Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/4cc5f785-cde1-31c8-a5da-1e15c25d01f1.roa
File:                     4cc5f785-cde1-31c8-a5da-1e15c25d01f1.roa (raw, json)
Hash identifier:          85kRvUW+1kZn9TTGcBw5ITCLy0sdg/U1NoWVOpAKmck=
Subject key identifier:   13:4E:0F:3A:CE:EB:5A:74:95:73:24:2A:6D:49:7D:F1:E0:C9:78:07
Certificate issuer:       /CN=65506c68-611f-46ed-9e78-36da39f8ee7d
Certificate serial:       010D0C9F4328584DC29AE120AEF445179C5D1F80
Authority key identifier: 64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/4cc5f785-cde1-31c8-a5da-1e15c25d01f1.roa
Signing time:             Fri 08 May 2026 01:00:24 +0000
ROA not before:           Fri 08 May 2026 01:00:24 +0000
ROA not after:            Thu 06 Aug 2026 01:00:24 +0000
asID:                     5769
IP address blocks:        24.53.0.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c2:9a:e1:20:ae:f4:45:17:9c:5d:1f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65506c68-611f-46ed-9e78-36da39f8ee7d
        Validity
            Not Before: May  8 01:00:24 2026 GMT
            Not After : Aug  6 01:00:24 2026 GMT
        Subject: CN=dac96bfa-e147-45b9-9cf5-8dd02d47c147
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:60:91:b7:5b:c4:bd:f8:6a:78:b6:e2:8d:1f:
                    e7:2f:9d:2e:5e:da:0e:13:8e:fe:66:b9:73:5e:54:
                    a7:0a:f9:10:e8:59:25:a2:47:ad:12:16:ec:ea:a1:
                    2d:0e:d0:21:ac:ec:89:4f:6e:4c:33:3b:bb:49:7d:
                    b1:f8:cf:e9:69:be:e7:36:0b:d6:8e:b5:08:7c:39:
                    69:c8:d4:d4:2e:97:d0:9d:8c:4d:32:1d:a3:31:e0:
                    c8:f7:72:a4:e3:06:0e:dc:13:a8:88:cb:63:24:bc:
                    56:db:c4:cc:b5:43:39:65:70:0d:1d:5e:88:e5:f1:
                    f1:51:3f:81:6e:f5:d1:5c:d2:a6:7a:2c:ea:d3:89:
                    7f:02:cb:fe:fa:bc:1b:8a:43:a6:68:bb:49:51:ff:
                    25:b3:ca:55:5d:90:56:4c:99:1c:be:fb:35:42:a7:
                    1c:e8:c7:38:2e:a8:d6:a5:1b:5d:a3:a6:57:8c:a0:
                    ce:55:6d:6c:93:94:e4:cf:96:de:9d:fa:f4:87:58:
                    16:aa:c4:38:53:91:64:24:01:ec:ce:b6:22:3f:a6:
                    9c:54:a0:2f:28:00:9f:8f:a6:3b:32:88:07:2f:ff:
                    2c:91:f1:21:36:88:3e:04:92:c1:f4:8a:6e:ad:23:
                    ab:f0:aa:b6:a3:11:17:2f:ba:98:3e:1b:5c:b6:d0:
                    f3:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:4E:0F:3A:CE:EB:5A:74:95:73:24:2A:6D:49:7D:F1:E0:C9:78:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/4cc5f785-cde1-31c8-a5da-1e15c25d01f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl

            X509v3 Authority Key Identifier:
