Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1040c089-26bf-4af5-9c25-bcef963829d2/b60f6871-bf1e-313d-a518-8618b46d517a.roa
File:                     b60f6871-bf1e-313d-a518-8618b46d517a.roa (raw, json)
Hash identifier:          lm9UX/WSF+kYxYXjqhw2+nRE4FgYPgaRsU6R1SAaRVU=
Subject key identifier:   E4:2E:0C:0E:36:D3:75:7F:66:54:86:62:9F:92:26:F9:94:F9:94:7C
Certificate issuer:       /CN=1040c089-26bf-4af5-9c25-bcef963829d2
Certificate serial:       010D0C9F43285849DF5A67908ED5EDA859EE9E80
Authority key identifier: 20:DD:EC:4A:B6:08:24:0A:53:F2:07:C7:47:62:F0:32:CC:8F:8C:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1040c089-26bf-4af5-9c25-bcef963829d2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1040c089-26bf-4af5-9c25-bcef963829d2/b60f6871-bf1e-313d-a518-8618b46d517a.roa
Signing time:             Fri 16 May 2025 13:00:59 +0000
ROA not before:           Fri 16 May 2025 13:00:59 +0000
ROA not after:            Thu 14 Aug 2025 13:00:59 +0000
asID:                     32704
IP address blocks:        198.38.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1040c089-26bf-4af5-9c25-bcef963829d2/1040c089-26bf-4af5-9c25-bcef963829d2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1040c089-26bf-4af5-9c25-bcef963829d2/1040c089-26bf-4af5-9c25-bcef963829d2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1040c089-26bf-4af5-9c25-bcef963829d2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:df:5a:67:90:8e:d5:ed:a8:59:ee:9e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1040c089-26bf-4af5-9c25-bcef963829d2
        Validity
            Not Before: May 16 13:00:59 2025 GMT
            Not After : Aug 14 13:00:59 2025 GMT
        Subject: CN=0554b309-b27f-4bc1-a107-96fbb0b4dd2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:1a:06:81:62:bc:4d:a5:15:49:c3:b2:f0:d0:
                    3d:60:0f:38:ba:8f:f9:f1:95:34:09:25:8f:72:df:
                    97:f5:02:9a:d8:c9:99:bc:e5:f2:92:0a:3d:58:14:
                    a5:08:3c:59:34:f6:64:47:12:25:f2:70:ef:96:88:
                    88:1b:0f:ee:0b:d9:c9:f0:57:07:c4:f2:8f:be:d9:
                    23:6b:f0:9d:98:b9:8d:9c:2f:b1:23:08:96:be:39:
                    fe:9c:70:d9:33:9a:68:0f:b6:bc:aa:a6:36:58:37:
                    a8:15:ee:52:d0:91:bc:c1:dd:16:1c:2a:b3:1a:b8:
                    ce:a3:91:fa:fc:ae:bb:55:f5:06:d4:eb:a9:0f:11:
                    f2:78:15:aa:b3:2e:4b:f4:9c:47:d7:95:66:c7:67:
                    af:b4:5e:8b:aa:d2:57:fa:d1:7d:71:f5:4d:65:c2:
                    20:f6:6d:49:81:d6:a2:c0:c1:f5:b1:c5:be:8f:1b:
                    7c:69:94:3a:ba:b3:05:28:e2:f7:cb:1a:6e:80:b0:
                    0e:41:52:f4:09:24:bd:69:76:12:db:5d:80:8b:3b:
                    6a:be:f2:ed:da:03:e3:0e:70:f7:a6:d9:ab:57:70:
                    11:64:f8:d7:70:26:00:29:41:0e:b3:04:2a:0a:9d:
                    38:7c:c0:91:2f:52:1c:7f:82:5f:a1:8b:80:cf:c5:
                    2a:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:2E:0C:0E:36:D3:75:7F:66:54:86:62:9F:92:26:F9:94:F9:94:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1040c089-26bf-4af5-9c25-bcef963829d2/b60f6871-bf1e-313d-a518-8618b46d517a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1040c089-26bf-4af5-9c25-bcef963829d2/1040c089-26bf-4af5-9c25-bcef963829d2.crl

