Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1/564f16c6-fbe1-34c9-9e12-1d10d74d59f0.roa
File:                     564f16c6-fbe1-34c9-9e12-1d10d74d59f0.roa (raw, json)
Hash identifier:          GirRxCLng191kMM6buOqY89JTtWg9eKJv3bHUHJLTfk=
Subject key identifier:   23:10:7F:63:CC:E3:74:9A:07:9A:E2:4D:16:FF:0E:2F:2A:55:77:C7
Certificate issuer:       /CN=4a39f160-9ce8-488c-8af5-e292b7a545c1
Certificate serial:       010D0C9F4328584A18954C2C41523C32A62B21BF
Authority key identifier: 09:49:32:1A:C7:49:22:7F:8D:77:5E:DC:47:A6:5D:CC:E7:34:D3:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1/564f16c6-fbe1-34c9-9e12-1d10d74d59f0.roa
Signing time:             Fri 06 Jun 2025 01:00:50 +0000
ROA not before:           Fri 06 Jun 2025 01:00:50 +0000
ROA not after:            Thu 04 Sep 2025 01:00:50 +0000
asID:                     30722
IP address blocks:        47.53.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1/4a39f160-9ce8-488c-8af5-e292b7a545c1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1/4a39f160-9ce8-488c-8af5-e292b7a545c1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:18:95:4c:2c:41:52:3c:32:a6:2b:21:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a39f160-9ce8-488c-8af5-e292b7a545c1
        Validity
            Not Before: Jun  6 01:00:50 2025 GMT
            Not After : Sep  4 01:00:50 2025 GMT
        Subject: CN=20ab3731-3c28-4342-b9ce-50d2a5384851
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:1b:03:da:85:09:83:43:b2:54:37:a6:2a:ac:
                    9c:b2:67:f1:f0:b1:64:30:dd:eb:5f:82:6c:b0:23:
                    1f:d6:5d:8a:8a:cd:3f:d7:f5:ca:a5:53:e0:3b:88:
                    a0:5a:ad:65:5d:95:51:57:10:99:34:7b:8e:db:39:
                    33:ae:8a:f5:e1:aa:6a:19:42:ff:f1:af:dc:79:2f:
                    fa:05:f9:d9:55:16:ed:63:7f:f3:8a:5e:3c:76:cc:
                    49:31:25:d9:d5:d9:6e:2c:1f:ca:f0:cc:82:0c:16:
                    91:a5:82:73:aa:1d:61:c7:aa:1b:2f:be:40:00:d2:
                    46:12:20:30:7c:82:36:91:04:6d:72:22:b2:bf:97:
                    a4:92:23:be:00:67:54:da:ea:7a:e0:0c:57:d1:83:
                    92:7f:04:3a:de:9e:36:5e:f7:7b:74:1f:2b:39:18:
                    1a:95:1c:79:d0:5d:00:21:39:83:80:d9:5b:05:64:
                    9a:46:24:67:c7:b2:83:fa:b7:32:a7:fa:79:f8:ac:
                    f2:cd:63:c2:2e:00:cf:4e:e5:ef:a5:38:2c:18:ea:
                    ad:cf:df:ef:7c:ef:f2:3c:21:c5:f7:fe:e9:ee:71:
                    79:ba:cc:3c:0d:5d:13:b3:3d:be:53:69:72:4c:00:
                    a9:8c:8b:d8:89:49:71:83:a3:cc:08:0e:78:74:73:
                    0a:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:10:7F:63:CC:E3:74:9A:07:9A:E2:4D:16:FF:0E:2F:2A:55:77:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1/564f16c6-fbe1-34c9-9e12-1d10d74d59f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1/4a39f160-9ce8-488c-8af5-e292b7a545c1.crl

