Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/1510a2ec-05f4-332e-b043-9ce52f53b418.roa
File:                     1510a2ec-05f4-332e-b043-9ce52f53b418.roa (raw, json)
Hash identifier:          1Wor+vqmI2dn0+ibWdRBhk9QQPPn+n3Tds/wzqM/Guw=
Subject key identifier:   11:EC:5A:39:3B:16:13:31:87:6D:91:07:DE:57:6C:3F:85:2B:B1:C4
Certificate issuer:       /CN=0538ef3c-e342-4e27-a075-8167bc73c054
Certificate serial:       010D0C9F4328584AE8912E831C551CE945737800
Authority key identifier: 3D:AC:2D:38:4E:48:06:E1:5D:2B:A3:84:D6:1D:D6:10:85:CE:33:82
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/1510a2ec-05f4-332e-b043-9ce52f53b418.roa
Signing time:             Tue 19 Aug 2025 13:00:40 +0000
ROA not before:           Tue 19 Aug 2025 13:00:40 +0000
ROA not after:            Mon 17 Nov 2025 14:00:40 +0000
asID:                     11260
IP address blocks:        24.231.64.0/19 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/0538ef3c-e342-4e27-a075-8167bc73c054.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/0538ef3c-e342-4e27-a075-8167bc73c054.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e8:91:2e:83:1c:55:1c:e9:45:73:78:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0538ef3c-e342-4e27-a075-8167bc73c054
        Validity
            Not Before: Aug 19 13:00:40 2025 GMT
            Not After : Nov 17 14:00:40 2025 GMT
        Subject: CN=8d3a245b-a1c6-4b04-8407-9f3094ab0e0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:66:d7:e7:f5:e9:07:ee:04:65:6b:bd:07:05:
                    f4:68:71:86:bc:26:54:e8:79:1e:f3:6d:1b:ae:9a:
                    18:6a:83:12:df:ee:cf:20:10:c5:2a:77:42:b4:1b:
                    67:36:a3:ff:17:28:44:e3:d9:63:34:3f:d9:02:04:
                    bd:c9:a3:f8:fc:7d:7c:94:c5:d5:4f:5a:dc:4f:dc:
                    7e:79:d2:cc:e3:5a:88:6e:d8:bc:c9:bb:9e:a8:96:
                    00:d9:fb:37:10:e5:ae:de:96:e7:f3:b7:30:cd:cd:
                    cb:20:32:10:bc:ee:8b:5c:ec:c5:53:8c:32:4c:26:
                    a0:36:0d:ed:15:6e:54:5e:a8:a0:2b:4b:4d:e5:7f:
                    da:e4:ea:1c:f0:bf:51:17:6a:2d:e1:c6:3f:3d:a5:
                    dd:e5:92:6a:21:ac:f1:8a:30:c1:fb:a1:0f:ba:58:
                    c2:00:fe:41:27:57:5a:5f:16:6e:66:77:19:6e:06:
                    7e:23:b5:ef:d3:95:32:7c:56:83:7f:a4:d3:67:9a:
                    79:5e:ca:c3:c0:98:ac:76:e2:e0:33:ce:86:30:e2:
                    f4:02:10:18:e4:3c:0b:ff:70:d5:a9:a2:de:cc:b0:
                    61:2a:5e:18:29:c7:ca:4e:b3:4d:21:5c:67:40:a4:
                    b3:31:89:67:a1:7f:32:ca:a6:73:46:23:1e:91:0a:
                    62:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:EC:5A:39:3B:16:13:31:87:6D:91:07:DE:57:6C:3F:85:2B:B1:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/1510a2ec-05f4-332e-b043-9ce52f53b418.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/0538ef3c-e342-4e27-a075-8167bc73c054.crl

