Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/54bb08b7-3249-3fec-a690-b55237782491.roa
File:                     54bb08b7-3249-3fec-a690-b55237782491.roa (raw, json)
Hash identifier:          mviIbldOFz3NwtMbAL4WbxTNkHPSAP81WoeSjQGIrHs=
Subject key identifier:   24:32:BE:26:57:1C:32:8E:0E:16:0C:A5:1F:84:C8:EA:BF:D3:69:9D
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584B821D8DE0C5AAB32734516480
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/54bb08b7-3249-3fec-a690-b55237782491.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     10796
IP address blocks:        24.208.64.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1d:8d:e0:c5:aa:b3:27:34:51:64:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=cb36eb9a-e4fc-4fc7-b1d4-3ac24d5d5b99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:4e:0b:b0:f9:f6:dc:34:d3:60:fb:a1:13:4b:
                    68:d2:fc:b9:cf:7d:b4:97:03:67:f1:5b:11:39:74:
                    25:ae:4f:56:4b:58:27:f4:fc:ba:ef:18:20:47:a9:
                    8d:c0:18:77:e5:df:a1:ee:a7:68:31:59:3e:01:3b:
                    22:d5:8e:76:50:84:ea:b3:07:bb:7e:67:c5:30:78:
                    d4:8c:c7:29:18:23:b9:61:80:ba:fc:c0:b2:d0:11:
                    48:2c:e6:08:74:04:c7:8d:a5:a8:67:30:9a:6f:62:
                    84:6c:07:08:bf:65:f9:98:6a:be:fd:c1:68:00:a8:
                    88:eb:8f:21:34:94:8a:4d:f3:a8:bd:95:4a:53:4d:
                    a4:11:69:99:19:8d:cc:37:a2:cd:17:98:a2:23:f7:
                    22:7e:46:cf:cd:7e:8f:21:c5:5f:a2:c0:5c:7a:e7:
                    43:11:4c:f9:95:a4:03:b5:0e:df:3f:4f:24:3a:cd:
                    8b:20:45:ff:2e:7c:7d:07:58:06:55:6d:dd:67:0b:
                    79:7e:32:8f:68:6d:a5:85:dc:aa:b4:67:0d:16:0b:
                    a3:03:e0:0b:1f:44:d2:36:9b:c1:37:a4:6e:6d:d8:
                    5d:4a:cc:ff:25:da:28:53:13:16:b6:11:3b:5b:b8:
                    37:66:b3:88:2c:a9:e5:1b:93:60:be:97:71:dd:3f:
                    97:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:32:BE:26:57:1C:32:8E:0E:16:0C:A5:1F:84:C8:EA:BF:D3:69:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/54bb08b7-3249-3fec-a690-b55237782491.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.208.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:e8:8a:70:aa:19:44:5c:1e:12:2e:2a:07:b0:db:29:c2:65:
         2a:ba:88:44:47:e7:54:6e:dd:53:01:9f:d1:9e:ca:ff:8e:74:
         09:07:57:85:10:38:40:2e:69:48:90:10:5c:d5:fe:65:82:6f:
         f9:27:4a:23:ef:ff:ea:16:02:99:7c:95:3e:9c:36:fc:c1:96:
         8e:01:24:85:29:e5:a6:a1:be:d2:73:36:17:32:df:35:91:93:
         08:d3:c5:5a:48:3e:28:35:80:ae:fa:67:e1:67:e3:71:81:15:
         be:48:cd:eb:0f:17:db:d0:e5:f2:51:21:39:ab:48:9f:e5:08:
         0f:51:a0:25:3b:74:aa:0b:2e:ef:6a:66:6e:3e:0b:70:69:64:
         5d:ca:1c:7f:00:dc:5d:67:d9:ad:a3:45:22:c8:f5:62:52:63:
         88:ec:5c:79:8d:d4:a8:e6:63:12:ba:1e:91:e9:df:30:c0:9b:
         93:bb:64:92:6d:e7:14:1a:c5:2f:cc:64:47:f6:bd:f7:6b:b0:
         cd:da:b2:4f:7f:a3:55:fe:35:c6:c7:d8:a0:4d:97:77:c6:8f:
         dc:e7:da:39:76:ca:11:55:72:a7:70:db:04:99:61:db:cf:41:
         1a:29:9d:0f:d5:0e:5f:c7:fd:39:f5:8e:4a:9b:b6:49:c3:32:
         aa:e2:3d:a1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuCHY3gxaqzJzRRZIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk
Y2IzNmViOWEtZTRmYy00ZmM3LWIxZDQtM2FjMjRkNWQ1Yjk5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlE4LsPn23DTTYPuhE0to0vy5z320lwNn8VsR
OXQlrk9WS1gn9Py67xggR6mNwBh35d+h7qdoMVk+ATsi1Y52UITqswe7fmfFMHjU
jMcpGCO5YYC6/MCy0BFILOYIdATHjaWoZzCab2KEbAcIv2X5mGq+/cFoAKiI648h
NJSKTfOovZVKU02kEWmZGY3MN6LNF5iiI/cifkbPzX6PIcVfosBceudDEUz5laQD
tQ7fP08kOs2LIEX/Lnx9B1gGVW3dZwt5fjKPaG2lhdyqtGcNFgujA+ALH0TSNpvB
N6RubdhdSsz/JdooUxMWthE7W7g3ZrOILKnlG5Ngvpdx3T+XtwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCQyviZXHDKODhYMpR+EyOq/02mdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvNTRiYjA4YjctMzI0OS0z
ZmVjLWE2OTAtYjU1MjM3NzgyNDkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFGNBAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAroinCqGURcHhIuKgew2ynCZSq6iERH51Ru3VMBn9Geyv+OdAkHV4UQ
OEAuaUiQEFzV/mWCb/knSiPv/+oWApl8lT6cNvzBlo4BJIUp5aahvtJzNhcy3zWR
kwjTxVpIPig1gK76Z+Fn43GBFb5IzesPF9vQ5fJRITmrSJ/lCA9RoCU7dKoLLu9q
Zm4+C3BpZF3KHH8A3F1n2a2jRSLI9WJSY4jsXHmN1KjmYxK6HpHp3zDAm5O7ZJJt
5xQaxS/MZEf2vfdrsM3ask9/o1X+NcbH2KBNl3fGj9zn2jl2yhFVcqdw2wSZYdvP
QRopnQ/VDl/H/Tn1jkqbtknDMqriPaE=
-----END CERTIFICATE-----
Generated at Mon Oct 20 04:24:09 2025 by rpki-client