            X509v3 Authority Key Identifier:
                keyid:09:49:32:1A:C7:49:22:7F:8D:77:5E:DC:47:A6:5D:CC:E7:34:D3:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.53.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:d6:a0:04:73:66:2c:e8:e9:a0:60:f7:14:9c:f3:ca:4b:ad:
         38:c3:fa:1a:45:0f:7e:50:d3:25:d6:b5:14:a9:7d:93:34:2d:
         da:f9:7d:42:dd:25:0e:ed:02:4a:20:af:8e:df:8f:c2:ed:70:
         6c:46:f4:0a:27:37:56:ad:5b:56:3a:81:f4:ea:11:7e:60:cd:
         3a:a5:69:a4:de:08:35:ab:c8:a6:38:a5:d3:d6:74:c0:ec:ab:
         81:f3:2f:63:ac:1e:ea:91:88:76:b2:c4:38:fd:95:07:ad:15:
         7b:bb:80:88:5a:6c:d3:21:b0:d8:7d:cc:c5:3f:89:77:50:92:
         ab:11:2e:11:b2:55:2b:74:30:e7:07:d2:74:88:d7:7a:85:c3:
         76:7c:4b:81:eb:c2:27:9f:de:4b:2c:a9:66:b5:bb:2f:c1:6d:
         04:59:d8:91:d9:36:2b:a9:c9:05:28:ca:53:16:8b:f6:73:30:
         57:7c:ed:92:18:52:65:f6:51:d3:c2:93:42:8e:34:22:96:0f:
         2e:ae:3e:b2:78:15:c3:fe:94:30:89:0c:2b:73:eb:ae:8c:fc:
         f4:db:dd:b8:de:b3:cd:22:5b:f7:64:54:a7:fe:aa:e8:b1:7b:
         e8:38:be:2c:a0:d2:89:59:91:f2:84:68:98:c5:43:94:9e:1f:
         59:8f:39:60
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoYlUwsQVI8MqYrIb8wDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGEzOWYxNjAtOWNlOC00ODhjLThhZjUtZTI5MmI3YTU0
NWMxMB4XDTI1MDYwNjAxMDA1MFoXDTI1MDkwNDAxMDA1MFowLzEtMCsGA1UEAxMk
MjBhYjM3MzEtM2MyOC00MzQyLWI5Y2UtNTBkMmE1Mzg0ODUxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmBsD2oUJg0OyVDemKqycsmfx8LFkMN3rX4Js
sCMf1l2Kis0/1/XKpVPgO4igWq1lXZVRVxCZNHuO2zkzror14apqGUL/8a/ceS/6
BfnZVRbtY3/zil48dsxJMSXZ1dluLB/K8MyCDBaRpYJzqh1hx6obL75AANJGEiAw
fII2kQRtciKyv5ekkiO+AGdU2up64AxX0YOSfwQ63p42Xvd7dB8rORgalRx50F0A
ITmDgNlbBWSaRiRnx7KD+rcyp/p5+KzyzWPCLgDPTuXvpTgsGOqtz9/vfO/yPCHF
9/7p7nF5usw8DV0Tsz2+U2lyTACpjIvYiUlxg6PMCA54dHMKAQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCMQf2PM43SaB5riTRb/Di8qVXfHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTM5
ZjE2MC05Y2U4LTQ4OGMtOGFmNS1lMjkyYjdhNTQ1YzEvNTY0ZjE2YzYtZmJlMS0z
NGM5LTllMTItMWQxMGQ3NGQ1OWYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEzOWYxNjAtOWNlOC00ODhjLThh
ZjUtZTI5MmI3YTU0NWMxLzRhMzlmMTYwLTljZTgtNDg4Yy04YWY1LWUyOTJiN2E1
NDVjMS5jcmwwHwYDVR0jBBgwFoAUCUkyGsdJIn+Nd17cR6ZdzOc0054wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy80YTM5ZjE2MC05Y2U4LTQ4OGMtOGFmNS1lMjky
YjdhNTQ1YzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFLzWAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACTWoARzZizo6aBg9xSc88pLrTjD+hpFD35Q0yXWtRSpfZM0Ldr5fULd
JQ7tAkogr47fj8LtcGxG9AonN1atW1Y6gfTqEX5gzTqlaaTeCDWryKY4pdPWdMDs
q4HzL2OsHuqRiHayxDj9lQetFXu7gIhabNMhsNh9zMU/iXdQkqsRLhGyVSt0MOcH
0nSI13qFw3Z8S4Hrwief3kssqWa1uy/BbQRZ2JHZNiupyQUoylMWi/ZzMFd87ZIY
UmX2UdPCk0KONCKWDy6uPrJ4FcP+lDCJDCtz666M/PTb3bjes80iW/dkVKf+quix
e+g4viyg0olZkfKEaJjFQ5SeH1mPOWA=
-----END CERTIFICATE-----
Generated at Sun Jun 15 18:42:25 2025 by rpki-client