Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/4cc5f785-cde1-31c8-a5da-1e15c25d01f1.roa
File:                     4cc5f785-cde1-31c8-a5da-1e15c25d01f1.roa (raw, json)
Hash identifier:          qVsiNq0CR7vOGm3RijTx15j+Nod+rDXIWmcIutckoFI=
Subject key identifier:   05:2F:99:35:AD:92:83:13:1D:E2:E5:29:8A:19:88:5D:A7:DE:F6:37
Certificate issuer:       /CN=65506c68-611f-46ed-9e78-36da39f8ee7d
Certificate serial:       010D0C9F4328584B21CC16F74739054C339DB920
Authority key identifier: 64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/4cc5f785-cde1-31c8-a5da-1e15c25d01f1.roa
Signing time:             Tue 09 Sep 2025 01:00:33 +0000
ROA not before:           Tue 09 Sep 2025 01:00:33 +0000
ROA not after:            Mon 08 Dec 2025 02:00:33 +0000
asID:                     5769
IP address blocks:        24.53.0.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 19 Sep 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:21:cc:16:f7:47:39:05:4c:33:9d:b9:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65506c68-611f-46ed-9e78-36da39f8ee7d
        Validity
            Not Before: Sep  9 01:00:33 2025 GMT
            Not After : Dec  8 02:00:33 2025 GMT
        Subject: CN=ad4fa398-0cc6-4b9b-a6a3-9101ab221f4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:ec:68:fd:9d:07:c9:ef:03:48:ad:42:68:dc:
                    d0:9e:d1:be:d8:32:84:c4:72:15:82:d2:e2:06:15:
                    52:b1:1b:af:f0:ec:7f:1e:06:9c:f1:6a:ef:bf:91:
                    1d:5d:6a:8f:36:eb:a9:e9:53:a6:9c:c4:b9:c1:4d:
                    da:ec:9b:1d:9d:ba:6f:b0:3e:cd:01:9a:9e:e3:e8:
                    86:8c:e3:35:f4:54:54:94:39:25:52:e2:29:b6:42:
                    de:26:65:ea:4d:42:8c:b7:37:9f:eb:2e:7c:c9:99:
                    0c:c2:f9:cf:30:a3:28:e2:d2:36:77:ca:b0:e3:41:
                    e9:5a:47:a2:c0:68:5d:a0:36:70:06:dd:59:0b:d7:
                    6b:ed:88:8e:55:00:9d:2e:eb:f6:f2:5d:3b:16:96:
                    ac:a7:0b:cc:d7:10:92:b0:f4:b1:03:01:92:c9:e4:
                    79:f6:94:54:26:4c:eb:89:3d:a1:d5:c1:70:88:d7:
                    df:37:a8:9e:f6:b7:3f:3f:2a:d6:d7:f3:51:f4:f6:
                    04:ec:66:0c:2a:2a:75:d3:cd:eb:1c:ef:a5:f2:0e:
                    51:b3:40:d5:4d:57:7d:81:cb:cb:08:71:b8:c7:36:
                    3d:36:e5:b9:95:96:5c:02:c1:34:0b:bf:35:59:aa:
                    91:a5:ca:89:36:7f:bb:54:9f:b8:58:46:07:bc:ad:
                    09:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:2F:99:35:AD:92:83:13:1D:E2:E5:29:8A:19:88:5D:A7:DE:F6:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/4cc5f785-cde1-31c8-a5da-1e15c25d01f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl

            X509v3 Authority Key Identifier:
