Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/1510a2ec-05f4-332e-b043-9ce52f53b418.roa
File:                     1510a2ec-05f4-332e-b043-9ce52f53b418.roa (raw, json)
Hash identifier:          eChIbCcDsrIjIRaKhx7Ms37nmz7mpJgqq/0mVV1ADbs=
Subject key identifier:   88:6E:95:29:D8:E3:51:35:FD:28:78:9B:1C:43:61:BA:99:1C:BC:71
Certificate issuer:       /CN=0538ef3c-e342-4e27-a075-8167bc73c054
Certificate serial:       010D0C9F4328584CAA27185014E26B42F5885C50
Authority key identifier: 3D:AC:2D:38:4E:48:06:E1:5D:2B:A3:84:D6:1D:D6:10:85:CE:33:82
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/1510a2ec-05f4-332e-b043-9ce52f53b418.roa
Signing time:             Tue 27 Jan 2026 14:00:36 +0000
ROA not before:           Tue 27 Jan 2026 14:00:36 +0000
ROA not after:            Mon 27 Apr 2026 13:00:36 +0000
asID:                     11260
IP address blocks:        24.231.64.0/19 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/0538ef3c-e342-4e27-a075-8167bc73c054.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/0538ef3c-e342-4e27-a075-8167bc73c054.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Feb 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:aa:27:18:50:14:e2:6b:42:f5:88:5c:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0538ef3c-e342-4e27-a075-8167bc73c054
        Validity
            Not Before: Jan 27 14:00:36 2026 GMT
            Not After : Apr 27 13:00:36 2026 GMT
        Subject: CN=71062245-11b9-4e7e-9a0a-3998933bc636
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:39:c3:70:48:a8:32:42:09:96:49:d2:61:05:
                    1b:9b:46:ae:5a:a4:1a:2c:47:b0:51:ca:9b:5c:3a:
                    e2:56:e0:d0:a2:1f:35:65:70:33:0b:f6:8f:d3:e1:
                    94:fb:07:4b:6e:71:33:72:08:b6:b8:2d:20:56:04:
                    85:18:86:97:3f:51:b8:f3:22:63:7c:09:68:7c:66:
                    02:45:c3:55:97:ce:d7:4c:f5:33:bb:51:5f:a5:55:
                    ed:dd:f9:aa:99:5f:e1:3e:be:32:f2:8f:b1:fd:f6:
                    74:b0:8c:e4:2e:ca:0e:29:27:52:23:b2:ef:b7:32:
                    14:b8:7e:25:8c:96:ff:6e:a1:1c:49:77:b0:87:46:
                    c7:8a:9a:cb:91:38:2f:7e:47:26:20:2b:6a:09:17:
                    e6:64:d9:da:b6:47:5c:31:66:85:6a:fd:91:ff:37:
                    04:f6:fe:d8:1c:75:d7:58:9a:c4:fc:52:ee:9c:20:
                    27:5d:90:4d:3f:90:6b:18:23:a0:9d:52:71:ec:e0:
                    fe:56:09:e2:09:f3:62:82:77:51:56:a6:ef:10:a3:
                    61:f9:e7:b3:0c:18:cb:2c:0a:5a:e3:00:e7:e5:5c:
                    6a:37:3a:4a:ba:ae:c9:18:89:aa:cf:4e:57:a0:98:
                    bd:39:f4:c7:54:c3:5c:18:ca:9c:5d:12:12:87:6c:
                    bc:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:6E:95:29:D8:E3:51:35:FD:28:78:9B:1C:43:61:BA:99:1C:BC:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/1510a2ec-05f4-332e-b043-9ce52f53b418.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/0538ef3c-e342-4e27-a075-8167bc73c054.crl

