Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/d068f27f-3874-3a93-9826-da4ac06de565.roa
File:                     d068f27f-3874-3a93-9826-da4ac06de565.roa (raw, json)
Hash identifier:          dXasdHa8xxI/sc4HwGEwJld69u+4nRcH+0lVdttRlDo=
Subject key identifier:   55:16:D4:2E:C7:C2:C9:46:CB:C8:4C:29:DD:CC:B3:59:8B:C7:35:40
Certificate issuer:       /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44
Certificate serial:       010D0C9F4328584AEDDAB52977BCAA967C026AC0
Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/d068f27f-3874-3a93-9826-da4ac06de565.roa
Signing time:             Thu 21 Aug 2025 10:28:01 +0000
ROA not before:           Thu 21 Aug 2025 10:28:01 +0000
ROA not after:            Wed 19 Nov 2025 11:28:01 +0000
asID:                     31898
IP address blocks:        150.230.64.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ed:da:b5:29:77:bc:aa:96:7c:02:6a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44
        Validity
            Not Before: Aug 21 10:28:01 2025 GMT
            Not After : Nov 19 11:28:01 2025 GMT
        Subject: CN=a15049ee-c231-456a-844a-6f73763a93f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:bd:73:2c:3c:cf:de:e9:e2:f8:c0:63:3d:77:
                    5a:f4:f0:6e:50:6b:cd:47:8c:a5:d8:0f:aa:b5:9e:
                    34:70:08:bc:51:cc:09:1a:32:09:2c:15:a6:5c:8c:
                    ed:1c:b2:e7:04:c2:df:43:df:28:6a:c9:b5:9b:22:
                    3f:cd:af:42:66:3b:80:33:37:2b:3d:47:74:c7:2d:
                    65:ff:ff:4f:ae:b8:52:ae:ba:f6:2a:49:cc:c8:9d:
                    d5:0f:13:b0:62:a2:37:78:f7:5e:72:62:03:91:2f:
                    7f:55:98:de:cf:92:6d:db:7e:2d:b6:87:6c:f7:85:
                    6b:34:bb:9e:36:a6:0f:bf:f3:6d:4c:a1:d6:ea:61:
                    07:cd:26:a7:3a:2e:f6:10:ed:76:b5:51:65:10:d0:
                    71:6d:ab:8e:37:27:ef:ac:d5:2e:1c:e5:fd:47:fd:
                    3a:16:93:22:4a:ba:10:70:3f:98:e9:6f:05:8c:fe:
                    5b:a3:1f:e3:21:70:7a:51:b1:f4:d2:b4:50:1d:4e:
                    d3:03:98:72:46:58:6d:ee:f3:9d:aa:a6:11:d0:41:
                    90:e9:2b:71:2e:02:5e:70:87:05:86:94:03:fd:b8:
                    92:98:ec:e2:4d:45:b0:79:47:ec:9a:04:2e:83:c1:
                    fd:52:d9:d5:c9:a3:a4:84:c4:06:3f:11:5a:57:36:
                    6b:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:16:D4:2E:C7:C2:C9:46:CB:C8:4C:29:DD:CC:B3:59:8B:C7:35:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/d068f27f-3874-3a93-9826-da4ac06de565.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl

            X509v3 Authority Key Identifier:
                keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.230.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:11:c0:2c:6c:02:37:e7:2b:55:bd:83:73:54:29:30:b2:2e:
         4b:46:5d:8d:f4:7f:3c:c4:93:7e:ba:dd:97:0c:26:71:a6:d6:
         11:07:f3:0c:fc:9e:31:c4:67:7d:13:b0:23:a4:0b:17:92:90:
         82:ca:f8:8c:2f:47:31:70:29:cf:3a:85:c0:7d:00:bb:02:43:
         05:90:74:b8:d6:6c:b9:82:30:3f:5c:ab:58:e0:08:48:b7:b4:
         97:86:49:38:48:b5:fb:87:03:16:8b:d5:e1:c0:13:bd:8b:84:
         df:f3:01:16:a1:aa:d4:89:2a:3d:5b:20:d5:37:65:29:5e:5c:
         f6:2e:05:83:d5:09:97:2a:2b:bf:2c:aa:de:67:0d:35:64:f8:
         24:66:c1:74:e0:9b:a4:cf:83:f1:cd:87:ce:18:a1:d2:e6:b8:
         9c:e2:e4:b9:6e:df:90:2d:2f:34:ae:40:eb:9b:34:52:c1:c2:
         32:54:aa:6b:40:46:90:7f:4e:4a:9a:ec:c3:dd:39:13:03:29:
         19:06:f0:38:9e:23:7d:4b:52:4d:70:37:73:a8:96:46:dc:07:
         61:43:79:c3:7c:f8:98:19:83:fe:fa:51:66:77:36:67:3e:94:
         e1:c7:b4:ca:9e:58:81:02:81:10:06:5d:f2:5f:25:51:06:d1:
         93:17:80:9f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErt2rUpd7yqlnwCasAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy
ZTQ0MB4XDTI1MDgyMTEwMjgwMVoXDTI1MTExOTExMjgwMVowLzEtMCsGA1UEAxMk
YTE1MDQ5ZWUtYzIzMS00NTZhLTg0NGEtNmY3Mzc2M2E5M2Y0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqL1zLDzP3uni+MBjPXda9PBuUGvNR4yl2A+q
tZ40cAi8UcwJGjIJLBWmXIztHLLnBMLfQ98oasm1myI/za9CZjuAMzcrPUd0xy1l
//9PrrhSrrr2KknMyJ3VDxOwYqI3ePdecmIDkS9/VZjez5Jt234ttods94VrNLue
NqYPv/NtTKHW6mEHzSanOi72EO12tVFlENBxbauONyfvrNUuHOX9R/06FpMiSroQ
cD+Y6W8FjP5box/jIXB6UbH00rRQHU7TA5hyRlht7vOdqqYR0EGQ6StxLgJecIcF
hpQD/biSmOziTUWweUfsmgQug8H9UtnVyaOkhMQGPxFaVzZrTwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFUW1C7HwslGy8hMKd3Ms1mLxzVAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0
MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvZDA2OGYyN2YtMzg3NC0z
YTkzLTk4MjYtZGE0YWMwNmRlNTY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx
MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj
MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1
MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFluZAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAERwCxsAjfnK1W9g3NUKTCyLktGXY30fzzEk3663ZcMJnGm1hEH8wz8
njHEZ30TsCOkCxeSkILK+IwvRzFwKc86hcB9ALsCQwWQdLjWbLmCMD9cq1jgCEi3
tJeGSThItfuHAxaL1eHAE72LhN/zARahqtSJKj1bINU3ZSleXPYuBYPVCZcqK78s
qt5nDTVk+CRmwXTgm6TPg/HNh84YodLmuJzi5Llu35AtLzSuQOubNFLBwjJUqmtA
RpB/Tkqa7MPdORMDKRkG8DieI31LUk1wN3OolkbcB2FDecN8+JgZg/76UWZ3Nmc+
lOHHtMqeWIECgRAGXfJfJVEG0ZMXgJ8=
-----END CERTIFICATE-----
Generated at Sat Aug 23 18:39:27 2025 by rpki-client