                keyid:64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.53.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:0c:02:9a:b2:1f:77:c0:e9:2c:8d:0d:71:35:cc:94:f0:78:
         04:2d:61:3e:c0:28:1e:4a:62:09:53:54:54:f1:1d:07:27:34:
         1f:c5:65:59:fc:98:99:f6:a7:d1:68:ae:7b:69:d9:b9:a6:cc:
         f4:02:b8:14:57:cf:5b:d4:b1:66:31:8b:31:e7:dc:f4:8b:ad:
         a0:1d:77:3d:b6:d2:70:7a:bc:07:d2:bf:52:d2:37:86:9a:d7:
         37:95:6b:3b:27:b4:c9:1f:87:da:62:32:f7:fb:92:e9:94:a8:
         68:97:09:66:42:fc:71:01:4f:2d:87:a1:42:c5:96:b1:20:33:
         e4:cb:4f:5d:39:db:ad:cc:ff:f3:ab:8c:87:12:bf:40:51:13:
         ed:aa:46:97:ee:5c:1c:42:bf:ec:e9:c2:54:c5:9b:25:6b:1c:
         cc:66:00:cf:e1:d1:6b:40:02:0e:9a:fa:82:f1:98:5e:18:82:
         01:1c:be:88:57:b0:80:a4:02:c7:2d:56:7e:3c:0e:37:7c:eb:
         a6:09:10:c6:2d:61:73:0b:e3:12:d1:8c:af:56:f0:4e:11:e8:
         aa:2a:ab:7b:72:14:6f:61:04:14:1b:87:6d:b8:bb:64:05:34:
         87:69:f2:c0:62:b5:95:c3:ed:00:0c:ed:aa:36:f1:d3:15:df:
         b0:52:d7:6e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3CmuEgrvRFF5xdH4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjU1MDZjNjgtNjExZi00NmVkLTllNzgtMzZkYTM5Zjhl
ZTdkMB4XDTI2MDUwODAxMDAyNFoXDTI2MDgwNjAxMDAyNFowLzEtMCsGA1UEAxMk
ZGFjOTZiZmEtZTE0Ny00NWI5LTljZjUtOGRkMDJkNDdjMTQ3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmmCRt1vEvfhqeLbijR/nL50uXtoOE47+Zrlz
XlSnCvkQ6FkloketEhbs6qEtDtAhrOyJT25MMzu7SX2x+M/pab7nNgvWjrUIfDlp
yNTULpfQnYxNMh2jMeDI93Kk4wYO3BOoiMtjJLxW28TMtUM5ZXANHV6I5fHxUT+B
bvXRXNKmeizq04l/Asv++rwbikOmaLtJUf8ls8pVXZBWTJkcvvs1Qqcc6Mc4LqjW
pRtdo6ZXjKDOVW1sk5Tkz5benfr0h1gWqsQ4U5FkJAHszrYiP6acVKAvKACfj6Y7
MogHL/8skfEhNog+BJLB9IpurSOr8Kq2oxEXL7qYPhtcttDzjQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBNODzrO61p0lXMkKm1JffHgyXgHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NTUw
NmM2OC02MTFmLTQ2ZWQtOWU3OC0zNmRhMzlmOGVlN2QvNGNjNWY3ODUtY2RlMS0z
MWM4LWE1ZGEtMWUxNWMyNWQwMWYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjU1MDZjNjgtNjExZi00NmVkLTll
NzgtMzZkYTM5ZjhlZTdkLzY1NTA2YzY4LTYxMWYtNDZlZC05ZTc4LTM2ZGEzOWY4
ZWU3ZC5jcmwwHwYDVR0jBBgwFoAUZEZbboyKetm4+mOnYbot8PWcNjEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy82NTUwNmM2OC02MTFmLTQ2ZWQtOWU3OC0zNmRh
MzlmOGVlN2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGGDUAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEYMApqyH3fA6SyNDXE1zJTweAQtYT7AKB5KYglTVFTxHQcnNB/FZVn8
mJn2p9Forntp2bmmzPQCuBRXz1vUsWYxizHn3PSLraAddz220nB6vAfSv1LSN4aa
1zeVazsntMkfh9piMvf7kumUqGiXCWZC/HEBTy2HoULFlrEgM+TLT105263M//Or
jIcSv0BRE+2qRpfuXBxCv+zpwlTFmyVrHMxmAM/h0WtAAg6a+oLxmF4YggEcvohX
sICkAsctVn48Djd866YJEMYtYXML4xLRjK9W8E4R6Koqq3tyFG9hBBQbh224u2QF
NIdp8sBitZXD7QAM7ao28dMV37BS124=
-----END CERTIFICATE-----
Generated at Wed May 13 14:01:37 2026 by rpki-client