            X509v3 Authority Key Identifier:
                keyid:3D:AC:2D:38:4E:48:06:E1:5D:2B:A3:84:D6:1D:D6:10:85:CE:33:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.231.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:30:96:62:3f:5d:ea:91:82:e1:66:02:f1:3b:4a:1b:fe:e9:
         d7:7b:cb:72:a3:6a:a6:84:48:55:97:67:64:9a:b4:04:df:13:
         83:ca:4d:19:6c:37:0a:3c:7f:e7:20:7b:54:fc:44:a6:b7:56:
         90:e6:5e:96:4e:19:19:91:78:f2:54:85:c1:e9:63:79:6e:a0:
         36:7c:34:79:c2:a2:ef:e9:24:53:47:a6:9b:c4:69:f2:31:03:
         73:02:fc:e2:f2:bd:1b:12:2c:04:b0:c3:fe:77:8d:20:8d:d1:
         5c:60:cf:fd:49:e5:fe:0f:d6:e5:c4:d2:e3:d7:a7:61:ad:8a:
         a6:b2:57:78:09:39:79:2e:d3:61:fa:a0:93:cb:47:fc:28:22:
         73:ae:02:dc:5a:a9:c1:a1:17:84:66:f1:31:dc:60:70:82:81:
         7c:20:c5:ed:da:57:7a:ca:bd:8d:a7:b8:0a:ba:a1:18:23:da:
         c4:42:02:3d:c3:ce:54:37:64:d3:9c:cb:e6:c4:84:83:82:70:
         09:b9:3e:82:c0:16:ea:40:23:bd:9d:6d:dd:e3:0e:f3:61:ed:
         e1:ef:c6:19:99:87:32:2f:f5:6c:a9:c6:1c:e8:58:c9:76:2f:
         63:ae:92:3a:fe:d6:11:b2:cb:ae:f9:02:4a:db:42:72:ca:83:
         97:9a:e9:26
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErokS6DHFUc6UVzeAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDUzOGVmM2MtZTM0Mi00ZTI3LWEwNzUtODE2N2JjNzNj
MDU0MB4XDTI1MDgxOTEzMDA0MFoXDTI1MTExNzE0MDA0MFowLzEtMCsGA1UEAxMk
OGQzYTI0NWItYTFjNi00YjA0LTg0MDctOWYzMDk0YWIwZTBjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtGbX5/XpB+4EZWu9BwX0aHGGvCZU6Hke820b
rpoYaoMS3+7PIBDFKndCtBtnNqP/FyhE49ljND/ZAgS9yaP4/H18lMXVT1rcT9x+
edLM41qIbti8ybueqJYA2fs3EOWu3pbn87cwzc3LIDIQvO6LXOzFU4wyTCagNg3t
FW5UXqigK0tN5X/a5Ooc8L9RF2ot4cY/PaXd5ZJqIazxijDB+6EPuljCAP5BJ1da
XxZuZncZbgZ+I7Xv05UyfFaDf6TTZ5p5XsrDwJisduLgM86GMOL0AhAY5DwL/3DV
qaLezLBhKl4YKcfKTrNNIVxnQKSzMYlnoX8yyqZzRiMekQpicwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBHsWjk7FhMxh22RB95XbD+FK7HEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wNTM4
ZWYzYy1lMzQyLTRlMjctYTA3NS04MTY3YmM3M2MwNTQvMTUxMGEyZWMtMDVmNC0z
MzJlLWIwNDMtOWNlNTJmNTNiNDE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDUzOGVmM2MtZTM0Mi00ZTI3LWEw
NzUtODE2N2JjNzNjMDU0LzA1MzhlZjNjLWUzNDItNGUyNy1hMDc1LTgxNjdiYzcz
YzA1NC5jcmwwHwYDVR0jBBgwFoAUPawtOE5IBuFdK6OE1h3WEIXOM4IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8wNTM4ZWYzYy1lMzQyLTRlMjctYTA3NS04MTY3
YmM3M2MwNTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFGOdAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGgwlmI/XeqRguFmAvE7Shv+6dd7y3KjaqaESFWXZ2SatATfE4PKTRls
Nwo8f+cge1T8RKa3VpDmXpZOGRmRePJUhcHpY3luoDZ8NHnCou/pJFNHppvEafIx
A3MC/OLyvRsSLASww/53jSCN0Vxgz/1J5f4P1uXE0uPXp2GtiqayV3gJOXku02H6
oJPLR/woInOuAtxaqcGhF4Rm8THcYHCCgXwgxe3aV3rKvY2nuAq6oRgj2sRCAj3D
zlQ3ZNOcy+bEhIOCcAm5PoLAFupAI72dbd3jDvNh7eHvxhmZhzIv9WypxhzoWMl2
L2Oukjr+1hGyy675AkrbQnLKg5ea6SY=
-----END CERTIFICATE-----
Generated at Sun Aug 24 02:53:59 2025 by rpki-client