeGVWrbgL5HK2fdPLGa+9xv/w/xQRpO843hcNd4R5BgJT2Ob6N
jVtIIlwi/UbwCudo5TcOsW4J6gnX0vPijZiaTr44Bx5Me9OsRrr6SoakRY7EcvOh
JrsFHSgs2etiQ2XSUbkpm2dlZ+A+8q70cmJORQ/9aFov71SMNaIKLEmhz5zMQSaT
N5Qbe7hqXJgSGo8GjjjbygDW3qeGnMM=
-----END CERTIFICATE-----
Generated at Wed Oct 28 00:43:42 2026 by rpki-client