            X509v3 Authority Key Identifier:
                keyid:20:DD:EC:4A:B6:08:24:0A:53:F2:07:C7:47:62:F0:32:CC:8F:8C:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1040c089-26bf-4af5-9c25-bcef963829d2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.38.13.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:b4:89:24:b9:d5:d5:9f:57:59:2d:3c:c9:07:b3:63:be:c0:
         64:c3:34:ff:dc:1f:75:89:31:d0:1b:91:c7:50:c7:31:a4:5f:
         7e:8a:48:e1:d4:41:1d:05:dd:92:4a:09:2f:52:2d:85:21:3d:
         9e:3e:ee:43:e5:6b:5a:66:bd:60:2a:a9:16:5d:61:52:e2:4e:
         8d:1c:54:2c:bf:26:ed:1b:67:78:5a:d9:df:3c:45:89:8a:c9:
         a9:16:b1:a1:6b:b2:78:f2:72:30:93:9a:c1:0e:0b:37:6c:df:
         b5:5d:81:b6:2d:1f:f0:4a:74:db:84:ca:18:df:38:9f:e3:cd:
         04:04:2f:f1:6c:18:e5:64:f2:06:fe:a6:58:e7:7e:87:37:4f:
         d2:59:27:90:54:49:ef:30:4c:13:04:9e:31:69:da:71:d3:ed:
         a3:6c:d9:50:6a:90:2f:06:8a:86:f7:52:0e:a1:78:7b:2d:a0:
         34:e6:52:7e:2e:37:bb:e0:bf:04:2b:ce:43:52:da:d9:23:98:
         2c:18:2e:97:00:7e:e9:a0:d4:62:28:58:da:6b:a0:c3:0f:39:
         d7:97:5b:64:68:c7:c4:6e:f0:b5:18:02:e6:8f:d1:65:8a:4c:
         ac:4d:3e:a7:6a:06:6a:da:ba:cd:25:31:c6:2d:e6:f5:4c:19:
         a7:80:d3:06
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnfWmeQjtXtqFnunoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTA0MGMwODktMjZiZi00YWY1LTljMjUtYmNlZjk2Mzgy
OWQyMB4XDTI1MDUxNjEzMDA1OVoXDTI1MDgxNDEzMDA1OVowLzEtMCsGA1UEAxMk
MDU1NGIzMDktYjI3Zi00YmMxLWExMDctOTZmYmIwYjRkZDJlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnxoGgWK8TaUVScOy8NA9YA84uo/58ZU0CSWP
ct+X9QKa2MmZvOXykgo9WBSlCDxZNPZkRxIl8nDvloiIGw/uC9nJ8FcHxPKPvtkj
a/CdmLmNnC+xIwiWvjn+nHDZM5poD7a8qqY2WDeoFe5S0JG8wd0WHCqzGrjOo5H6
/K67VfUG1OupDxHyeBWqsy5L9JxH15Vmx2evtF6LqtJX+tF9cfVNZcIg9m1Jgdai
wMH1scW+jxt8aZQ6urMFKOL3yxpugLAOQVL0CSS9aXYS212AiztqvvLt2gPjDnD3
ptmrV3ARZPjXcCYAKUEOswQqCp04fMCRL1Icf4JfoYuAz8UqxQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOQuDA4203V/ZlSGYp+SJvmU+ZR8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xMDQw
YzA4OS0yNmJmLTRhZjUtOWMyNS1iY2VmOTYzODI5ZDIvYjYwZjY4NzEtYmYxZS0z
MTNkLWE1MTgtODYxOGI0NmQ1MTdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMTA0MGMwODktMjZiZi00YWY1LTlj
MjUtYmNlZjk2MzgyOWQyLzEwNDBjMDg5LTI2YmYtNGFmNS05YzI1LWJjZWY5NjM4
MjlkMi5jcmwwHwYDVR0jBBgwFoAUIN3sSrYIJApT8gfHR2LwMsyPjG4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8xMDQwYzA4OS0yNmJmLTRhZjUtOWMyNS1iY2Vm
OTYzODI5ZDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxiYNMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGK0iSS51dWfV1ktPMkHs2O+wGTDNP/cH3WJMdAbkcdQxzGkX36KSOHU
QR0F3ZJKCS9SLYUhPZ4+7kPla1pmvWAqqRZdYVLiTo0cVCy/Ju0bZ3ha2d88RYmK
yakWsaFrsnjycjCTmsEOCzds37VdgbYtH/BKdNuEyhjfOJ/jzQQEL/FsGOVk8gb+
pljnfoc3T9JZJ5BUSe8wTBMEnjFp2nHT7aNs2VBqkC8Giob3Ug6heHstoDTmUn4u
N7vgvwQrzkNS2tkjmCwYLpcAfumg1GIoWNproMMPOdeXW2Rox8Ru8LUYAuaP0WWK
TKxNPqdqBmraus0lMcYt5vVMGaeA0wY=
-----END CERTIFICATE-----
Generated at Wed Jul 2 10:45:03 2025 by rpki-client