            X509v3 Authority Key Identifier:
                keyid:3D:AC:2D:38:4E:48:06:E1:5D:2B:A3:84:D6:1D:D6:10:85:CE:33:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.231.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:8f:aa:6e:e1:4a:68:84:92:99:50:12:3d:1a:f8:9f:50:a3:
         6d:df:69:75:8c:82:b7:9b:92:b3:94:34:40:06:e7:3c:29:80:
         00:d1:98:8c:48:d3:9e:e7:fe:c0:08:b6:c5:6d:fe:49:53:5f:
         21:81:df:08:1a:bc:1d:70:c3:44:4a:e6:12:bf:8d:e6:53:13:
         5f:72:c2:0f:a7:bd:a6:5f:82:66:32:b9:0d:10:24:21:f4:a8:
         4f:36:59:48:ed:e3:cd:f2:9d:0d:5f:88:e1:bd:cd:95:01:7f:
         0a:00:ad:a4:2a:07:c1:a7:a5:04:14:6a:6e:34:00:85:cc:eb:
         c1:0e:7d:ab:15:0e:f9:63:e6:1f:e3:42:a6:05:d1:93:1b:89:
         d7:1b:f9:f1:ea:63:45:86:46:42:b4:8e:03:e6:8f:6e:c9:54:
         3d:6b:16:cd:86:8f:49:0d:1b:9a:50:b9:27:9a:fe:9c:69:89:
         63:ba:68:00:42:e9:d9:81:5d:36:08:58:35:e5:d3:ce:9b:ab:
         33:89:2c:7f:c6:0c:e8:af:35:2d:da:38:c3:2e:79:d5:24:20:
         83:e8:4a:77:dd:3d:ad:5c:79:0e:e3:88:93:86:cd:16:75:23:
         2f:3e:54:ba:75:4f:ca:e0:75:8d:ed:b2:44:4d:73:9a:0c:00:
         47:39:3f:3e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyqJxhQFOJrQvWIXFAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDUzOGVmM2MtZTM0Mi00ZTI3LWEwNzUtODE2N2JjNzNj
MDU0MB4XDTI2MDEyNzE0MDAzNloXDTI2MDQyNzEzMDAzNlowLzEtMCsGA1UEAxMk
NzEwNjIyNDUtMTFiOS00ZTdlLTlhMGEtMzk5ODkzM2JjNjM2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqTnDcEioMkIJlknSYQUbm0auWqQaLEewUcqb
XDriVuDQoh81ZXAzC/aP0+GU+wdLbnEzcgi2uC0gVgSFGIaXP1G48yJjfAlofGYC
RcNVl87XTPUzu1FfpVXt3fmqmV/hPr4y8o+x/fZ0sIzkLsoOKSdSI7LvtzIUuH4l
jJb/bqEcSXewh0bHiprLkTgvfkcmICtqCRfmZNnatkdcMWaFav2R/zcE9v7YHHXX
WJrE/FLunCAnXZBNP5BrGCOgnVJx7OD+VgniCfNigndRVqbvEKNh+eezDBjLLApa
4wDn5VxqNzpKuq7JGImqz05XoJi9OfTHVMNcGMqcXRISh2y8dQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIhulSnY41E1/Sh4mxxDYbqZHLxxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wNTM4
ZWYzYy1lMzQyLTRlMjctYTA3NS04MTY3YmM3M2MwNTQvMTUxMGEyZWMtMDVmNC0z
MzJlLWIwNDMtOWNlNTJmNTNiNDE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDUzOGVmM2MtZTM0Mi00ZTI3LWEw
NzUtODE2N2JjNzNjMDU0LzA1MzhlZjNjLWUzNDItNGUyNy1hMDc1LTgxNjdiYzcz
YzA1NC5jcmwwHwYDVR0jBBgwFoAUPawtOE5IBuFdK6OE1h3WEIXOM4IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8wNTM4ZWYzYy1lMzQyLTRlMjctYTA3NS04MTY3
YmM3M2MwNTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFGOdAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIyPqm7hSmiEkplQEj0a+J9Qo23faXWMgrebkrOUNEAG5zwpgADRmIxI
057n/sAItsVt/klTXyGB3wgavB1ww0RK5hK/jeZTE19ywg+nvaZfgmYyuQ0QJCH0
qE82WUjt483ynQ1fiOG9zZUBfwoAraQqB8GnpQQUam40AIXM68EOfasVDvlj5h/j
QqYF0ZMbidcb+fHqY0WGRkK0jgPmj27JVD1rFs2Gj0kNG5pQuSea/pxpiWO6aABC
6dmBXTYIWDXl086bqzOJLH/GDOivNS3aOMMuedUkIIPoSnfdPa1ceQ7jiJOGzRZ1
Iy8+VLp1T8rgdY3tskRNc5oMAEc5Pz4=
-----END CERTIFICATE-----
Generated at Fri Feb 27 12:41:18 2026 by rpki-client