Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/ee59bebf-617f-3e37-a938-9a81583fa157.roa
File:                     ee59bebf-617f-3e37-a938-9a81583fa157.roa (raw, json)
Hash identifier:          dqH0KliNKDt9y4iyiE8EJ5bcgl5MU1C+kfRQKsMKeDE=
Subject key identifier:   F6:86:20:9A:AB:25:F3:BC:3D:AC:8E:9A:C6:EE:81:DC:AA:4A:75:0A
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F4328584B2CF6E5950A5C5135ABAA02C0
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/ee59bebf-617f-3e37-a938-9a81583fa157.roa
Signing time:             Sat 13 Sep 2025 01:00:33 +0000
ROA not before:           Sat 13 Sep 2025 01:00:33 +0000
ROA not after:            Fri 12 Dec 2025 02:00:33 +0000
asID:                     30103
IP address blocks:        149.137.32.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2c:f6:e5:95:0a:5c:51:35:ab:aa:02:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: Sep 13 01:00:33 2025 GMT
            Not After : Dec 12 02:00:33 2025 GMT
        Subject: CN=ef97f638-aecf-4560-a81c-e83560c80cef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:2f:09:6c:5e:43:c9:2e:aa:87:e9:0a:be:a2:
                    9c:3e:bb:28:0d:cf:cc:80:fb:07:1d:6e:e0:c9:68:
                    a8:76:77:b5:74:12:12:44:f1:d3:cd:14:16:43:04:
                    d8:f2:f1:89:c4:e8:8e:a2:82:d7:fb:db:d7:31:b7:
                    18:49:07:dd:82:fd:16:c3:b1:aa:65:a0:82:2f:c8:
                    59:aa:e4:e0:bd:fb:53:09:fe:9c:ed:8c:4e:37:28:
                    8f:a0:94:18:f1:bb:be:6c:9f:72:ee:63:14:c1:e1:
                    1c:17:56:4e:3b:44:a6:f8:49:e8:35:a8:cf:6e:3e:
                    e1:c0:50:cb:95:22:70:54:a1:58:28:1b:15:7b:ff:
                    f6:e4:dc:c7:83:63:be:76:db:2f:64:2b:3f:48:3b:
                    82:1f:db:dc:87:b8:90:54:1e:8d:f3:93:db:b6:9b:
                    2a:9b:4a:61:5c:c9:3f:eb:b8:c6:15:e9:bd:c2:74:
                    1d:f3:ea:b8:5d:55:ca:0b:e6:21:54:cc:d2:88:e8:
                    79:0a:4d:b1:cd:bd:da:8c:bf:4c:88:46:3b:8c:4d:
                    48:46:29:3b:72:e3:50:66:71:b4:35:9f:84:be:80:
                    7e:4f:06:8f:37:fc:12:73:54:e7:7f:42:63:d8:e2:
                    38:32:54:1e:8f:59:32:2c:6a:8b:5a:1b:68:d1:e2:
                    2b:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:86:20:9A:AB:25:F3:BC:3D:AC:8E:9A:C6:EE:81:DC:AA:4A:75:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/ee59bebf-617f-3e37-a938-9a81583fa157.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.137.32.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:80:67:ed:12:ee:a7:0f:ab:b0:a1:25:ed:02:39:9a:4f:de:
         7f:dc:35:59:99:f9:82:3e:c2:29:8a:1a:be:c9:c5:bb:4d:56:
         f6:1d:ba:01:a5:c2:c5:79:2b:fa:ef:0a:d2:67:b6:6b:4b:dd:
         ec:2b:af:d8:cb:60:5b:dc:c0:15:dd:c1:83:9b:ca:e9:2c:ac:
         31:a1:d1:70:17:d5:8b:11:96:af:ea:ec:c2:2a:cd:fe:c7:98:
         f4:96:74:be:f6:cf:55:78:ff:1b:6a:22:f0:78:02:67:08:67:
         ac:38:cc:39:16:8f:52:0d:12:12:50:d6:2d:89:7c:f3:be:75:
         3d:84:c7:9f:e1:7d:c5:99:06:15:fe:65:bf:3f:b4:87:5f:44:
         03:ad:12:a7:33:81:71:3e:34:2f:b2:5a:29:b5:eb:07:6f:92:
         d2:c9:df:f7:ba:61:26:24:37:c3:83:66:de:79:31:af:92:10:
         b6:f7:5d:c0:c1:e5:da:0e:57:55:81:9a:74:c9:be:47:f1:f5:
         e2:0d:1c:7d:79:3a:66:44:fb:59:22:3f:a5:2b:45:55:4b:8c:
         76:94:a2:23:9d:1b:67:72:cc:d7:fc:10:82:d2:8d:ab:60:8c:
         2f:7d:91:6d:ed:38:cc:ba:a3:e6:ab:2e:39:c0:2c:1e:75:01:
         0c:26:15:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:31:32 2025 by rpki-client