                keyid:64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.53.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:0f:54:06:b0:c0:08:f4:aa:e7:c1:5c:ba:ba:a3:39:20:8e:
         6e:e0:db:6c:ae:9f:13:a2:b4:02:e5:c0:c6:0f:c2:7a:7a:c3:
         80:11:e7:46:ea:95:2c:2d:81:aa:20:92:b4:98:7a:36:42:7f:
         9e:c2:49:72:be:e2:55:43:fe:f9:a7:a3:8b:76:95:8e:52:c6:
         46:20:08:6e:da:22:2e:3d:b0:8e:58:b4:32:c6:55:08:e9:6b:
         b7:49:8c:c2:50:49:ff:44:ae:ee:bb:30:90:f2:c3:e0:30:ef:
         af:b1:d2:9e:e5:96:1e:37:67:96:a9:69:bb:5e:11:ee:92:04:
         87:42:61:c0:1b:84:35:eb:41:b7:46:6f:b5:39:74:93:2f:d9:
         49:49:6c:f6:4e:be:d1:f5:8e:a7:b9:a5:02:50:da:90:77:d8:
         6c:6f:e8:16:a7:fa:82:90:fb:aa:3e:79:18:6a:c7:66:0c:b4:
         d0:f6:59:89:31:3e:79:d3:04:cf:d9:63:fc:91:cd:17:13:d8:
         25:3b:07:2d:8c:6f:78:13:f6:9c:ef:85:fb:44:81:ab:2e:ce:
         e8:ff:fe:f5:2f:7f:66:53:c5:07:25:31:64:6a:79:d9:c3:12:
         12:3a:a0:d7:91:16:ff:55:b4:a8:27:a9:53:47:92:ee:f5:82:
         9f:da:09:48
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEshzBb3RzkFTDOduSAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjU1MDZjNjgtNjExZi00NmVkLTllNzgtMzZkYTM5Zjhl
ZTdkMB4XDTI1MDkwOTAxMDAzM1oXDTI1MTIwODAyMDAzM1owLzEtMCsGA1UEAxMk
YWQ0ZmEzOTgtMGNjNi00YjliLWE2YTMtOTEwMWFiMjIxZjRmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi+xo/Z0Hye8DSK1CaNzQntG+2DKExHIVgtLi
BhVSsRuv8Ox/Hgac8Wrvv5EdXWqPNuup6VOmnMS5wU3a7JsdnbpvsD7NAZqe4+iG
jOM19FRUlDklUuIptkLeJmXqTUKMtzef6y58yZkMwvnPMKMo4tI2d8qw40HpWkei
wGhdoDZwBt1ZC9dr7YiOVQCdLuv28l07FpaspwvM1xCSsPSxAwGSyeR59pRUJkzr
iT2h1cFwiNffN6ie9rc/PyrW1/NR9PYE7GYMKip1083rHO+l8g5Rs0DVTVd9gcvL
CHG4xzY9NuW5lZZcAsE0C781WaqRpcqJNn+7VJ+4WEYHvK0JgwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAUvmTWtkoMTHeLlKYoZiF2n3vY3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NTUw
NmM2OC02MTFmLTQ2ZWQtOWU3OC0zNmRhMzlmOGVlN2QvNGNjNWY3ODUtY2RlMS0z
MWM4LWE1ZGEtMWUxNWMyNWQwMWYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjU1MDZjNjgtNjExZi00NmVkLTll
NzgtMzZkYTM5ZjhlZTdkLzY1NTA2YzY4LTYxMWYtNDZlZC05ZTc4LTM2ZGEzOWY4
ZWU3ZC5jcmwwHwYDVR0jBBgwFoAUZEZbboyKetm4+mOnYbot8PWcNjEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy82NTUwNmM2OC02MTFmLTQ2ZWQtOWU3OC0zNmRh
MzlmOGVlN2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGGDUAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGgPVAawwAj0qufBXLq6ozkgjm7g22yunxOitALlwMYPwnp6w4AR50bq
lSwtgaogkrSYejZCf57CSXK+4lVD/vmno4t2lY5SxkYgCG7aIi49sI5YtDLGVQjp
a7dJjMJQSf9Eru67MJDyw+Aw76+x0p7llh43Z5apabteEe6SBIdCYcAbhDXrQbdG
b7U5dJMv2UlJbPZOvtH1jqe5pQJQ2pB32Gxv6Ban+oKQ+6o+eRhqx2YMtND2WYkx
PnnTBM/ZY/yRzRcT2CU7By2Mb3gT9pzvhftEgasuzuj//vUvf2ZTxQclMWRqednD
EhI6oNeRFv9VtKgnqVNHku71gp/aCUg=
-----END CERTIFICATE-----
Generated at Thu Sep 18 05:44:20 2025 by rpki-client